{"id":3054,"date":"2026-04-24T14:47:21","date_gmt":"2026-04-24T14:47:21","guid":{"rendered":"https:\/\/owspakistan.com\/?p=3054"},"modified":"2026-04-24T14:47:21","modified_gmt":"2026-04-24T14:47:21","slug":"data-privacy-bill-secure-act-house-state-laws","status":"publish","type":"post","link":"https:\/\/owspakistan.com\/?p=3054","title":{"rendered":"A new Republican privacy bill could be \u2018worse than no standard at all\u2019"},"content":{"rendered":"
\n
\n

Congress is once again attempting to pass a national data privacy law. But while it would introduce new protections in some states, it would weaken privacy rights in others \u2014 and it\u2019s missing several elements that privacy advocates deem necessary.<\/p>\n<\/div>\n

\n

The SECURE Data Act<\/a> is the product of a Republican data privacy working group led by Rep. John Joyce (R-PA), who introduced the bill alongside House Energy and Commerce Committee Chair Brett Guthrie (R-KY). The proposal would require companies to collect only the user data they really need to perform the tasks they promise, let users see what information websites have on them and request its deletion, and require explicit opt in for collecting sensitive data like location or sexual orientation.<\/p>\n<\/div>\n

\n

The Federal Trade Commission and state attorneys general would be able to bring legal action against companies accused of violating the law. A separate bill, the GUARD Financial Data Act<\/a>, deals specifically with consumer financial data.<\/p>\n<\/div>\n

\n

This is the latest attempt in a years-long effort to pass federal privacy protections for digital consumers, after several prior iterations failed to get key congressional leaders on board<\/a>. In 2024, a planned meeting to discuss the last major bipartisan privacy proposal was abruptly cancelled<\/a> as the bill reportedly faced opposition from House Republican leadership. In a joint statement, Guthrie and Joyce said the working group aimed to \u201creset the discussion on comprehensive data privacy.\u201d<\/p>\n<\/div>\n

\n

The SECURE Data Act would provide some new protections for many Americans. Only about 20 states<\/a> so far have comprehensive data privacy laws, and many of these have received poor grades<\/a> from outside advocates.The SECURE Data Act would also create additional protections for data on teens aged 13 to 15, requiring parents\u2019 consent to process their information.<\/p>\n<\/div>\n

\n

But the bill does not let individuals sue over alleged privacy violations. It doesn\u2019t require sites to recognize universal opt-out mechanisms<\/a>, so users would need to proactively and continually limit collection. It also exempts pseudonymous data from certain protections, which some groups warn would create a loophole for targeted ads.<\/p>\n<\/div>\n

\n

Moreover, the bill seeks to preempt state laws that already offer equal or stronger protections \u2014 like California\u2019s, which created a new privacy agency and lets consumers take legal action against companies for certain data breaches, or Maryland\u2019s, which bans the sale<\/a> of sensitive data and serving targeted ads to teens under 18. The Future of Privacy Forum (FPF), whose members include tech platforms but says<\/a> its work is independent of individual stakeholders, writes that the bill<\/a> \u201cselects particular narrow approaches used by only a handful of states.\u201d<\/p>\n<\/div>\n

\n

FPF (which neither supports nor opposes the bill) says while the proposal goes beyond some of the narrowest state laws, it\u2019s \u201cconsistently narrower and less prescriptive\u201d than California\u2019s privacy requirements. Some definitions in the bill are also more limited than in many state laws, the group writes, such as that for \u201cbiometric data,\u201d which doesn\u2019t include data from audio or video recordings.<\/p>\n<\/div>\n

\n

Oregon, Delaware, Maryland, and Minnesota let consumers request the identity of third-party recipients of their personal information, according to FPF, and in Minnesota and Connecticut, users can \u201ccontest certain adverse profiling decisions\u201d \u2014 all of which would also likely be preempted.<\/p>\n<\/div>\n

\n
\n

It\u2019s \u201cbasically a green light for the tech industry to keep collecting whatever data they want from you\u201d<\/p>\n<\/div>\n<\/div>\n

\n

The Electronic Privacy Information Center (EPIC), which closely watches privacy law, has opposed the plan. \u201cThis bill would wipe out a huge range of privacy, security, online safety, and civil rights laws without providing any meaningful protections for Americans,\u201d EPIC deputy director and policy director Caitriona Fitzgerald says in a statement. \u201cA weak federal standard is worse than no standard at all.\u201d<\/p>\n<\/div>\n

\n

R.J. Cross, director of the Public Interest Research Group (PIRG) Our Online Life Program, calls it \u201cbasically a green light for the tech industry to keep collecting whatever data they want from you and doing whatever they want with it. Then it makes sure that no pesky state that may want to, you know, actually regulate what companies are doing can get in the way.\u201d Eric Null, director of the Center for Democracy and Technology\u2019s privacy and data project, warns it \u201cwould cement the harmful online data practices that Americans need and want a privacy law to fix, resulting in more data breaches, more intrusive data collection, more creepy advertising practices, and more business for data brokers.\u201d (The group receives funding from several large tech platforms but says<\/a> its supporters don\u2019t have influence over its priorities.)<\/p>\n<\/div>\n

\n

Conversely, business groups have lauded the law, including its preemption element. \u201cThe cost and complexity of tracking and complying with more than 20 state privacy laws are crippling small businesses, and some states\u2019 radical data restrictions are jeopardizing the digital tools that power small business growth,\u201d said Rob Retzlaff, executive director of the Connected Commerce Council, which advocates for small businesses but has also received funding from large tech platforms<\/a> like Amazon and Google. Several major industry groups including the US Chamber of Commerce, the National Retail Federation, and NetChoice, voiced their support. \u201cThe bill would end a confusing patchwork that harms consumers and small businesses,\u201d they said in a joint statement.<\/p>\n<\/div>\n

\n
\n

\u201cThe bill would end a confusing patchwork that harms consumers and small businesses\u201d<\/p>\n<\/div>\n<\/div>\n

\n

Democrats have historically opposed broad preemption of state privacy laws and supported a private right of action, and none are currently on board with the measure. Its sponsors are hoping to recruit them later, after the plan has passed out of the committee on a party line vote, according to CNBC<\/em><\/a>. FPF says that many things left out of the bill \u201care likely intended to create a margin for negotiations\u201d at that point.<\/p>\n<\/div>\n

\n

If the bill passes, FPF says that states would likely fight for their statutes to remain, arguing that their standards don\u2019t directly \u201crelate to\u201d the federal standard and should stand alone. California\u2019s privacy law, for example, \u201cmay be more difficult to fully preempt because it covers employee data, B2B data, and applicant data\u2014categories the federal bill exempts,\u201d FPF says.<\/p>\n<\/div>\n

\n

With midterm elections looming, the bill faces a tricky path forward. On paper, a federal privacy law is a significant and necessary step \u2014 but many fear this bill won\u2019t go the distance.<\/p>\n<\/div>\n

Follow topics and authors<\/strong> from this story to see more like this in your personalized homepage feed and to receive email updates.<\/span><\/p>\n