Bill > HR8014

This bill, titled the "Online Privacy Act of 2026," aims to establish comprehensive individual rights regarding personal information privacy and set security requirements for businesses that handle such data. It proposes the creation of a new government agency, the Digital Privacy Agency (DPA), to oversee and enforce these provisions. Key individual rights include the ability to access, correct, delete, and port personal data, as well as the right to human review of automated decisions and individual autonomy in how their data is used, particularly for behavioral personalization. The bill also mandates that "covered entities" (businesses that collect and process personal information online) implement data minimization practices, secure data properly, and notify individuals and the DPA in case of data breaches or misuse. It explicitly prohibits certain practices like "dark patterns" (deceptive design elements in privacy notices) and discriminatory data processing. The DPA will be headed by a Director and will have broad powers to investigate, issue rules, and take enforcement actions, including civil penalties and private rights of action for individuals. The bill also includes provisions for state enforcement and clarifies its relationship with existing federal privacy laws, generally aiming to provide stronger protections without superseding existing, more protective laws.

Business and Industry

https://www.congress.gov/bill/119th-congress/house-bill/8014/all-info