The REDACT Act establishes a private right of action allowing victims to sue the federal government for damages if their personally identifiable or medical information is improperly disclosed under the Epstein Files Transparency Act.
Cory Booker
Senator
NJ
The REDACT Act establishes a private right of action allowing victims to sue the federal government if their personally identifiable, medical, or private information is improperly disclosed under the Epstein Files Transparency Act. This legislation enables victims to seek compensatory or statutory damages, attorney’s fees, and court-ordered relief for unauthorized privacy breaches. By waiving sovereign immunity, the bill ensures the government can be held legally accountable for failing to properly redact sensitive records.
The federal government is preparing to release a massive trove of documents under the Epstein Files Transparency Act, and the REDACT Act is the legal safety net designed to catch mistakes. This bill creates a specific path for individuals to sue the United States if their private, medical, or sensitive personal information is accidentally or negligently made public. It essentially puts the government on the hook for failing to use the digital equivalent of a thick black marker on files that would cause a 'clearly unwarranted invasion of personal privacy' if leaked. For anyone whose name or history is buried in these files, it transforms a privacy nightmare into a clear-cut legal claim.
If the government slips up and releases your protected data, this bill sets a high bar for accountability. Under Section 2, a successful lawsuit triggers a mandatory payout of either the actual damages you suffered (like lost wages or therapy costs) or a flat statutory fee of $50,000 per violation—whichever is higher. This isn't just a one-time fine; the bill specifies that every 'discrete act' of failing to redact counts as a separate violation. If three different sensitive medical files are released without proper redaction, that could theoretically mean three separate $50,000 penalties. For a regular person—say, a healthcare worker or a teacher whose private records are caught in the crossfire—this provides a powerful financial tool to fight back against the emotional distress and reputational damage of a public data leak.
Normally, suing the federal government is like trying to run through a brick wall because of 'sovereign immunity,' but the REDACT Act explicitly waives that immunity. This means the government is giving you permission to take them to court just like you would a private company. The bill also covers your legal bases by requiring the court to award reasonable attorney’s fees and court costs to anyone who wins their case. This is a massive detail for middle-class families who might otherwise be priced out of a legal battle against a federal agency. It ensures that if the government’s negligence causes you harm, you don’t have to go into debt just to hold them accountable.
The clock starts ticking as soon as you realize your information has been exposed. The bill sets a five-year statute of limitations from the moment you first learn of the violation. For any leaks that happen after November 19, 2025, the rules are straightforward. However, the bill also includes a 'grace period' for those who find out about a leak before the law is officially enacted, giving them a full five years from the date of enactment to file their claim. While the bill is clear on the money, the 'clearly unwarranted' standard for privacy will be the main battleground in court. It means judges will have to decide if the public’s right to know outweighs an individual’s right to keep their medical history or personal life private, making the specific details of each redaction failure the key to any payout.