Concord Privacy News: 5/13/2026
Another federal privacy push with the SECURE Data Act; CT lawmakers consider expanding data privacy laws; Massachusetts considers one of the nation's strictest social media bills.
Concord Team · Published Wed May 13 2026
The SECURE Data Act: Another Federal Privacy Push
Congress has once again introduced a comprehensive federal privacy proposal: the SECURE Data Act. The bill aims to create a unified national framework for consumer data rights, standardizing requirements around access, deletion, and consent.
At a glance, this may feel like a turning point. In reality, it's the latest in a long line of federal privacy efforts that have struggled to cross the finish line.
Over the past several years, multiple proposals, including the American Data Privacy and Protection Act (ADPPA) and the American Privacy Rights Act (APRA), have generated momentum but ultimately stalled before enactment.
The core sticking points remain unchanged:
- Federal preemption vs. state authority
- Private right of action
- Scope of enforcement and protections
The SECURE Data Act reintroduces many of these same tensions, particularly its broad preemption of state laws, which has historically derailed bipartisan support.
What's Different (and What Isn't)
The bill would:
- Establish a national privacy framework
- Grant consumers rights to access, delete, and correct data
- Require opt-in consent for sensitive data
- Centralize enforcement with regulators rather than individuals
Structurally it mirrors prior proposals with a number of factors making passage uncertain:
- It may override stronger state laws, raising opposition
- Federal privacy legislation has repeatedly failed due to policy disagreements, and those same dynamics remain in play today
- Previous failed proposals had bi-partisan support and still failed to pass, while this version does not yet have that level of support
The reality check: early analysis suggests an uphill path and passage is far from guaranteed. This bill should advance the conversation, but organizations should not assume near-term federal standardization.
What This Means for Businesses
The current reality:
- State-level regulations continue to expand and evolve
- Enforcement expectations are increasing
- Consumers expect transparency and control regardless of federal action
Even if a federal law passes, it will likely:
- Take years to fully implement
- Require significant operational alignment
- Still demand strong underlying data governance
What You Should Do: Build for Certainty
Leading organizations are focusing on what remains important, regardless of pending legislation:
- Clear data inventories
- Consistent policy enforcement
- Scalable compliance workflows
- Audit-ready documentation
When implemented well, these capabilities are durable across:
- State laws
- Federal frameworks (if/when enacted)
- Emerging AI and data governance requirements
In other words, privacy maturity is a strategic asset. As trust has become harder and harder to earn in today's markets, that maturity also provides an additional signal to your prospects and customers that also helps you drive better growth over time.
The SECURE Data Act is an important signal. It reflects continued momentum toward a national privacy standard. But it is not a finish line.
Until federal law becomes reality, and even after it does, organizations that invest in strong, adaptable privacy operations will be best positioned to navigate whatever comes next.
Other Privacy News of Note
CT Lawmakers Consider Expanding Data Privacy Laws
Connecticut legislators moved forward with a bill that expands existing data privacy laws. The state Senate voted in favor of Senate Bill No. 117, which outlines procedures for a breach of security involving electronic personal information. It requires a third-party forensic investigation after a "massive breach of security." The bill defines a breach of security as the unauthorized access to a computer network that results in the disclosure of personal information, other than credit or debit card numbers. Read more.
Massachusetts Considers One of the Nation's Strictest Social Media Bills
As Massachusetts considers imposing new restrictions on minors' social media use, mental health and online safety advocates are praising the effort. But critics of the House-passed bill say it threatens personal privacy and would put certain communities at risk. With the bill, Massachusetts may join a growing number of states in taking on Big Tech. The House bill approved earlier this month, which would also ban cellphones in schools, closely mirrors a Florida law that has been fought in court for two years. Read more.