United States Congress introduces 49 federal privacy legislative proposals

The United States continues to lack a single comprehensive federal privacy law similar to the GDPR, but the 119th Congress has introduced a wide array of legislative proposals. As of September 2026, the IAPP tracker identifies 49 distinct proposals across five broad categories, addressing issues such as artificial intelligence, children’s data, employee surveillance, reproductive information, and data brokers.

While only two tracked proposals—the TAKE IT DOWN Act and the Homebuyers Privacy Protection Act—have become law, the legislative landscape is shifting. Congress is currently debating three versions of comprehensive consumer privacy legislation alongside narrower, sector-specific rules.

Key disputes regarding state-law preemption and private rights of action remain unresolved. However, concepts like data minimization, deletion rights, and restrictions on targeted advertising are increasingly migrating from comprehensive bills into specific sector-based legislation.