Your reproductive health data is now protected from corporate sale and tracking.
S. 2029 — My Body, My Data Act of 2025 · Filed by Mazie Hirono (D-HI) · 22 cosponsors · Introduced Jun 11, 2025 · Referred to committee
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
This bill prohibits companies from collecting, keeping, or sharing personal reproductive and sexual health information unless strictly necessary to provide a service the person requested. It gives individuals the right to access, correct, and delete their reproductive/sexual health data; requires companies to publish clear privacy policies; and bars retaliation against people who exercise these rights. The FTC enforces it, and individuals can sue for violations, including punitive damages.
Why we flagged it
The bill's operative mechanism is a comprehensive privacy regime for sensitive health data: it restricts corporate collection and disclosure, mandates transparency, grants individual access/correction/deletion rights, and creates a private right of action. This is consumer protection legislation, not a narrow carve-out or subsidy.
What the text implies
- The definition of 'personal reproductive or sexual health information' includes inferred and algorithmic data derived from non-health information (e.g., browsing patterns, location data, purchase history), potentially capturing a much broader data universe than explicit health records and creating compliance complexity for data brokers and ad-tech firms.
- The bill invalidates pre-dispute arbitration agreements and class-action waivers for disputes under this Act, shifting enforcement from arbitration to courts and enabling class litigation—a structural change that may increase litigation volume and costs for regulated entities but strengthens collective remedies for individuals.
- Service providers are bound by the same minimization and access restrictions as regulated entities, extending the regime to contractors and third-party processors, which may require significant operational changes in data handling across supply chains.
- The 15-day compliance timeline for access/correction/deletion requests is strict and applies to all regulated entities regardless of size or data volume, potentially creating operational burden for smaller companies and those with legacy systems.
- The bill preserves state law and does not preempt stricter state privacy regimes, creating a patchwork of overlapping federal and state requirements that may increase compliance costs but also prevents a federal floor from displacing stronger protections.
Section numbers refer to the bill text the analysis read — linked under Primary records below.
Who it affects
Ordinary citizens gain enforceable rights to control sensitive reproductive and sexual health data, access what companies hold about them, correct errors, and delete information. The private right of action with statutory damages and attorney's fees creates meaningful enforcement leverage against companies that violate these protections.
Named in the bill
Federal Trade Commission (FTC), regulated entities (broadly defined), service providers, third parties, individuals (data subjects), Communications Act of 1934, HIPAA (Health Insurance Portability and Accountability Act), Public Health Service Act
Where it stands
22 cosponsors: 22 Democrats.
- Jun 11, 2025 — Introduced · Congress.gov: “Introduced in Senate”
- Jun 11, 2025 — Referred to Senate Committee on Commerce, Science, and Transportation · Congress.gov: “Read twice and referred to the Committee on Commerce, Science, and Transportation”
Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.
Money around this bill
3 lobbying clients named this bill on 5 disclosure filings across 2 quarters, Dec 2025 to Jun 2026. Those filings disclosed $163,451 in lobbying spend. A filing names 64 bills on average, so that figure is what each filing reported, not a share belonging to this bill.
More lobbying clients named this bill than 61% of bills with at least one filing.
Mazie Hirono, the sponsor, reported $44,000 in PAC receipts in the 2026 cycle.
- Hadassah, the Women's Zionist Organization of America, Inc. — $120,000 on 2 filings
- Power to Decide — $33,451 on 2 filings
- National Council of Jewish Women — $10,000 on 1 filing
Lobbying Disclosure Act filings through Jul 20, 2026. A filing shows who paid to lobby on a bill it names, not what changed.
How this was measured
Analysis — Quorum's AI read the bill text published by Congress.gov (17,148 characters) on Sep 18, 2026. Section numbers in the findings refer to that text, linked below; transparency and hidden-provision scores are compared against the median of 16,222 analysed bills.
Status and sponsors — Congress.gov's bill record — actions, committee referrals and cosponsors — loaded nightly. The timeline shows status changes, not every procedural action.
Money — Senate Lobbying Disclosure Act filings whose specific-issue field names this bill for quarters ending Dec 2025 to Jun 2026. A filing's amount is reported whole beside the median number of bills a filing names; it is never divided across them. PAC receipts are FEC-reported contributions to the sponsor's candidate committee in the 2026 cycle.
As of — lobbying records through Jul 20, 2026 · page rendered 2026-10-20.
“Your reproductive health data is now protected from corporate sale and tracking.” QuorumCivic. https://share.quorumcivic.app/bill/119/s2029 Report an error
The week in bills
One email, Sunday: what Congress passed, what it changed, and who paid.
One link arrives to confirm the address. It is used for this email and nothing else, and every issue carries an unsubscribe link.