Online Privacy Act of 2026

The Online Privacy Act of 2026 establishes a new Digital Privacy Agency to enforce comprehensive privacy protections for individuals in the United States. The bill requires companies that collect personal information to provide consumers with rights to access, correct, delete, and port their data, while also prohibiting discriminatory processing and requiring explicit consent for behavioral personalization. Covered entities must implement data minimization practices, maintain detailed access records for employees, and notify individuals of data breaches within 14 days. The legislation creates a new federal agency with enforcement powers, including the ability to issue cease-and-desist orders, impose civil penalties, and conduct investigations, while also transferring certain Federal Trade Commission privacy enforcement authorities to this new agency.