If you’ve been waiting for Washington to finally step in and clean up the data privacy patchwork, this might be the moment to watch. House Republicans this week unveiled a pair of bills aimed at doing something the industry has talked about for years: creating a single, national standard for how consumer data is collected, used, and protected.
At the center of the effort are two pieces of legislation. The SECURE Data Act focuses on how technology companies handle consumer data, while the GUARD Financial Data Act updates the Gramm-Leach-Bliley Act to reflect how financial data is actually used in 2026.
Together, the bills are designed to work in tandem, with one covering nonfinancial data and the other focused specifically on financial institutions, including banks, lenders, and by extension many organizations involved in collections.
Here’s what stands out:
- A national standard could replace the current patchwork of state laws. The bills would preempt many existing state privacy laws and establish a uniform framework, something industry groups have long pushed for as compliance has grown more complex across jurisdictions.
- Data minimization becomes a core requirement. Companies would be required to limit data collection to what is necessary for a defined purpose, a concept that appears repeatedly throughout both proposals.
- Consumers gain more control over their data. Both bills include rights for consumers to access, obtain, and request deletion of their data, along with the ability to opt out of certain uses like targeted advertising or data sales.
- Opt-in consent for sensitive data. Financial institutions would need affirmative consent before sharing or using sensitive personal information, raising the bar for how data is handled operationally.
- Expanded obligations for financial institutions. The GUARD Act would modernize GLBA by adding requirements around disclosures, data access, and even how institutions communicate their use of data and emerging technologies like AI.
The effort is notable not just for the policy, but for the politics behind it. The legislation is backed by leadership from both the House Energy and Commerce Committee and the Financial Services Committee, two groups that have historically taken different approaches to privacy regulation.
That said, the path forward is far from certain. Democrats have already raised concerns about federal preemption and whether the proposals go far enough to protect consumers. And as with past attempts at comprehensive privacy legislation, bipartisan support will likely determine whether these bills move forward.
