Health and Location Data Protection Act of 2026

The Health and Location Data Protection Act of 2026 prohibits data brokers from buying, selling, or sharing personal location and health information, while allowing exceptions for authorized disclosures, HIPAA-compliant activities, and newsworthy public interest reporting. The Federal Trade Commission is tasked with defining specific data categories and enforcing these rules, with penalties including civil fines up to 15 percent of a company's revenue and the ability for the FTC, state attorneys general, and private individuals to sue for violations. This legislation applies to entities that trade data collected from others rather than directly from individuals, and it preempts only state laws that require the disclosure of data this bill forbids.