My Body, My Data Act of 2025
The My Body, My Data Act of 2025 would create a federal privacy framework for personal reproductive or sexual health information. It generally prohibits covered entities from collecting, retaining, using, or disclosing that information except as strictly necessary to provide a requested product or service, and it requires limiting employee and service-provider access to what is necessary for that purpose.
The bill also gives individuals new rights to access, correct, and delete their reproductive or sexual health data, including data collected from third parties or inferred by the entity. Covered entities would have to provide these rights through a clear, easy-to-use mechanism, respond within 15 days, and charge no fee. The bill further requires a prominent privacy policy describing data practices, third-party disclosures, and user controls, and it bars retaliation against individuals who exercise their rights.
The bill would add a new federal consumer privacy regime focused specifically on reproductive and sexual health data, enforced primarily by the Federal Trade Commission as an unfair or deceptive practices matter and also through private lawsuits. It would apply to a broad range of entities engaged in commerce, including common carriers and nonprofits, but it excludes HIPAA covered entities and business associates when acting in those capacities, as well as certain substance-use treatment records subject to federal confidentiality rules. The bill preserves stronger state privacy laws, preempts only conflicting state provisions, and allows state laws that provide greater protection to remain in force.
No committee transcript or vote record is provided, so there is no direct evidence of debate or roll-call sentiment. Based on the bill’s sponsorship and structure, the measure appears to be framed as a privacy-protection and consumer-rights bill, with emphasis on limiting data collection and disclosure around sensitive reproductive and sexual health matters. The absence of recorded votes or hearing comments means the available record does not show formal support or opposition beyond the introduction by a group of Democratic senators.
The main likely points of contention are the scope of covered data, the breadth of entities covered, and the enforcement model. The bill reaches not only direct health information but also inferred, proxy, and algorithmic data, which could raise concerns from technology, advertising, and data-broker sectors about compliance burdens and litigation exposure. Another likely issue is the private right of action with statutory damages, punitive damages, and no pre-dispute arbitration or class-action waivers, which may draw opposition from regulated entities. Supporters would likely emphasize the need to protect sensitive reproductive health privacy, especially for location-based tracking and data sharing, while opponents may argue the bill is expansive and could overlap with existing federal and state privacy regimes.