The bill prohibits data brokers from selling location and health data, with exceptions for HIPAA compliance, news publications, and individual-authorized disclosures. The Federal Trade Commission will enforce the act, with penalties and private enforcement allowed. Violations incur civil penalties capped at 15% of the parent entity's 12-month revenue. The act preempts state or local laws requiring disclosure contrary to its provisions. The bill defines terms and provides exclusive jurisdiction to district courts, establishing a statute of limitations. It allocates $1 billion to the Commission for their work in fiscal year 2027, with funds available until September 30, 2035.