Your location, medical information and identifying details can move through a commercial data market most people never see. On February 9, 2026, the Federal Trade Commission announced that it had sent warning letters to 13 data brokers regarding the Protecting Americans’ Data from Foreign Adversaries Act of 2024.
The information the law covers
The federal law targets the provision of personally identifiable sensitive data to designated foreign adversaries or entities controlled by them. The FTC identified categories including health, financial, genetic, biometric and geolocation data, as well as account credentials and government identifiers. The recipients were advised to assess their practices and comply with the statute.
What a warning letter proves
The existence of a letter does not establish that every recipient violated the law. The FTC said some recipients offered products or insights related to individuals’ status as members of the armed forces, and the agency highlighted the statute’s obligations. It also warned that proven violations may bring civil penalties. That is enforcement guidance, not a public conviction or proof that any named person’s records were sold overseas.
Follow the market, not the panic
The investigative questions are who supplies the information, who can buy access, how purchasers are vetted and how companies document restrictions on onward disclosure. A ban on specific foreign transfers does not, by itself, resolve all concerns about domestic collection or sale of sensitive data.
Featured image shows a real person using a smartphone, contextual to location and device-generated data; no photographed person is alleged to be affected by the FTC action.
