Attention: You are using an outdated browser, device or you do not have the latest version of JavaScript downloaded and so this website may not work as expected. Please download the latest software or switch device to avoid further issues.
| 24 Apr 2026 | |
| Press Releases and Statements |
WASHINGTON, D.C., April 24, 2026 — The Data Foundation today issued the following statement on the introduction of the SECURE Data Act (H.R. 8413) and the GUARD Financial Data Act by the House Committee on Energy and Commerce and the House Committee on Financial Services:
The Data Foundation welcomes the introduction of the SECURE Data Act and GUARD Financial Data Act and commends Chairman Guthrie, Vice Chairman Joyce, Chairman Hill, and their colleagues for advancing the important duty to protect the privacy of the American people and confidential information of American businesses. The coordination between two committees whose jurisdictional differences have historically limited progress on federal privacy legislation is itself an achievement. A strong national privacy framework is long overdue, and the Data Foundation is committed to supporting Congress in advancing meaningful policy improvements.
Both bills incorporate core Fair Information Practice Principles that the Data Foundation has long championed, including data minimization, purpose limitation, individual rights of access and deletion, and heightened protections for sensitive data. We are also specifically encouraged by both bills' explicit treatment of data minimization, a principle the Data Foundation has long identified as foundational to responsible data stewardship.
At the same time, the Data Foundation urges the Committee to address gaps in the framework that will limit its value during implementation for managing risks for the American people and, therefore, ultimately the value for achieving tangible privacy protections when faced with increasing reidentification risks and mosaic effects that pose growing risks of harm to individuals. For example, the absence of data protection impact assessment requirements is a structural concern. The federal government's own experience under CIPSEA demonstrates that proactive, documented risk assessment before processing occurs, not after harms arise, is a hallmark of responsible data stewardship. Identifying proportionate requirements for risk assessment in areas of high-risk commercial processing is an important next step for the Committee to consider. Preemptions of existing protections should also be carefully evaluated against the goal of a national standard that serves the American people, whether structured as a floor or a ceiling in public policy. The Data Foundation is continuing to analyze the bills and will offer additional recommendations as the legislative process advances.
The Data Foundation strongly encourages the Committees to actively engage colleagues on both sides of the aisle, and to ensure the hearing and markup process includes the voices of consumer advocates and communities most exposed to data-driven harms as well as those who directly benefit from the legislation. The most durable privacy laws in American history, including the Privacy Act, the Census Act, and the Confidential Information Protection and Statistical Efficiency Act, were all built on bipartisan consensus.
Privacy protection and beneficial data use are not opposing values. The Data Foundation stands ready to work with Congress and all stakeholders to ensure these bills deliver on their promise for every American.
"These bills represent the most significant federal privacy effort in years, and we are encouraged by the bipartisan spirit reflected in their architecture," said Nick Hart, President and CEO of the Data Foundation. "At the same time, effective privacy governance requires accountability mechanisms that make rights meaningful in practice. We look forward to engaging with Congress to strengthen these provisions and build a national standard that delivers realistic, enforceable privacy protections for the American people that stand the test of time."
The Data Foundation and members of its Data Coalition have been key champions of bipartisan data laws that demonstrate Congress can advance strong, enduring policy when it works across the aisle, including the Foundations for Evidence-Based Policymaking Act (Evidence Act), the OPEN Government Data Act, the Confidential Information Protection and Statistical Efficiency Act (CIPSEA), and the Financial Data Transparency Act (FDTA). We bring that same commitment to this effort.
###
About the Data Foundation
The Data Foundation is a non-profit organization based in Washington, D.C. that champions the use of open data and evidence-informed public policy to make society better for everyone. As a nonpartisan think tank, we conduct research, collaborative thought leadership, and advocacy programs that advance practical policies for the creation and use of accessible, trustworthy data. Our activities proactively address emerging data-related needs in the country with the goal of devising realistic solutions, accelerating policy coordination, and advancing innovation. The Data Foundation is recognized by Candid Guidestar with the Platinum Seal of Transparency and received 4-Stars from Charity Navigator. To learn more, visit www.datafoundation.org. (LEI: 254900I43CTC59RFW495)
Media Contact:
J.B. Wogan, Director of Communications
Phone: (202) 964-1130
Email: media@datafoundation.org
