House Committee Advances Privacy Bill

The legislation would establish baseline requirements for how companies collect, use, and share personal information. It aims to give individuals more control over their data, including rights to access, correct, and delete information held by organizations. The bill applies broadly across sectors, with some exemptions for small businesses and certain types of data.

Under the proposal, businesses would be required to provide clear notices about data practices and obtain consent before collecting sensitive information. Enforcement would be shared between a federal agency and state attorneys general, with penalties for noncompliance. The bill also includes provisions for independent oversight and periodic reviews of industry practices.

The committee approval represents a bipartisan effort to address longstanding gaps in U.S. data protection laws. Previous attempts at federal privacy legislation stalled over disagreements on preemption of state laws and enforcement mechanisms. This version includes compromises to broaden support while maintaining strong consumer safeguards.

Companies would have a transition period to align operations with new obligations, including updating privacy policies, training staff, and implementing internal oversight. Legal challenges are expected once the bill becomes law, particularly around scope and implementation timelines. Businesses are advised to assess current data handling practices in anticipation of final passage.