A newly introduced Republican-backed proposal seeks to standardize data privacy rules nationwide, raising concerns over whether federal law would override stricter state protections.
By yourNEWS Media Newsroom
House Republicans on Wednesday introduced two federal data privacy measures designed to create a unified national framework governing how companies collect, use, and share consumer information, setting off renewed debate over the balance of authority between federal and state governments.
The proposals—known as the SECURE Data Act and the GUARD Financial Data Act—would establish federal standards for data handling practices across industries, including financial services and broader commercial data use.
According to the legislative text, the SECURE Data Act outlines requirements for how companies manage consumer data, including provisions related to data collection, usage, and disclosure. The GUARD Financial Data Act focuses more narrowly on financial information, placing limits on access to sensitive data and restricting how third parties can obtain or share it without appropriate transparency.
The introduction of the bills has intensified discussion surrounding federal preemption, a legal doctrine that allows federal law to supersede state-level regulations. As explained in a Congressional Research Service report, such provisions can prevent states from enforcing or adopting stricter rules once a federal standard is in place.
Privacy advocates argue the proposed legislation could significantly weaken existing protections. Analysts have warned that federal preemption clauses may override stronger state laws, limiting states’ ability to enforce more robust safeguards.
Alan Butler, executive director and president of the Electronic Privacy Information Center, said the SECURE Data Act contains a “sweeping preemption provision” that would “invalidate every single state privacy law” along with related consumer protections. He further stated the measure would “take away the rights of both consumers and state enforcement authorities to bring actions under existing state laws,” describing it as a “massive step backward” for privacy protections. Butler also said the bill “does not include any meaningful privacy protections” and warned that it would allow companies to broadly collect and use data as long as those practices are disclosed.
Republican lawmakers behind the proposal defended the legislation, stating it would clarify and strengthen consumer protections. In a joint release, Kentucky Rep. Brett Guthrie and Pennsylvania Rep. John Joyce said the bill “establishes clear, enforceable protections so that Americans remain in charge of their own data.” They added that the framework was developed through a working group process aimed at building consensus and incorporating stakeholder input.
The effort comes as states continue to adopt their own data privacy laws, creating a complex regulatory landscape. More than 20 states, including California, Virginia, and Texas, have enacted comprehensive privacy statutes, each with varying enforcement mechanisms and consumer rights.
California’s framework, governed by the California Privacy Rights Act, is widely considered among the most stringent. It grants residents rights to access, correct, delete, and opt out of the sale or sharing of their personal information.
Industry pressure has played a role in the push for federal legislation. Technology companies have increasingly advocated for a single national standard to replace the current patchwork of state laws. In 2024, tech firms spent a record $85.6 million on lobbying efforts, according to Axios. Companies have cited compliance complexity and increased legal exposure stemming from differing state requirements.
The introduction of the privacy bills aligns with broader Republican-led efforts to establish federal oversight in the technology sector. Lawmakers have pushed for national frameworks addressing digital regulation, while in March, President Donald Trump’s administration rolled out a legislative initiative focused on artificial intelligence, aimed at protecting communities and addressing concerns about censorship.
Congress has repeatedly attempted to pass comprehensive federal privacy legislation, though efforts have stalled. In 2024, the American Privacy Rights Act advanced with bipartisan backing before failing to move forward in committee, leaving the issue unresolved as states continue to expand their own regulatory regimes.