Congress is moving to restrict how companies use personal data collected by AI chatbots like Claude, signaling a major shift in how lawmakers view artificial intelligence and privacy. Senator Elizabeth Warren and Representative Mary Gay Scanlon are preparing to introduce an updated version of the Health and Location Data Protection Act, which will expand protections beyond data brokers to include all companies that collect and sell sensitive health and location information. The revised legislation reflects growing concerns about how AI technologies are capturing personal data at unprecedented scale.

Why Is Congress Suddenly Targeting AI Chatbots?

The original Health and Location Data Protection Act was introduced in June 2022, but the tech landscape has transformed dramatically in four years. Back then, the focus was narrowly on data brokers. Today, AI systems like Claude, ChatGPT, and other large language models (LLMs) are embedded in countless applications, collecting vast amounts of personal information about users' health conditions, locations, and behaviors. The revised bill recognizes this reality by broadening its scope to prohibit all companies, not just specialized data brokers, from selling such sensitive information.

The timing is significant. As AI tools become more prevalent in everyday life, the question of who controls personal data has moved from a niche privacy concern to a mainstream policy issue. Without stringent rules, companies could potentially exploit health and location data collected through AI interactions for profit, affecting everything from personalized advertising to more invasive uses.

What Does This Mean for AI Companies and Users?

The legislation faces predictable headwinds in committee, as industry stakeholders are likely to push back against restrictions on data sales. Tech companies have remained largely silent on the proposed changes, with spokespeople not immediately responding to requests for comment. This silence leaves room for speculation about how the industry might adapt or resist these new rules.

For users, the implications are substantial. The bill addresses a fundamental tension in the AI era: the ability to maintain control over personal data in the face of powerful tools that accumulate vast amounts of information. If passed and enforced rigorously, the legislation could reshape how companies handle sensitive information collected through AI interactions.

How to Protect Your Data in the AI Era

• Understand What Data You Share: Be aware that AI chatbots and other AI-powered services may collect health information, location data, and other sensitive details from your interactions, even if you don't explicitly provide them.
• Review Privacy Policies: Check the privacy policies of AI tools and services you use to understand how your data is collected, stored, and potentially sold to third parties.
• Advocate for Stronger Protections: Support legislative efforts like the updated Health and Location Data Protection Act by contacting elected representatives about the importance of data privacy safeguards.
• Limit Unnecessary Data Sharing: When possible, avoid providing health or location information to AI services unless absolutely necessary for the service to function.

The effectiveness of Warren and Scanlon's legislation will ultimately depend on its enforcement provisions and how rigorously they are implemented. Privacy advocates are gaining momentum in Washington, but the outcome remains uncertain as the bill navigates the committee process.

In a world where data is increasingly valuable currency, this legislative push may mark a key moment for data privacy in the AI age. The question now is whether the tech industry will adapt to these changes voluntarily or resist and find loopholes. The stakes are high, and the outcome could fundamentally redefine the parameters of personal privacy as AI systems become even more integrated into daily life.