US-CONGRESS BILLS-119hr1181eh: Protecting Privacy in Purchases Act
The Protecting Privacy in Purchases Act (H.R. 1181) introduces federal data privacy requirements for financial transaction data, including opt-out rights, data minimization, and risk assessments, affecting multistate retailers, adtech/data brokers, and SaaS platforms.
Aforeworn detected this change in the US State Data-Privacy Laws space on July 16, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated High urgency. Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants should confirm how it applies to their specific situation before acting. There is a time constraint attached: Unknown (bill in early stages); monitor progress and prepare for potential 12-18 month implementation timeline if passed.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors US State Data-Privacy Laws continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
New federal bill requiring opt-out mechanisms (including Global Privacy Control), data minimization, and risk assessments for purchase-related data; expands CCPA-like obligations nationwide.
Who it affects
Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants
What you must do
Review and update data collection and sharing practices for purchase data; implement universal opt-out signals; conduct risk assessments for sensitive data use.
Deadline
Unknown (bill in early stages); monitor progress and prepare for potential 12-18 month implementation timeline if passed.
Source: https://www.govinfo.gov/app/details/BILLS-119hr1181eh
Never miss a change like this again
Aforeworn watches US State Data-Privacy Laws around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in US State Data-Privacy Laws
- Navigating New Jersey’s Data Broker Registration and Sensitive Data Restrictions (via Passle) - Frankfurt Kurnit Klein & Selz
- Illinois Enacts Frontier AI Safety Law - Davis Wright Tremaine
- New Hampshire Amends the NHDPA to Prohibit the Sale of Children’s Personal Data - Hunton Andrews Kurth LLP
- MD SB0008: Criminal Law - Identity Fraud - Artificial Intelligence and Deepfake Representations
- Garden State New Jersey Sees Data Broker Law Quickly Bloom - JD Supra