DATA Privacy Act

The DATA Privacy Act would establish comprehensive data privacy requirements for businesses that collect personal data from 50,000 or more individuals annually. It requires these "covered entities" to provide clear privacy notices, obtain opt-out consent for general data collection, and get affirmative consent for sensitive data like health information or precise location data. The bill gives individuals the right to access, correct, delete, and transfer their personal data while requiring businesses to implement data minimization practices and strengthen security measures. Larger companies would need to appoint privacy officers to oversee compliance, with enforcement handled by the Federal Trade Commission and state attorneys general.