Comprehensive Federal Privacy Bill: “SECURE Data Act” Introduced By House Republicans

On April 22, 2026, the House Energy & Commerce Committee announced the introduction of “Securing and Establishing Consumer Uniform Rights and Enforcement Over Data Act” (the “SECURE Data Act”), a comprehensive federal privacy proposal intended to replace the current patchwork of state consumer privacy laws with a single national framework. While the bill largely adopts the consensus data privacy and security framework enacted by a majority of U.S. states, its significance lies less in the rights it creates and more in how it restructures the regulatory landscape.

The SECURE Data Act applies to businesses subject to the FTC Act as well as common carriers, subject to Title II of the Communications Act of 1934, that conduct business in the U.S. and meet either of these two thresholds: (1) processing or controlling the personal data of at least 200,000 U.S. consumers annually and have at least $25 million in annual gross revenue or (2) deriving 25% or more of gross revenue from the sale