The Federal Trade Commission has proposed a comprehensive nationwide data privacy framework that would establish uniform rules for how companies collect, use, and share consumer data. The proposal includes rights to delete personal data, opt out of data sales, and access data companies hold.
The framework would preempt the current patchwork of state privacy laws, providing consistent rules for businesses operating nationally. Companies would be required to minimize data collection, provide clear privacy notices, and obtain consent before using data for purposes beyond original collection.
Technology companies have mixed reactions. Some support federal standards that would replace varying state requirements, while others oppose specific provisions including the right to algorithmic transparency and restrictions on cross-platform data sharing.
The proposal draws heavily from the EU's GDPR and California's CCPA but includes distinctly American provisions including stronger protections for children's data and requirements for AI training data transparency. Enforcement would be shared between the FTC and state attorneys general.
Privacy advocates praise the proposal but express concern about enforcement resources. The FTC would need significant budget increases to oversee compliance by millions of businesses. The comment period runs through August 2026.
