The bill strengthens protections for servicemembers and expands FTC and state enforcement against data brokers—improving safety and remedies for many people—at the cost of broader regulatory reach that will raise compliance costs, create legal uncertainty, and could inadvertently block some legitimate uses of data.
Military servicemembers (current and former) will face reduced risk of having their personal information transferred to adversary-controlled actors because the bill defines covered lists/nations and restricts downstream sharing (including contractual bans).
Consumers (including nonprofit consumers) gain stronger protection because the FTC can identify and pursue data brokers for unfair or deceptive practices—enabling injunctions, damages, and restitution—and the bill clarifies who counts as a data broker.
State governments and consumers benefit from expanded local enforcement because state attorneys general can bring parens patriae suits to obtain injunctions and consumer restitution, increasing enforcement resources and remedies.
Many businesses (data brokers, purchasers, and firms handling personal data) will face higher compliance costs and legal risk from broader definitions and expanded enforcement, costs that are likely to be passed on to consumers or reduce available services.
Ambiguity in key terms and the absence of detailed implementing rules or penalties (e.g., what counts as a “covered nation” or a “military servicemember list”) could create legal uncertainty and uneven enforcement for businesses and users.
Overbroad restrictions risk unintentionally blocking legitimate uses of data—such as research, benefits administration, recruiting, or state-government functions—if no clear exceptions or authorization processes are provided.
Based on analysis of 5 sections of legislative text.
Prohibits data brokers from selling or licensing non-public lists that identify servicemembers to covered foreign nations or entities they control, and gives the FTC enforcement authority.
Introduced April 29, 2025 by Bill Cassidy · Last progress April 29, 2025
Prohibits data brokers from selling, licensing, trading, or otherwise providing non-public lists that identify current or former U.S. military servicemembers to covered foreign nations or entities controlled by them, and requires data-broker contracts with third parties to bar onward transfers to those foreign actors. The Federal Trade Commission is given authority to enforce the prohibition as an unfair or deceptive practice, including rulemaking (final rule due within one year), civil enforcement in federal court, and coordination with state attorneys general. The Comptroller General must report to Congress within one year on enforcement, resource needs, and whether protections should be expanded.