Congress should pass legislation to create a national privacy framework that streamlines regulation, preempts state laws, establishes basic consumer data rights, and minimizes the impact on innovation.

To Do: Create a National Privacy Framework

Congress should require companies to publish security policies to promote transparency with consumers.

To Do: Require Companies to Publish Security Policies

The country needs a grand bargain on data privacy legislation that empowers consumers but also reduces regulatory burdens.

It’s Time For a New Approach to Solving America’s Data Privacy Dilemma

It's Time For a New Approach to Solving America's Data Privacy Dilemma

Congress should require that law enforcement obtain a probable-cause warrant to access communications cloud service providers store.

To Do: Require Probable Cause to Access Communications Stored in the Cloud

Congress should pass the AI Incident Reporting and Security Enhancement Act to standardize the tracking of incidents from AI systems and monitor AI-specific vulnerabilities, which are not the same as cybersecurity vulnerabilities.

To Do: Pass the AI Incident Reporting and Security Enhancement Act

Congress should repeal and replace existing federal privacy laws with a common set of protections. We need comprehensive data privacy legislation that preempts state laws, improves transparency requirements, strengthens enforcement, and establishes a clear set of data privacy rights for Americans based on the sensitivity of the data and the context in which it is collected.

A Grand Bargain on Data Privacy Legislation for America

Given the scope and importance of rules governing government hacking, Congress should oversee changes to ensure they respect civil liberties, do not weaken cybersecurity, and achieve the desired results for law enforcement, Alan McQuinn and Daniel Castro write in the Christian Science Monitor.

Congress Needs to Check Government Hacking Powers

A reasonable compromise on federal data privacy should protect and promote innovation by minimizing compliance costs and restrictions on data use, as well as address concrete privacy harms, improve transparency requirements, and strengthen oversight and enforcement.

Comments Before the House Committee on Energy and Commerce Regarding Data Privacy

Congress should craft federal privacy legislation that protects consumers without undermining the responsible use of data that drives innovation, supports small businesses, and fuels economic growth. A balanced approach—emphasizing clear rules, transparency, and compliance over punitive enforcement—will safeguard privacy while preserving data’s value to society.

To Do: Establish a National Standard for Data-Breach Notification

Recommendation

Details

Editors’ Recommendations

Why We Need a Robust National Standard for Data Breach Notification

Related

To Do: Create a National Privacy Framework

To Do: Require Companies to Publish Security Policies

It’s Time For a New Approach to Solving America’s Data Privacy Dilemma