My Body, My Data Act of 2025
June 11, 2025
Track this bill to get notified when it advances a stage. One tap to stop, anytime.
Where This Stands
Currently in_committee. The next step in the legislative lifecycle is Floor Vote.
Version history
Only one version on file - nothing to compare yet. As later stages (committee substitute, engrossed, enrolled) are captured, the redline appears here.
View official text →The Frame
If passed, this law would require companies to limit their collection of reproductive health data and provide individuals with a free, 15-day process to view, fix, or erase their personal health information.
Potentially affected actors named in the source documents. Mention is not a position.
Regulated entities
These organizations must update their data collection, storage, and privacy policies to comply with new federal standards for reproductive and sexual health information.
Individuals
Individuals gain new legal rights to control, access, and delete their personal reproductive and sexual health data held by companies.
Current stage: in_committee.
Floor Vote.
Summary
Key Facts
- Regulated entities are prohibited from collecting, retaining, using, or disclosing reproductive or sexual health information unless strictly necessary to provide a requested service.
- Regulated entities must restrict employee and service provider access to reproductive health data to only what is necessary for providing requested services.
- Individuals have the right to access their reproductive health data, including information inferred by the entity or collected from third parties.
- Entities must provide a list of all third parties that have received an individual's reproductive health information.
- Individuals have the right to request the correction of inaccurate reproductive health information.
- Individuals have the right to request the deletion of their reproductive health information.
- Entities must provide a 'reasonable mechanism' for these requests, including an online option, and must comply within 15 days.
- Entities are prohibited from charging fees for processing access, correction, or deletion requests.
- Entities must publish a clear, conspicuous privacy policy detailing their data practices, including lists of third parties involved in data collection or disclosure.
- Entities are prohibited from retaliating against individuals for exercising their rights under this Act.
Frequently Asked Questions
Does this bill allow me to see what health data a company has on me?
Can a company charge me to delete my health data?
How long does a company have to respond to my request?
Why It Matters
If passed, this law would require companies to limit their collection of reproductive health data and provide individuals with a free, 15-day process to view, fix, or erase their personal health information.
News Coverage
Sponsors
Discoveries
Patterns POLISCOPE noticed across the record. These are observations to investigate, not conclusions.
Data Minimization Mandate
The bill shifts the burden of proof to companies to justify why they need to collect specific reproductive health data, rather than allowing broad data harvesting.
Connected Entities
Analysis Score
0–100- Significance85How much this matters to a regular citizen
- Controversy75Intensity of disagreement among stakeholders
- Entertainment20Compellingness for a non-policy-wonk reader
- Buzz60Current news / social attention level
Publisher tools