“That’s what’s most important to think about: What will this change about business models?” said Alysa Hutnik, a senior executive at the privacy software firm Ketch.

       

For years, the business community has been calling for a comprehensive federal privacy law, frustrated with operating under a patchwork of sometimes-conflicting state laws. Now, Congress is considering one that’s extremely wide-ranging and that observers say has a legitimate chance of passage.

The American Privacy Rights Act—unveiled over the weekend by Senate Commerce Committee chair Maria Cantwell (D-Washington) and House Commerce Committee chair Cathy McMorris Rodgers (R-Washington)—would cover every company with annual revenue topping $40 million, along with nonprofits, a realm previously untouched by the privacy regime.