Lina Khan

No public contact details available.

Open letters

Write to Lina

Be the first constituent to publish an open letter to this representative.

Key Figures

By February 2026, 20 states had enacted comprehensive consumer data privacy laws including California, Colorado, Connecticut, Virginia, and newly added Indiana, Kentucky, and Rhode Island, creating a patchwork of conflicting standards. Congress repeatedly failed to pass the American Privacy Rights Act, which would have established a single federal standard. The state-by-state approach left consumers in 30 states without comprehensive protections and created compliance costs hardest on small businesses.

The Federal Trade Commission ordered data broker Mobilewalla to delete years of GPS location data it had collected from consumers without meaningful consent. The FTC found Mobilewalla had sold precise location data to third parties, including data on visits to health clinics and places of worship. The order required data deletion, barred future collection without affirmative consent, and imposed ongoing compliance monitoring.

As 2025 began, at least 17 states had enacted or were advancing AI regulation laws covering bias audits, transparency requirements, and automated decision-making in employment, housing, and healthcare. The patchwork of state laws created a direct Commerce Clause conflict, as companies faced incompatible compliance requirements across jurisdictions. Legal scholars warned the absence of a federal AI framework was pushing the United States toward the same regulatory fragmentation that delayed broadband and data privacy policy for years.

The Federal Trade Commission announced a proposed settlement with Mobilewalla over alleged collection and sale of sensitive location data. The case was notable because the FTC challenged collection of data from online advertising auctions for uses beyond participating in the auction.

The Federal Trade Commission announced action against Gravy Analytics and Venntel for allegedly tracking and selling sensitive location data, including visits to health facilities, places of worship, and other sensitive sites. The proposed order would restrict use and sale of sensitive location data and require deletion steps.