My Body, My Data Act of 2025
Analysis under review: This bill has generated analysis that may be too generic or incomplete. Clause-level evidence remains available below.
Summary
What This Bill Does
The bill requires individual rights of access to personal reproductive or sexual health data, including data collected from third parties and inferred data; right to correct inaccurate data; right to delete data held, requires mandatory privacy policy requirements for regulated entities covering categories of data collected, purposes, third-party disclosures, and individual control mechanisms, and requires prohibition against retaliation by regulated entities against individuals exercising their privacy rights, including denial of services, differential pricing, or suggesting different treatment. It relies on compliance mandates, reporting requirements, definition changes, and exemptions. The main policy areas are Technology, Trade, Healthcare, and Finance.
Who Benefits and How
Federal Trade Commission could gain revenue opportunities, Individuals seeking reproductive healthcare could face reduced risk, and Consumers exercising data rights could face reduced risk.
Who Bears the Burden and How
Health tech companies and period-tracking apps would take on compliance duties, Regulated entities violating data privacy could face higher costs, and Regulated entities collecting reproductive health data would take on compliance duties.
Key Provisions
- Requires individual rights of access to personal reproductive or sexual health data, including data collected from third parties and inferred data; right to correct inaccurate data; right to delete data held...
- Requires mandatory privacy policy requirements for regulated entities covering categories of data collected, purposes, third-party disclosures, and individual control mechanisms.
- Requires prohibition against retaliation by regulated entities against individuals exercising their privacy rights, including denial of services, differential pricing, or suggesting different treatment.
- Requires FTC enforcement treating violations as unfair or deceptive acts; private right of action with damages of -,000 per violation per day; invalidation of pre-dispute arbitration agreements for claims under the Act.
- Defines statutory definitions for collect, disclose, personal information, personal reproductive or sexual health information (broad definition including inferred and algorithmic data), regulated entity (including...
Evidence Chain:
This summary is generated from the full bill text using AI analysis. Expand "Detailed Analysis" below for identified beneficiaries/burden bearers with clause-level evidence links.
At a Glance
What This Bill Does
The bill requires individual rights of access to personal reproductive or sexual health data, including data collected from third parties and inferred data; right to correct inaccurate data; right to delete data held, requires mandatory privacy policy requirements for regulated entities covering categories of data collected, purposes, third-party disclosures, and individual control mechanisms, and requires prohibition against retaliation by regulated entities against individuals exercising their privacy rights, including denial of services, differential pricing, or suggesting different treatment.
Key Policy Areas
Technology, Trade, Healthcare, Finance
Primary Purpose
The bill requires individual rights of access to personal reproductive or sexual health data, including data collected from third parties and inferred data; right to correct inaccurate data; right to delete data held, requires mandatory privacy policy requirements for regulated entities covering categories of data collected, purposes, third-party disclosures, and individual control mechanisms, and requires prohibition against retaliation by regulated entities against individuals exercising their privacy rights, including denial of services, differential pricing, or suggesting different treatment.
Policy Domains
Section 2 - Minimization
Identified Gains
- Federal Trade Commission
- Individuals seeking reproductive healthcare
- Consumers exercising data rights
- Plaintiffs attorneys
Identified Costs
- Health tech companies and period-tracking apps
- Regulated entities violating data privacy
- Regulated entities collecting reproductive health data
- Health tech companies and data-collecting platforms
- Data brokers
Sponsors
Legislative Progress
In CommitteeMs. Hirono (for herself, Mr. Wyden, Mr. Blumenthal, Ms. Blunt …
Read twice and referred to the Committee on Commerce, Science, …
Introduced in Senate
Stakeholder Effects
cui bono?How this legislation distributes effects. Mention counts reflect frequency, not effect magnitude.
Health tech companies and data-collecting platforms, Health tech companies and period-tracking apps, Regulated entities collecting reproductive health data
Bill Structure & Actor Mappings
Who is "The Secretary" in each section?
- "the_commission"
- → Federal Trade Commission
Key Definitions
Terms defined in this bill
To obtain personal reproductive or sexual health information in any manner
To release, transfer, sell, provide access to, license, or divulge information to a third party or government entity
Personal information relating to past, present, or future reproductive or sexual health of an individual, including pregnancy, menstruation, abortion, contraceptives, and algorithmically inferred data
Any entity engaged in commerce subject to FTC jurisdiction, including common carriers and nonprofits, but excluding HIPAA-covered entities acting in that capacity
We use a combination of our own taxonomy and classification in addition to large language models to assess meaning and potential beneficiaries. High confidence means strong textual evidence. Always verify with the original bill text.
Learn more about our methodology