On April 22, 2026, the House Energy & Commerce Committee released the Securing and Establishing Consumer Uniform Rights and Enforcement over Data Act (SECURE Data Act), a proposal that would establish a comprehensive federal framework for consumer privacy rights and personal data protection. The committee's release marks one of the most significant federal privacy developments in recent memory and reflects a renewed willingness in Congress to engage with the long-debated question of how personal data should be governed at the national level.
The SECURE Data Act arrives shortly after the March 19, 2026 introduction of House Bill 8014, the Online Privacy Act of 2026. Taken together, these measures signal meaningful congressional momentum toward a unified federal privacy standard. For years, businesses have navigated an increasingly complex patchwork of state privacy laws, each with its own definitions, consumer rights, and enforcement mechanisms. A comprehensive federal regime, particularly one with preemptive effect, could materially simplify compliance for organizations operating across multiple states, while at the same time introducing new substantive obligations that may diverge from any single existing state framework.
Although the precise contours of the SECURE Data Act will be shaped by committee markup, stakeholder input, and any subsequent legislative negotiation, its release should prompt regulated businesses to revisit their data governance posture now rather than later. Companies that collect, process, share, or sell consumer personal information should begin assessing how a federal regime governing consumer rights, data protection obligations, and enforcement could affect existing data practices and ongoing state-law compliance programs. Particular areas warranting early review include consumer rights request workflows, vendor and processor contracts, data minimization and retention practices, security safeguards, and internal accountability documentation.
Forward-looking organizations may also wish to monitor enforcement design choices in the bill, including the role of the Federal Trade Commission, the availability of state attorney general enforcement, and the potential for a private right of action. Each of these elements could meaningfully shift legal risk profiles and influence how compliance resources are allocated in the coming year.
This article is provided for general informational purposes only. Clients facing specific questions about how the SECURE Data Act or related federal proposals may affect their operations should seek tailored legal advice.