The American Personal Data Privacy and Control Act

This bill would establish nationwide privacy protections for personal data collected by technology companies, giving individuals the right to access, correct, transfer, and delete their data; opt out of its sale, targeted advertising, and discriminatory uses; and receive clear notice about collection and retention practices. Covered companies would be required to minimize data collection, obtain affirmative consent before processing sensitive information, maintain reasonable security safeguards, and promptly notify consumers and the Federal Trade Commission of significant breaches. The Federal Trade Commission and state attorneys general would enforce the law, with protections for legitimate law-enforcement access and small businesses through scaled compliance requirements.