New Act Mandates 72-Hour Removal of Lawmakers' Personal Data from Government Sites and Data Brokers

The “Protecting Americans from Doxing and Political Violence Act” is designed to put a serious brake on the doxing and harassment of federal lawmakers and their families. If you’re a current or former Member of Congress, a designated congressional employee, or part of their immediate family, this bill creates a new, fast-track privacy shield for your sensitive personal data.

The VIP Privacy Shield: What's Covered?

This isn't about protecting just anyone—it’s specifically for what the bill calls “at-risk individuals.” The covered information is extensive: home addresses, personal cell numbers, email addresses, Social Security numbers, bank details, and even information about where their kids under 18 go to school or their travel routes to work. Think of it as putting a legal firewall around the most vulnerable parts of a public official’s life. Why is this a big deal? Because the bill mandates that government agencies receiving notice from these protected individuals must remove all this “covered information” from public view within 72 hours (SEC. 2).

The 72-Hour Clock for Everyone Else

The most immediate impact outside of government falls on data brokers and anyone else posting online. A “data broker” is defined as a commercial entity that collects and sells personal data on people who aren't their customers. The bill makes it flat-out illegal for these brokers to knowingly sell or trade the covered information of these protected figures. For everyone else—whether it’s a business or just a person posting online—if an at-risk individual asks them in writing to remove covered information, they have 72 hours to take it down (SEC. 2). After that request, they are also barred from transferring that information to anyone else.

For the average person, this is where the policy gets interesting. While the spirit of the law is to protect against harassment, it effectively creates a two-tiered system where federal lawmakers get a guaranteed, legally-backed right to demand data removal, while the rest of us are left navigating existing privacy laws. If you're a teacher, a local city council member, or a small business owner dealing with similar threats, this law doesn’t cover you. You still have to rely on the standard, often slower, processes.

The Fine Print: Where Free Press Meets Privacy

There are crucial exceptions built into the removal requirements. The bill explicitly states that the 72-hour removal rule does not apply if the information is already required to be publicly filed under federal or state law (like FEC campaign finance reports). More importantly, it doesn't apply if the information is part of a “news story, commentary, or editorial about a matter of public concern” (SEC. 2). This is a necessary balance to protect the First Amendment, but it also introduces a significant gray area. Who decides if a piece of information is truly a matter of public concern versus just a way to harass someone? That question will likely be settled in court, as the bill allows the protected individual to sue for an injunction or declaration if the removal request is ignored.

For data brokers and online platforms, this means new legal exposure. While the intent is clear—stop doxing—the compliance costs and the risk of litigation could be substantial, especially when trying to quickly determine if a piece of information falls under the “public concern” exception. Ultimately, this bill provides a powerful, rapid-response tool for federal officials to secure their privacy, but it also raises questions about equal protection and the practical enforcement of its exceptions.