Consumer Data Privacy and Security Act of 2026

This bill sets national rules for how companies, phone and internet carriers, and nonprofits collect and use people's personal data. Businesses would need a person's consent to collect or use their data, with some exceptions, and would need clear, opt-in consent for sensitive data such as health information, precise location, or Social Security numbers. People could ask to see, correct, or delete their data, and businesses would have to post privacy policies and keep data security programs. Very large data handlers would have to name a privacy officer. The Federal Trade Commission and state attorneys general could enforce the law, including civil penalties of up to $42,530 per affected person for knowing violations.

Full text and official record on Congress.gov

Sponsors

• Jerry Moran Republican sponsor
• 0 cosponsors