Medium urgency

US-CONGRESS HR1181: Protecting Privacy in Purchases Act

Detected July 17, 2026 · in US State Data-Privacy Laws

HR1181, the Protecting Privacy in Purchases Act, has been received in the Senate and referred to the Committee on Banking, Housing, and Urban Affairs. This bill aims to restrict financial institutions from using or selling customer transaction data for non-essential purposes, requiring opt-in consent and data minimization. It aligns with state privacy laws like CCPA/CPRA and introduces new compliance obligations for covered entities.

Aforeworn detected this change in the US State Data-Privacy Laws space on July 17, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated Medium urgency. Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants should confirm how it applies to their specific situation before acting. There is a time constraint attached: Unknown; bill is in early stages. However, proactive compliance preparation is advised within 6-12 months.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors US State Data-Privacy Laws continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.

What changed

The bill advanced to the Senate committee, signaling potential federal preemption or supplementation of state data privacy laws. It imposes stricter rules on financial transaction data usage, including opt-in consent, data minimization, and risk assessments.

Who it affects

Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants

What you must do

Monitor committee hearings and prepare for potential compliance requirements. Review current data practices related to financial transaction data and assess alignment with bill's provisions.

Deadline

Unknown; bill is in early stages. However, proactive compliance preparation is advised within 6-12 months.

Source: https://www.congress.gov/bill/119th-congress/house-bill/1181

Never miss a change like this again

Aforeworn watches US State Data-Privacy Laws around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.

Start your free trial

Related changes in US State Data-Privacy Laws