CMT: Examining Legislation to Establish a Federal Comprehensive Privacy and Data Security Law

The House Committee on Energy and Commerce held a legislative hearing on June 4, 2026, to examine the proposed Secure Data Act, a federal comprehensive privacy and data security law. The discussion focused on the need for a uniform national privacy standard to replace the current patchwork of 22 state laws, with proponents emphasizing the benefits for businesses, especially small businesses, in reducing compliance burdens and fostering innovation. Witnesses highlighted the Act's consensus-based approach, built on existing state laws, and its provisions for consumer rights such as data access, correction, deletion, and opt-out options for data sale and targeted advertising. However, several members and witnesses criticized the bill for lacking strong data minimization rules, insufficient protections for sensitive data, absence of a private right of action, and broad preemption of stronger state laws, which they argued could weaken consumer privacy and civil rights protections. The hearing also addressed concerns about enforcement mechanisms, the impact on AI and children's data privacy, and the balance between protecting consumers and enabling business growth. No specific contract awards, RFPs, or procurement decisions were discussed during the hearing.