In April 2026, House Republicans advanced two key data privacy bills aimed at establishing a single federal standard for how companies handle Americans’ personal data, seeking to preempt the existing patchwork of state laws. Concurrently, Congress extended Section 702 of the Foreign Intelligence Surveillance Act (FISA) through short-term measures amid stalled reform negotiations.
New National Data Privacy Legislation
Republican Representatives John Joyce (R-PA) and Bill Huizenga (R-MI) introduced complementary bills targeting consumer and financial data protections. The Securing and Establishing Consumer Uniform Rights and Enforcement over Data Act (SECURE Data Act, H.R. 8413) aims to create a federal framework for consumer data privacy, including data minimization, a data broker registry, and consumer rights to access and delete information. Enforcement would be limited to government agencies like the Federal Trade Commission and state attorneys general, with no private right of action for individuals to sue companies directly.
The Guidelines for Use, Access, and Responsible Disclosure of Financial Data Act (GUARD Financial Data Act, H.R. 8398) focuses on data protections for financial institutions, requiring affirmative opt-in consent before disclosing sensitive personal information.
Both bills, supported by key Republican committee chairs Brett Guthrie (R-KY) and French Hill (R-AR), would replace existing state privacy laws with a unified federal standard. Industry groups including the US Chamber of Commerce, TechNet, and the National Retail Federation backed the proposals, arguing that the current patchwork of state rules imposes compliance burdens, especially on smaller businesses.
Opposition from Advocates and Democrats
Consumer advocates, civil society organizations, and Democratic lawmakers criticized the legislation for weakening privacy protections. The California Privacy Protection Agency described the bills as a step backward, noting they would reduce state-level consumer safeguards. Similarly, privacy experts pointed out that the data minimization provisions rely on disclosures already mandated by existing law, limiting their practical impact.
Democrats on the House Energy and Commerce Committee, led by Ranking Member Frank Pallone (D-NJ), argued that the bills prioritize corporate interests over strong consumer privacy, highlighting the lack of private enforcement and broad federal preemption.
Section 702 FISA Extension and Surveillance Debate
Simultaneously, Congress passed two consecutive short-term extensions of Section 702 of FISA, which allows warrantless surveillance of foreign communications but has raised civil liberties concerns. Earlier, the House approved a three-year reauthorization excluding a bipartisan-supported warrant requirement for accessing Americans’ data collected under Section 702. To secure conservative support, unrelated provisions, such as a ban on the Federal Reserve issuing a central bank digital currency, were attached.
The Senate responded with brief extensions, providing lawmakers additional time to negotiate reforms before the current authority expires.
Why it matters
The proposed federal data privacy framework would mark a significant shift from the growing array of state privacy laws toward a single national standard, impacting how companies handle personal data across the United States. The balance between regulatory certainty for businesses and robust consumer protections remains a contentious issue. Meanwhile, ongoing debates about Section 702’s reauthorization reflect persistent tensions over surveillance authority, civil liberties, and national security.
Background
At least 20 states have enacted comprehensive data privacy laws, creating diverse regulatory obligations for companies operating nationally. The federal bills seek to streamline compliance but risk overriding stronger state protections. Section 702 of FISA permits intelligence agencies to collect foreign communications automatically, but its use involving Americans’ data has sparked bipartisan calls for reform, particularly regarding warrant requirements and oversight.
Sources
This article is based on reporting and publicly available information from the following source:
Read more Digital Policy stories on Goka World News.