Sponsors
The bill strengthens privacy and safety for Members of Congress, designated staff, and other at-risk individuals by forcing rapid takedowns and restricting commercial sale of sensitive data, at the cost of increased compliance burdens, reduced public access to certain official information, and the risk of legal challenges over free speech and disclosure exceptions.
Members of Congress, designated staff, and their immediate family can have sensitive personal data removed from federal records and websites within 72 hours, and applicable legislative officers can submit bulk lists to streamline protections and reduce individual administrative burden.
At-risk individuals are protected from commercial dissemination because data brokers are prohibited from knowingly selling or licensing covered personal information, reducing unwanted exposure and potential misuse of sensitive data.
Affected at-risk individuals have a private right of action to seek injunctive or declaratory relief if their covered information is published in violation of the law, creating an enforcement mechanism beyond administrative remedies.
Broad removal and transfer prohibitions could limit public access to information about public officials and their family members, reducing transparency and hindering public oversight of elected representatives.
The 72-hour takedown requirement, ongoing delisting obligations, and transfer bans create compliance costs and operational burdens for government agencies, businesses, and data brokers.
The statute's strong protections may be challenged as overbroad under the First Amendment, producing legal uncertainty and potential costly litigation for the government, media, and private parties.
Based on analysis of 2 sections of legislative text.
Defines who counts as "at-risk" and which personal identifiers and location data are treated as covered information, with an exception for legally required candidate filings.
Introduced September 17, 2025 by Ronald Lee Wyden · Last progress September 17, 2025
Defines who is an "at-risk individual" (Members of Congress, their close family/household, designated congressional employees, candidates, and former Members) and what counts as their sensitive personal information, such as home address, personal contact info, financial identifiers, precise geolocation, and children’s school or route details. It also defines related terms like "covered employee," incorporates the Federal Election Campaign Act's definition of "candidate," and begins to define "data broker," while carving out an exception for information already required to be filed with election authorities or by law.