In what may be a landmark ruling that could transform the outlook on online privacy in the United States, the Supreme Court struck down some of the main provisions of the American Data Privacy and Protection Act of 2022, as amended in 2025.
The decision was announced on March 6, 2026, amid growing attention to the problem of data breaches and corporate surveillance. The justices voted 5-4 to invalidate clauses requiring mandatory data minimisation and express consent to disclose data to third parties, finding these to be an unconstitutional impediment to free speech and interstate commerce.
This ruling was made in a consolidated case challenging the law, in which giant tech firms, such as Meta and Google parent Alphabet, questioned the Federal Trade Commission’s authority to enforce it. The opinion issued by the court, authored by Justice Neil Gorsuch, contends that the requirements violate companies’ rights to collect and utilise data using algorithms, which he termed the key to contemporary innovation.
The decision will expose consumers to the exploitation of unsubstantiated data, which can only exacerbate already existing problems, such as identity theft and targeted misinformation, dissenting justices, headed by Sonia Sotomayor, cautioned.
The History of the Data Privacy Legislation
The American Data Privacy and Protection Act was first enacted in 2022 as a bipartisan framework to establish a standard nationwide approach to data management, replacing a confusing array of state laws, such as California’s Consumer Privacy Act.
In 2025, it was broadened to encompass biometric data and AI-based profiling and required companies to avoid collecting more data than is strictly necessary in the service delivery process. It was celebrated by its supporters as a much-needed defence against the excesses of Big Tech and denounced by its opponents as excessive and chilling economic activity in the digital economy.
The implementation of the law was immediately hampered, and enforcement action against companies that failed to comply resulted in fines of billions of dollars. Another instance was a social media platform that paid a fine of $500 million in 2025 due to not seeking user permission to use facial recognition features.
The Supreme Court’s intervention reverses such penalties, adding that all cases in progress under the invalidated sections should be reviewed. This has led to efforts by privacy advocates to have Congress pass smaller legislation that will withstand judicial review.
Facts of the Supreme Court Decision
According to the majority decision, Justice Gorsuch stressed that data collection is a form of expression that must be safeguarded by the First Amendment, which made similar arguments to other case outcomes on content moderation.
The data minimisation clause was specifically invalidated by the court, which argued that it sets imprecise standards that could lead to arbitrary implementation. Also, the opt-in consent requirement for sharing data was considered to contravene the Commerce Clause because it imposed unnecessary restrictions on business operations across states.
Part of the law, including barriers and obstacles to discriminatory data practices and data security audit requirements, is also maintained in the ruling. However, it sets the case back to the lower courts to reconsider fines and compliance orders issued after 2025.
It may result in refunds or settlements totalling more than 10 billion dollars to the companies harmed, according to legal experts. The ruling also clears the way for states to reintroduce or reinforce their own privacy regulations, which may again create a patchwork of lawsuit-ridden rules.
Industry and Advocacy Group Response
The leaders of the tech industry celebrated the decision as a win for innovation. The Internet Association spokesperson said the ruling will eliminate unnecessary obstacles and allow businesses to use data responsibly to advance AI and customised services.
After-hours trading increased major technology stocks on March 6, 2026, indicating that investors have greater confidence amid lower regulatory risk. On the other hand, the consumer rights groups lamented the decision as a blow to individual rights.
An amicus brief submitted by the Electronic Privacy Information Centre stated that the law was essential at a time of extensive surveillance. Its director said it was frustrating since in the absence of federal regulation, algorithmic biases would threaten vulnerable people in the community like children and minorities.
Both sides of the aisle reacted swiftly to the politicians’ actions. Senate Judiciary Committee Chair Dick Durbin said that it would hold hearings to examine legislative fixes, and Republican colleagues proposed a self-centred industrial approach instead of government regulation.
The transatlantic data flows are impacted by the ruling internationally. The European Union’s General Data Protection Regulation, which has been considered a world model, now risks being challenged by the U.S., and this would disrupt transatlantic trade. Brussels officials showed they would keep a close watch on developments and that there could be a revision to data transfer structures.
Widening U.S. Law and Economy Implications
Economists estimate that the ruling could increase the digital economy by 50 billion a year due to greater data use, albeit at the expense of declining trust in online platforms. The results of a recent survey by the Pew Research Centre showed that two out of every three Americans would prefer more stringent privacy regulations, which shows a lack of alignment between judicial decisions and public opinion. The decision also overlaps with current arguments on AI ethics, since data privacy is part of ensuring that it will not be abused in the implementation of machine learning.
Moving ahead, legal experts expect a series of lawsuits against such laws in other sectors, such as health data under HIPAA or financial data under the Gramm-Leach-Bliley Act. The Biden administration, through the Department of Justice, has expressed its objection to the decision and may request new legislation during the next congressional session. Meanwhile, states such as New York and Illinois are preparing to pass more advanced privacy bills, which could set the stage for future Supreme Court reviews.
This case highlights the tension between technological advancement and individual rights in the digital era. The equilibrium that the courts will create will determine the norms of privacy in generations to come as society struggles to deal with the tremendous volumes of data produced every day. As the midterm elections are near, data privacy is an election issue that will affect voter concerns regarding tech regulation.