Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

The American Privacy Rights Act (APRA) was a bipartisan proposal to create a federal privacy framework and make privacy a consumer right. It was not enacted: the draft became House bill H.R. 8818 in June 2024, but the Senate Commerce Committee now says the draft “did not come to fruition.” Its proposed rights and enforcement system therefore never took effect as law.

What was the American Privacy Rights Act?

On April 7, 2024, Democratic Sen. Maria Cantwell and Republican Rep. Cathy McMorris Rodgers announced the APRA, a proposed federal framework for regulating companies that collect and use personal information. Its formal purpose was “To provide Americans with foundational data privacy rights, create strong oversight mechanisms, and establish meaningful enforcement.”

The proposal sought to replace the patchwork of state comprehensive privacy laws with a nationwide standard. It was a discussion draft at announcement, not an enacted law. The draft later became H.R. 8818, introduced in the House on June 25, 2024, and referred to the Committee on Energy and Commerce.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What rights and obligations did the proposal include?

The outline and committee descriptions set out a framework focused on consumer permission, transparency, limits on data use, and ways to challenge certain practices.

  • Consent and transparency: Companies would have to obtain consumer consent before certain collection or transfers of data, explain what they collect and how long they retain it, and seek permission for significant changes to privacy policies.
  • Limits on data use: The proposal emphasized data minimization and safeguards against biased algorithmic analysis.
  • Targeted advertising: Consumers would have an opt-out from targeted advertising.
  • Data brokers: Companies that buy and sell personal data would have to register with the Federal Trade Commission.
  • Oversight and enforcement: The proposal called for a new privacy bureau within the FTC, with authority to update rules as technology changes. The FTC and state attorneys general could enforce the framework.
  • Individual lawsuits: The Senate Commerce Committee’s description also highlights a private right of action, which would let individuals bring certain claims in court.

These were proposed requirements, not rights consumers can invoke under the APRA today.

Would the APRA have overridden state privacy laws?

Broadly, yes. The proposal aimed to eliminate the patchwork of state comprehensive privacy laws, and the Associated Press reported that it would preempt most state privacy laws. The proposal would preserve certain state laws protecting financial, health, or employee data. The available descriptions do not establish how every state statute or conflict would have been resolved, so the effect would have depended on the final text and its application.

Could consumers have sued companies under the proposal?

The Senate Commerce Committee’s summary identifies a private right of action for individuals, alongside enforcement by the FTC and state attorneys general. That would have provided a route for some individuals to bring claims themselves. The sources describing the proposal here do not specify the full scope, conditions, or remedies for such lawsuits, and the draft did not become law.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What happened to the bill?

After the April 2024 announcement, the proposal was introduced as H.R. 8818 on June 25, 2024 and referred to the House Committee on Energy and Commerce. It did not become law. The Senate Commerce Committee’s current privacy page says: “While the draft did not come to fruition, its underlying principles reshaped the national privacy debate by drawing bright lines for industry and granting privacy rights to consumers.” That describes the committee’s assessment of the draft’s influence, not an enactment or a current federal privacy right created by the APRA.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Why the proposal mattered

The bill brought together consumer rights, business duties, federal oversight, and state-law preemption in one proposed framework. Cantwell stated: “A federal data privacy law must do two things: it must make privacy a consumer right, and it must give consumers the ability to enforce that right.” The APRA reflected that goal, but its proposed protections remained proposals when the draft failed to come to fruition.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.