About

House Republicans introduce SECURE Data Act to create a federal privacy standard

Published
Score
12

Why it matters

House Republicans introduced the SECURE Data Act on April 22, 2026, as a comprehensive federal privacy bill designed to supplant the current state-by-state regulatory framework with a single national standard. Led by Rep. Brett Guthrie (R-KY), chair of the House Energy & Commerce Committee, and co-sponsored by Rep. John Joyce (R-PA), the legislation would establish new consumer rights over personal data, impose data-security and minimization obligations on covered businesses, and vest enforcement authority in the Federal Trade Commission and state attorneys general. The bill applies to companies meeting specified data-use and revenue thresholds and grants consumers rights to access, correct, delete, and port their data, along with the ability to opt out of targeted advertising, data sales, and certain profiling activities. It includes heightened protections for sensitive data through opt-in consent requirements and special parental-consent rules for minors, and mandates FTC registration for data brokers.

The bill's text and specific threshold requirements have not yet been made fully public. The scope of preemption over existing state privacy laws and the precise mechanics of the private right of action remain subject to interpretation pending official legislative materials.

The SECURE Data Act represents the most significant federal privacy push in years and directly engages the central unresolved question in U.S. tech policy: whether privacy regulation should operate through a unified federal standard or through an expanding patchwork of state laws. The bill's broad preemption language, combined with its provisions addressing data transfers to adversarial nations, positions it as substantially more expansive than most existing state regimes and politically contentious. Attorneys should monitor the bill's progress through committee and track any amendments to preemption scope and enforcement mechanisms, particularly provisions affecting private litigation rights and the treatment of state attorney general authority.

mail Subscribe to Privacy email updates

Primary sources. No fluff. Straight to your inbox.

Also on LawSnap