Bill > S2029

This bill, known as the "My Body, My Data Act of 2025", establishes comprehensive privacy protections for personal reproductive and sexual health information. The legislation requires regulated entities (businesses, organizations, and certain carriers) to minimize data collection, only gathering and retaining such sensitive information that is strictly necessary to provide a specific requested service. Individuals are granted explicit rights to access, correct, and delete their personal reproductive or sexual health information, with entities required to provide these options through easy-to-use online mechanisms within 15 days of a request and without charging fees. The bill mandates that companies create and prominently publish clear privacy policies detailing their data practices, including what information is collected, from whom, and for what purposes. Entities are prohibited from retaliating against individuals who exercise these privacy rights, such as by denying services or charging different rates. Enforcement is entrusted to the Federal Trade Commission, which can treat violations as unfair or deceptive practices, and individuals are also empowered to bring civil actions with potential damages ranging from $100 to $1,000 per violation. The legislation explicitly protects First Amendment freedoms, does not preempt stronger state privacy laws, and excludes certain healthcare entities already covered by HIPAA from its scope, thereby creating a robust framework for protecting sensitive personal health information.

Transportation and Infrastructure

https://www.congress.gov/bill/119th-congress/senate-bill/2029/all-info