Gun-owner privacy bill may incentivize law enforcement to hide data breaches
H.R. 8758 — Protecting Our Second Amendment Data Act · Filed by Scott Perry (R-PA) · Introduced May 12, 2026 · Referred to committee
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
This bill requires state and local law enforcement agencies, as well as private organizations receiving federal crime-fighting grants, to certify that they have not disclosed personal information about people involved in firearm transactions, concealed carry applications, or background checks. Agencies that fail to certify compliance lose eligibility for federal grants under several major crime-control programs.
Why we flagged it
The bill ostensibly protects firearm-related personal data from disclosure by conditioning federal grants on non-disclosure certification. However, the mechanism may inadvertently shield agencies from accountability by making certification (rather than actual prevention) the compliance standard, and by not requiring affirmative data-security measures or breach reporting.
What the text implies
- Certification requirement may incentivize agencies to avoid documenting or reporting data breaches rather than preventing them, since the penalty is loss of federal funding rather than legal liability.
- The bill does not mandate affirmative data-security standards, encryption, or breach-notification protocols—only certification of non-disclosure, which is a backward-looking compliance statement.
The full analysis lists 4 implications of this text.
Who it affects
The bill protects privacy for gun owners and applicants by penalizing data breaches, which benefits individuals concerned about their personal information being exposed. However, it may also shield law enforcement from transparency about how firearm data is handled, potentially limiting public oversight of government record-keeping practices and creating a perverse incentive to avoid disclosing breaches rather than preventing them.