United States of America: Introduced American Privacy Rights Act of 2024 including data protection regulation

On 25 June 2024, the American Privacy Rights Act of 2024, including data protection regulation, was introduced in the US House of Representatives. The Act aims to establish consumer data privacy rights and standards regarding the collection and processing of sensitive personal data. The consumers would have the right to access, correct, delete, and export their data. Furthermore, the Act would introduce a transparency obligation regarding the collection of data and would require entities to comply with data minimisation principles, requiring data collection and usage to be necessary and limited to specific purposes and prohibiting the transfer of sensitive data without explicit consumer consent. In addition, the Act prohibits the use of dark patterns and denial of service for exercising rights and would require entities to offer consumers the option to opt-out of the transfer of covered data to third parties and targeted advertising. Finally, the Act includes additional measures for the entities classified as large data holders, including publishing information on privacy policies from the last 10 years, reporting metrics related to consumer requests, appointing privacy and a data security officers and conducting annual controls, internal controls, and impact assessments.