The bill increases privacy and safety for Members of Congress, designated staff, and their families by removing and restricting commercial sales of sensitive data, but it also creates compliance costs, legal ambiguities, risks to press reporting, and limited protection where election disclosures are exempt.
Members of Congress, designated staff, and their immediate family members can request removal of sensitive personal information from federal records and websites within 72 hours, reducing their exposure to doxxing, harassment, and safety threats.
The bill bars data brokers from knowingly buying or selling covered information about protected persons, limiting commercial monetization of legislators' and their families' sensitive data.
Enforcement authority is granted to the U.S. Attorney General and state attorneys general, giving individuals legal remedies and increasing the likelihood of compliance with removal and sale prohibitions.
News outlets, publishers, and journalists may face increased legal risk and removal demands when reporting on at-risk individuals, which could chill investigative and public-interest reporting about public officials.
Websites, businesses, and data brokers will need to search for and remove covered information within 72 hours, imposing compliance costs and operational burdens that may disproportionately hurt small online platforms.
The broad protection scheme and vague boundaries of 'covered information' or 'public concern' could spark disputes and litigation over scope, increasing administrative burdens on agencies and courts.
Based on analysis of 2 sections of legislative text.
Defines sensitive personal data and at‑risk individuals and sets scope for protecting that information in public records while exempting required campaign filings.
Introduced September 17, 2025 by Ronald Lee Wyden · Last progress September 17, 2025
Creates definitions and scope for protecting highly sensitive personal information of "at‑risk" people connected to Members of Congress and certain covered employees from public disclosure in records, and defines commercial "data brokers." It identifies categories of covered personal data (home addresses, contact info, government IDs, financial account numbers, vehicle identifiers, precise geolocation, minor children’s identifiers, routes to schools or workplaces, etc.) and carves out disclosures already required by federal or state candidacy filings.