Democratic lawmakers have introduced the Health and Location Data Protection Act, legislation that would prohibit companies -- explicitly including AI firms -- from selling or sharing Americans' sensitive health information and precise geolocation data, according to The Verge. The bill is backed by Senator Elizabeth Warren and Representative Mary Gay Scanlon, among others, and takes direct aim at the data-broker ecosystem that quietly trades some of the most intimate categories of personal information.
The legislation responds to a market that AI has supercharged. Health and location data are uniquely sensitive -- capable of revealing medical conditions, reproductive choices, religious practice and daily movements -- and they have long been bought and sold with minimal oversight. As AI companies hunt for ever more training data and as AI-driven targeting grows more precise, the commercial value of this information has risen, and so has the risk of its misuse for surveillance, discrimination or manipulation.
The bill fits a wider pattern of Washington turning its attention to AI's inputs, not just its outputs. Where much of the early AI-policy debate focused on model safety and capability, recent moves -- from copyright litigation over training data to the Supreme Court's same-day ruling extending privacy protection to geofence warrants -- reflect growing scrutiny of how AI systems are fed. Restricting the data supply chain is a different and potentially more consequential lever than regulating model behavior.
“The legislation responds to a market that AI has supercharged.”
The stakes cut across multiple industries. Data brokers, adtech platforms, health-app makers and AI developers all rely to varying degrees on the kind of information the bill would wall off. A ban on selling health and location data would raise compliance burdens, shrink available training and targeting datasets, and advantage companies that can build on first-party or properly consented data over those dependent on the broker market -- a meaningful competitive reshuffling if it becomes law.
For founders, the read is that data provenance is becoming a regulatory and diligence issue, not just an ethical one: building on cleanly sourced, consented data is increasingly a moat. For investors, privacy legislation adds a policy-risk variable to adtech and health-AI theses that lean on third-party data.
The bear case is legislative reality: privacy bills have repeatedly stalled in a divided Congress, industry lobbying is fierce, and passage is far from assured. Even so, the introduction shapes the debate and signals where enforcement attention is heading. What to watch: whether the bill attracts bipartisan support, how data brokers and AI firms respond, and whether state-level privacy laws move faster than federal action.