New federal rules ban workplace surveillance without consent and give workers data rights.

What it does

This bill restricts employers from collecting, using, and sharing worker data without clear justification and consent. It requires employers to disclose what data they collect, how they use it, and who can access it; prohibits collection for union-busting, political surveillance, or off-duty monitoring; bans the sale of worker data; and gives workers the right to access, correct, and challenge data used in employment decisions. It establishes a new federal division to enforce these rules and creates private rights of action with statutory damages.

Why we flagged it

The bill's core mechanism is a comprehensive prohibition on employer data collection, use, and transfer, paired with mandatory disclosure and worker access rights. It is fundamentally a privacy and labor protection measure, not a deregulation or subsidy.

What the text implies

• The bill's definition of 'automated decision system' is broad and may capture routine HR software, payroll systems, and scheduling tools, potentially requiring disclosure and compliance review for systems employers already use.
• The 3-year data retention limit may conflict with employers' legal obligations to retain employment records under tax, wage-and-hour, and discrimination laws, creating compliance complexity.
• The private right of action with statutory damages ($5,000–$40,000 per violation, up to $100,000 for retaliation) may incentivize class actions and create significant litigation exposure for employers, particularly small businesses unfamiliar with the rules.
• The requirement that workers 'opt in' to each transfer of data to service providers may be operationally burdensome for employers using multiple vendors (payroll, benefits, background checks, etc.) and could fragment data flows.
• State attorneys general and privacy regulators gain independent enforcement authority, creating potential for duplicative or conflicting enforcement actions and settlements across jurisdictions.

Section numbers refer to the bill text the analysis read — linked under Primary records below.

Who it affects

Workers gain enforceable privacy protections, transparency into employer surveillance, access to data used against them, and the ability to challenge automated employment decisions. Employers face restrictions on invasive monitoring and data monetization, but retain legitimate business uses (safety, performance assessment, legal compliance). The private right of action with statutory damages and attorney's fees creates meaningful enforcement leverage for workers.

Who stands to gain

• Workers and labor organizations (private right of action, statutory damages, attorney's fees)
• Privacy and civil rights advocacy organizations (advisory board participation, potential litigation
• Employment law firms (private litigation, class actions)
• Compliance and privacy consulting firms (advisory services to employers)

Named in the bill

Department of Labor, Worker Protection and Technology Division, Secretary of Labor, Federal Trade Commission, Equal Employment Opportunity Commission, National Labor Relations Board, State attorneys general, State privacy regulators, Government Accountability Office, Library of Congress, Office of Compliance, Merit Systems Protection Board

Where it stands

7 cosponsors: 6 Democrats, 1 Independents.

• Jun 18, 2026 — Introduced · Congress.gov: “Introduced in Senate”
• Jun 18, 2026 — Referred to Senate Committee on Health, Education, Labor, and Pensions · Congress.gov: “Read twice and referred to the Committee on Health, Education, Labor, and Pensions”

Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.