This bill, titled the My Body, My Data Act of 2025, limits how companies can collect, keep, use, and share personal reproductive or sexual health information. It defines that kind of information to include things like pregnancy, menstruation, ovulation, ability to conceive, whether a person is sexually active or had unprotected sex, use or purchase of contraceptives or medication abortion, reproductive surgeries (including abortion), location data tied to seeking services, and data inferred from non-health information.
The bill requires companies covered by the law to only collect, keep, use, or share such information when strictly necessary to provide a product or service an individual requested. It also requires companies to limit which employees or contractors can access this information.
People would have rights to access their reproductive or sexual health information that a covered entity holds, including where it came from, who it was shared with, and any inferences made about them. Covered entities must provide those records in both human-readable and machine-readable formats, allow correction of inaccurate information, and allow deletion of such information. Requests must be answered without undue delay and no later than 15 days. Entities may not charge fees to fulfill these requests.
The bill requires covered entities to publish a clear privacy policy describing their practices, categories of data collected, lists of specific third parties they share with or collect from, purposes for use and disclosure, how people can control their data, and protections against unauthorized disclosure. It also bans retaliation against someone who uses their rights under the Act (for example, refusing service or charging different prices because a person exercised a right).
Enforcement is through the Federal Trade Commission (FTC) treating violations as unfair or deceptive acts, and through private lawsuits. Individuals who win a suit may recover between $100 and $1,000 per violation per day or actual damages (whichever is greater), punitive damages, attorney fees, and other relief. The bill also makes pre-dispute arbitration agreements and pre-dispute class-action waivers unenforceable for disputes under the Act. The bill preserves First Amendment protections and does not preempt state laws that provide greater privacy protections.
No publicly available information.
Supporters would say the bill gives people control over sensitive reproductive and sexual health information by limiting unnecessary collection and sharing, requiring transparent privacy policies, and giving strong access, correction, and deletion rights. The bill also provides enforcement tools through the FTC and private suits, and protects people against retaliation when they exercise their rights.
No publicly available information.