Republican Data Privacy Bill Faces Criticism for Weakening State Protections

Congress is making another attempt to pass a national data privacy law, but the latest proposal from House Republicans has sparked significant controversy. While the bill introduces some new protections, privacy advocates warn it could weaken existing rights in several states and lacks key elements they deem necessary.

The SECURE Data Act was developed by a Republican data privacy working group led by Rep. John Joyce (R-PA). It was introduced alongside House Energy and Commerce Committee Chair Brett Guthrie (R-KY).

The bill would require companies to limit data collection to only what is necessary for their stated services. It also mandates that users be allowed to view and request the deletion of their personal information collected by websites.

Key Provisions of the SECURE Data Act

• Data Minimization: Companies must collect only the user data required to fulfill their promised services.
• User Access and Deletion Rights: Users can view what information websites have collected about them and request its deletion.
• State Preemption Concerns: While the bill introduces new federal protections, privacy advocates argue it could weaken stronger state-level privacy laws already in place.

Criticism from Privacy Advocates

Privacy advocates have criticized the bill for several reasons:

• It does not include a private right of action, meaning individuals cannot sue companies for violating the law.
• It lacks a clear definition of sensitive data, leaving room for interpretation and potential loopholes.
• It preempts state laws, which could strip protections in states with stronger privacy regulations, such as California and Colorado.

"This bill is worse than no standard at all because it would preempt stronger state laws and fail to provide meaningful protections for consumers." — Caitriona Fitzgerald, Deputy Director of the Electronic Privacy Information Center (EPIC)

Next Steps for the Bill

The SECURE Data Act has been introduced in the House, but its path to becoming law remains uncertain. The bill must navigate committee hearings, potential amendments, and a vote in both the House and Senate before it can be signed into law by the President. Privacy advocates are urging lawmakers to strengthen the bill by adding a private right of action and clearer definitions of sensitive data.