Smart Meter Data Privacy Protection Act
- Sponsor
- Rep. Riley, Josh [D-NY-19]
- Committees
- Energy and Commerce Committee (primary)
- Last action
- Sep 3, 2026
Bottom line
The bill establishes federal privacy protections for smart meter data, focusing on foreign-owned state-regulated electric utilities, with enforcement by the FTC and State Attorneys General.
What it actually does
This bill prohibits certain state-regulated electric utilities from using, licensing, selling, or monetizing personal consumption data collected by smart meters, except for authorized operational purposes like billing or grid reliability. It mandates annual reports to the Federal Trade Commission (FTC) on data use and sharing, and establishes penalties for violations, requiring utilities to credit affected consumers three times the revenue derived from misuse.
Proponents argue
Supporters argue that this bill is essential for protecting consumer privacy in an era of increasing data collection by utilities. They contend that smart meter data, which can reveal intimate details about household activities, should not be exploited for commercial gain without explicit consumer authorization. The bill provides a clear federal baseline for data protection while allowing states to implement stronger measures, ensuring consumers have control over their personal energy consumption information.
Opponents contend
Critics might argue that the bill's narrow scope, applying only to utilities 'not wholly owned by United States persons,' creates an uneven playing field and fails to address privacy concerns across the entire utility sector. Some may also contend that the compliance burden and potential penalties could increase operational costs for affected utilities, which might ultimately be passed on to consumers through higher rates, despite the bill's prohibition on recovering credit costs.
The bill is very short and clearly written, making it highly accessible for a reader to understand its provisions and implications within a few minutes.
Section 2(a)
Prohibition on Unauthorized Use of Personal Consumption Data
This provision forbids 'covered utilities' from using, licensing, selling, or otherwise monetizing personal consumption data collected from smart meters, unless the use falls under specific 'authorized operational purposes.' These purposes include essential functions like billing, managing outages, ensuring grid reliability, regulatory compliance, and consumer-authorized demand response programs.
Supporters argue
Supporters argue this prohibition is fundamental to safeguarding consumer privacy, preventing sensitive energy usage data from being exploited for commercial purposes without consent. It ensures that utilities focus on their core service delivery rather than data brokering.
Critics contend
Opponents might argue that restricting data use beyond operational purposes limits innovation in energy services, such as personalized energy efficiency recommendations or new demand-side management programs that could benefit consumers. They may also claim it restricts potential revenue streams that could help keep rates lower.
Tradeoffs
The provision balances consumer privacy rights against potential commercial innovation and revenue generation for utilities. It seeks to protect individual data while allowing for necessary operational uses that maintain grid stability and service.
Section 2(c)
Penalties and Consumer Credits for Violations
If the Federal Trade Commission (FTC) determines a covered utility has violated the data use prohibition, the utility must credit the affected electric consumer's bill with an amount equal to three times the revenue generated from the unauthorized use. Crucially, the bill explicitly states that the utility cannot recover the cost of these credits from any other electric consumers.
Section 2(d) and 2(e)
Federal and State Enforcement Mechanisms
These sections empower both the Federal Trade Commission (FTC) and State Attorneys General to enforce the bill's provisions. Violations are treated as unfair or deceptive acts under the FTC Act, granting the FTC broad enforcement powers. State Attorneys General can bring civil actions on behalf of their residents, with provisions for notifying the FTC and limitations if a federal action is already underway.
The definition of 'covered utility' is limited to 'a State regulated electric utility... that is not wholly owned by United States persons.'
Section 2(h)(2)
Why it matters:While definitions are standard legislative practice, this specific exclusion significantly narrows the bill's scope. Its placement in definitions rather than a prominent 'applicability' section could make its specific targeting less immediately apparent.
Case for: Supporters might argue that this specific targeting addresses a particular vulnerability or concern related to data security and foreign ownership, perhaps related to national security or data sovereignty. It allows for a focused approach to a perceived problem without broadly impacting all domestic utilities.
Case against: Critics would argue that this limitation is arbitrary or discriminatory, failing to provide privacy protections for consumers served by utilities wholly owned by U.S. persons who also collect smart meter data. They may suggest it creates an unfair competitive disadvantage or is politically motivated rather than based on universal privacy principles.
Estimated impact: This provision significantly limits the number of utilities and, consequently, the number of electric consumers directly covered by the bill's protections, focusing its impact on a specific subset of the utility market.