A coalition of 18 attorneys general and state privacy authorities, led by California Attorney General Rob Bonta, has urged Congress to reject the proposed SECURE Data Act (H.R. 8413). The coalition argues that the federal bill would preempt existing state privacy laws, thereby diminishing consumer protections. ([news.bloomberglaw.com](https://news.bloomberglaw.com/business-and-practice/california-among-a-dozen-states-opposing-federal-privacy-bill?utm_source=openai))
The SECURE Data Act aims to establish a national data privacy standard, which would override state-level regulations. Critics contend that this preemption would weaken the rights of over 100 million Americans and limit the enforcement capabilities of state authorities. The coalition’s letter to Congress emphasizes that the bill would make it more challenging for consumers to exercise privacy rights, grant businesses greater latitude in using and retaining consumer data, and restrict enforcement remedies available to states and other privacy regulators. ([stateagreport.com](https://www.stateagreport.com/news/states-push-back-on-proposed-federal-privacy-law/?utm_source=openai))
The letter also highlights concerns that the bill’s broad preemption language could undermine various state-level data protections, including comprehensive privacy laws, data broker registries, and breach-notification laws. The coalition advocates for any federal privacy framework to serve as a baseline, allowing states to continue addressing new data practices, emerging technologies, and privacy risks. ([stateagreport.com](https://www.stateagreport.com/news/states-push-back-on-proposed-federal-privacy-law/?utm_source=openai))
California’s privacy agency chief has also expressed opposition to the SECURE Data Act, stating that it would eliminate existing privacy rights in the state and impede the agency’s enforcement powers. ([news.bloomberglaw.com](https://news.bloomberglaw.com/privacy-and-data-security/california-privacy-agency-opposes-weaker-federal-privacy-bill?utm_source=openai))
As of 2026, 20 states have enacted comprehensive consumer data privacy laws, including California, Connecticut, Virginia, and others. These states have developed robust privacy protections tailored to their residents’ needs. The proposed federal legislation raises concerns about the potential erosion of these state-specific safeguards. ([security.org](https://www.security.org/resources/digital-privacy-legislation-by-state/?utm_source=openai))
The debate over the SECURE Data Act underscores the ongoing tension between federal and state authorities in regulating data privacy. While a uniform national standard could simplify compliance for businesses operating across multiple states, it may also dilute stronger protections established at the state level. The coalition’s opposition signals a commitment to preserving state autonomy in safeguarding consumer privacy.