S. 2367In committeeCrime & justice
Bill would let people sue over data used without clear consent
Data as of July 13, 2026
S 2367 would let individuals sue companies that use their personal data or train AI on it without clear upfront consent.45-second read · 5 questions answered below
Decoded
What does this do?
S 2367 would create a federal law letting people sue companies or individuals who use their personal data without clear, upfront permission. It covers names, location, browsing habits, biometric data, AI training on personal data, and AI-generated content based on a real person's data or copyrighted material. Winners could collect actual losses, triple profits or at least $1,000, punitive damages, and legal fees.
Who does it affect?
This affects tech companies, AI developers, data brokers, and businesses that collect consumer data, as well as everyday consumers whose data is used.
Why does it matter?
Companies could face lawsuits and financial penalties for using data without valid consent, forced arbitration clauses over these violations would be void, and stronger state privacy laws would remain in effect.
What does it cost, and who pays?
- Actual losses or triple profits
- Minimum $1,000 per violation
- Punitive damages plus legal fees
Where does it stand?
- Introduced
- Senate committee — You are here
- Senate vote
- House
- President's desk
Right now: a Senate committee is reviewing it. If the House changes it, it goes back to the Senate before reaching the President.
AI-drafted summary. Verify it against the official text before you act on it.
Three steps: where you stand, your script, the call.
Make the callSee how a call works
Official title
AI Accountability and Personal Data Protection Act
- Introduced:
- July 21, 2025
- Latest action:
- July 21, 2025
Read twice and referred to the Committee on the Judiciary.
Read the official bill on Congress.govMake the call
Three steps: where you stand, your script, the call.