GOP finalizing draft national privacy law that would preempt states
Source: Politico
04/16/2026 12:36 PM EDT
House Republicans intend to release a draft national data privacy bill within the next two weeks that would preempt existing state laws, teeing up a fight with Democrats over where to set the ceiling for Americans data protection.
The Energy and Commerce Committee draft, which would preempt roughly 20 existing state laws, largely mirrors Kentucky regulations, according to a person who saw it and was not authorized to speak about it. The draft would not allow individuals to sue companies for violating their privacy rights, potentially limiting enforcement to government regulators such as state attorneys general or the Federal Trade Commission.
Democrats support a framework that allows people to bring individual lawsuits against companies that violate their privacy rights and allows states to implement tougher standards, arguing it helps ensure companies follow the law.
Two other people familiar with the committees plans, granted anonymity because they are not authorized to share details on the record, told POLITICO the draft should be released in the coming weeks, with a hearing expected in May. The two people said the draft would require companies to obtain consent before collecting sensitive data such as health information, location data, biometric information and most data belonging to children under 13.
Read more: https://www.politico.com/news/2026/04/16/gop-national-privacy-law-technology-00876794?utm_medium=twitter&utm_source=dlvr.it
magicarpet
(18,805 posts),... He would like a quick and emergency law written to circumvent any laws that might enhance or improve consumers privacy law protections.So that the data collection industries can be preemptively deregulated and protected from any civil tort or criminal law suits alleging privacy rights violations.
Your data is my data and now by hastily written law there is not a fucking thing you can do about it law. Pound sand suckers.
pat_k
(13,484 posts)So, stricter requirements are overridden?
I am betting this ceiling is pretty close to "violate privacy to your heart's content" as long as you have some fig leaf rationalization to hide behind.
They are already hellbent on protecting the tech sector against liability for any damage their services, products, and practices do to individuals, businesses, executive agencies, society, the economy, or any f-ing thing else