Sit down for this one, because I'm about to say something that doesn't come out of my mouth very often: Republicans in Congress got together, agreed on a bill, and it actually has teeth. The House Energy & Commerce Committee just unveiled the SECURE Data Act — that's the "Securing and Establishing Consumer Uniform Rights and Enforcement over Data Act" for you acronym lovers — and it goes right at Big Tech's favorite hobby: hoarding every last scrap of your personal information like a Silicon Valley dragon sitting on a pile of digital gold.

I know. I had to read it twice, too.

Representative Joyce of Pennsylvania introduced the bill on April 21, 2026, and for once, the GOP privacy working group actually worked. The bill gives you — yes, you, the regular American who's been getting data-mined since the Obama administration — five enforceable rights: access your personal data, correct it, delete it, port it to another service, and opt out of targeted advertising and data sales. You know, the stuff Europeans have had for years while we've been out here getting served ads for things we whispered about in our kitchens.

But here's where it gets fun. The SECURE Data Act requires companies to get your explicit consent before they touch what the bill calls "sensitive data" — and that list is long. We're talking racial and ethnic origin, religious beliefs, health diagnoses, sexual orientation, citizenship status, genetic data, biometric data, children's data, and precise geolocation within 1,750 feet. In other words, all the stuff Big Tech has been vacuuming up without asking.

And if you're a data broker — one of those creepy outfits that makes its money selling your information to whoever's buying — you've got 12 months to register with the FTC. The FTC then has 18 months to build a public, searchable registry so Americans can actually see who's trading their data like baseball cards. Data brokers are defined as controllers collecting data from non-clients who derive 50% or more of their annual revenue from data sales. In other words, the companies whose entire business model is you.

The bill applies to entities collecting data on 200,000 or more consumers annually with $25 million or more in revenue, or those tracking 100,000-plus consumers and getting 25% or more of their revenue from selling your data. So your local bakery's email list is safe. Google? Not so much.

Companies also have to disclose when your personal data is being processed in or sold to China, Russia, or other designated foreign adversaries. Because apparently that's been happening, and apparently nobody thought we should know about it. Wonderful.

Now, the enforcement side. The FTC gets primary jurisdiction, and state attorneys general can bring civil actions after notifying the feds. There's a 45-day cure period — meaning companies get a chance to fix violations before the hammer drops — and violations get treated as FTC Act Section 5 violations. The bill preempts the state-by-state patchwork of privacy laws, which was frankly a mess that only benefited the lawyers billing $800 an hour to interpret them.

Consumer rights and data security provisions kick in one year after enactment. General provisions take effect after two years. The bill also repeals the Video Privacy Protection Act — a relic from 1988 that was designed to keep people from finding out what VHS tapes you rented from Blockbuster.

Is the bill perfect? No. Privacy hawks will gripe about the lack of a private right of action, and some critics argue preempting stronger state laws is a step backward. Fair points. But here's the thing: we've been waiting for a comprehensive federal privacy law for over a decade, and every single attempt has died in committee because Republicans and Democrats couldn't agree on what day of the week it was.

This time, the GOP came unified. They put a bill on the table that takes on data hoarding, puts consumers in the driver's seat, and forces companies to tell you when your data is being shipped to Beijing. That's not nothing. That's a win.

I'll believe it when it hits the President's desk, but for now? Credit where it's due. The GOP did something. Mark the calendar.