A look at the bipartisan American Data Privacy and Protection Act, which privacy experts say might finally give the US a strong federal data protection law
A bill with bipartisan support might finally give the US a strong federal data protection law. — Usually, when Congress is working …
Context & Ripple Effects
This Wired explainer lands days after the bill's strongest moment yet: a House panel's 53-2 vote advancing the American Data Privacy and Protection Act out of committee. The earlier coverage had already sketched the substance — a [[a:979552|bipartisan House-Senate draft letting users opt out of targeted ads and sue companies that improperly sell their data]] — so this piece is the 'what would it actually mean' layer.
Why it matters: privacy experts treat ADPPA as the closest the US has come to a strong federal data protection law, and the arc didn't end here — two years later lawmakers posted a successor, the American Privacy Rights Act draft with its data broker registry, showing the same coalition rebuilding after ADPPA stalled.
First-order effects
- Internet companies whose models depend on ad targeting face an immediate design constraint: users gaining an opt-out directly attacks the data supply that feeds their advertising businesses.
- A private right of action shifts risk onto tech companies themselves — improper data sales become litigable conduct rather than a regulatory abstraction.
Second-order effects
- Adtech intermediaries and data sellers between publishers and advertisers lose volume as opt-outs propagate upstream, forcing pricing and product rethinks across the targeting supply chain.
- Companies would need durable consent-management and compliance infrastructure, turning privacy engineering from a differentiator into a baseline cost of operating in the US market.
Third-order effects
- If the pattern holds — ADPPA's near-unanimous committee vote followed by the APRA successor draft — Congress is iterating toward a standing federal privacy regime rather than a one-off bill, with each version adding enforcement machinery like broker registries.
- A federal framework with real penalties would eventually reshape how consumer data is priced and governed industry-wide, though whether any single draft survives the full legislative process stays genuinely open.
The trend: US federal privacy legislation is moving from episodic proposals toward a repeatable drafting cycle built on consumer opt-outs and legal accountability for data misuse.