In a move signaling the latest push to regulate artificial intelligence, U.S. lawmakers are preparing to reintroduce legislation that would explicitly bar companies—including AI developers—from selling sensitive health and location data to brokers. Senators Elizabeth Warren (D-MA) and Representative Mary Gay Scanlon (D-PA) are slated to unveil an updated version of the Health and Location Data Protection Act, expanding its original scope to cover emerging AI ecosystems that were not anticipated when the bill was first drafted in 2022.
Why lawmakers are targeting AI’s data pipeline
The original proposal, introduced in June 2022, sought to prohibit data brokers from collecting and reselling Americans’ health and location information. However, the rapid adoption of AI tools such as ChatGPT and Claude has created new pathways for companies to harvest and monetize personal data, often without clear consent from users. The revised bill addresses this gap by extending restrictions beyond brokers to encompass any entity that aggregates, processes, or sells such data, regardless of whether AI systems are involved in the transaction.
According to Senator Warren, the expansion is necessary because current laws fail to keep pace with technological advances. “Americans should not have to choose between using life-saving tools and protecting their most private information,” she stated in a recent statement. The updated legislation also introduces stricter penalties for violations, reflecting growing frustration among policymakers over the unchecked trade in sensitive personal data.
What data would the ban cover—and who would enforce it?
The proposal targets a broad range of information, including:
- Health records shared with AI chatbots or health-tracking apps
- Geolocation data collected by mobile devices or wearable sensors
- Biometric identifiers gathered through AI-driven diagnostics or fitness platforms
Under the revised framework, companies found violating the ban could face substantial fines, with enforcement handled by the Federal Trade Commission (FTC) in coordination with the Department of Health and Human Services (HHS). The bill also empowers consumers to file private lawsuits against entities that improperly share or sell their data, a provision designed to strengthen accountability.
Critics argue that the legislation may inadvertently stifle innovation in AI-driven healthcare, where data sharing is often essential for advancing treatments and improving patient outcomes. However, proponents counter that clearer regulations could foster trust in AI tools by ensuring robust privacy safeguards are in place from the outset.
How this could reshape AI and health tech industries
If enacted, the bill would force AI companies to overhaul their data collection and monetization strategies. Many firms currently rely on anonymized or aggregated datasets to train models or generate revenue, but the new restrictions could compel them to adopt alternative revenue streams—such as user subscriptions or enterprise licensing—while prioritizing transparency in data handling practices.
Health technology startups, in particular, may need to rethink how they deploy AI in clinical settings. For example, a startup using AI to analyze patient records for diagnostic insights would likely need to implement stricter access controls and obtain explicit patient consent before processing data. Similarly, developers of AI-powered wellness apps might pivot toward premium models that limit free-tier data sharing.
Industry analysts suggest that the legislation could accelerate the adoption of privacy-preserving technologies, such as federated learning or differential privacy, which allow AI systems to train on decentralized data without exposing individual records. These methods are already gaining traction among ethical AI practitioners but have yet to become mainstream due to cost and complexity barriers.
What’s next for the proposal—and the broader privacy debate
The updated bill is expected to face significant lobbying efforts from tech companies and data brokers, who may argue that overly restrictive measures could hinder AI innovation and reduce consumer access to beneficial services. Meanwhile, privacy advocates are urging lawmakers to close additional loopholes, such as those involving third-party data-sharing agreements with foreign entities.
For now, the proposal signals a broader shift in how the U.S. government views data privacy in the AI era. As Senator Warren noted, “This isn’t just about protecting data—it’s about protecting democracy.” With public concern over AI ethics and data misuse reaching new heights, the outcome of this legislation could set a precedent for future regulations in both the U.S. and abroad.
AI summary
ABD Meclisi’nin yeni yasa teklifiyle, veri simsarlarının yanı sıra yapay zeka şirketlerinin de sağlık ve konum verilerinizi satması yasaklanıyor. Detayları ve şirketlere etkileri burada.
