Commerce, Manufacturing, and Trade

WASHINGTON, D.C. – Today, Congressman Brett Guthrie (KY-02), Chairman of the House Committee on Energy and Commerce, and Congressman Gus Bilirakis (FL-12), Chairman of the Subcommittee on Commerce, Manufacturing, and Trade, along with 10 members of the subcommittee, sent a letter to DeepSeek regarding their data practices and close relationship with the Chinese Communist Party (CCP). “DeepSeek admits to sending Americans’ personal information to servers in China, where it is undoubtedly accessed by officials connected to the Chinese Communist Party. We are concerned that this relationship with agents having close connections to our primary adversary jeopardizes our data and our national security,” said Chairmen Guthrie and Bilirakis. “To ensure Americans and their businesses are secure from foreign interference, we are launching this investigation into DeepSeek and the risks it poses to our nation.” KEY LETTER EXCERPT: “By its own admission, the company’s mobile application—available on app stores in the U.S.—is sending Americans’ personal information to servers in the People’s Republic of China. According to media reports, the company is also sharing users’ personal information with other CCP-linked entities, including ByteDance Ltd. Researchers, meanwhile, have identified serious weaknesses in DeepSeek’s purported security controls and model safeguards. To address these risks, a growing number of states, including New York, Texas, and Virginia have banned DeepSeek on government devices, with states attorneys-general calling for a broader ban.” Background: On January 20, 2025, DeepSeek launched its open-source AI chatbot. On February 18, 2025, DeepSeek was accused of sharing user data with ByteDance, the parent company of TikTok. On March 6, 2025, 21 state attorneys-general urged Congressional leadership to prohibit government devices from “downloading and using the Chinese Communist Party’s DeepSeek AI Software.” On April 16, 2025, the Select Committee on the Chinese Communist Party published a report on DeepSeek funneling American data to the CCP and manipulating results to align with CCP propaganda. The Committee members requested answers to the following questions: Provide a detailed description of the types and sources of data used to train your AI models, including any U.S. personal or proprietary information. Confirm whether information entered into your AI applications or chatbots by American consumers or businesses is used to train your AI models. If yes, identify where this information is stored and accessed from, and whether it is shared with any state entity of the People’s Republic of China or other Chinese companies. Describe the technical, administrative, and physical controls used to secure personal and proprietary information associated with your AI offerings, as well as your process for evaluating the security of third-party service providers. Provide a detailed description of any U.S. technology products or services used to develop, integrate, or bring to market your AI offerings. This includes the use of open and closed source AI models developed by U.S. companies and the unauthorized “distillation” of American models. Provide a detailed description of how your AI models are developed and trained, including any steps taken to influence system outputs for alignment with Chinese Communist Party ideology or political goals. Provide a detailed description of any direct or indirect subsidies you receive from the People’s Republic of China, or its political subdivisions, related to AI development. Confirm whether your company has received a request from the People’s Republic of China, or its political subdivisions, for data related to your company’s AI offerings. This includes personal and proprietary data used to train or finetune an AI model and data ingested by your AI services. CLICK HERE to read the full letter. CLICK HERE to read the story from Fox News. ###

WASHINGTON, D.C.  – Today, Congressman Brett Guthrie (KY-02), Chairman of the House Committee on Energy and Commerce, Congressman Gus Bilirakis (FL-12), Chairman of the Subcommittee on Commerce, Manufacturing, and Trade, and Congressman Gary Palmer (AL-06), Chairman of the Subcommittee on Oversight and Investigations, sent a letter to 23andMe regarding the handling of Americans' sensitive data following the company's decision to file for bankruptcy. KEY EXCERPT: “According to 23andMe’s privacy statement, in a bankruptcy, customers’ ‘Personal Information may be accessed, sold or transferred as part of that transaction and this Privacy Statement will apply to [customer] Personal Information as transferred to the new entity.’ Additionally, a judge recently ruled 23andMe has the right to sell the sensitive medical and genetic information of its 15 million customers, which is considered to be the company’s most valuable asset. With the lack of a federal comprehensive data privacy and security law, we write to express our great concern about the safety of Americans’ most sensitive personal information.” Background: On March 23, 2025, 23andMe initiated Chapter 11 bankruptcy proceedings, which could have ramifications for the highly sensitive information of millions of Americans. While Americans’ personal health information is protected under the Health Insurance Portability and Accountability Act (HIPAA), these protections only apply if the information is collected by a HIPAA covered entity. Generally, direct-to-consumer companies, like 23andMe, are not covered by HIPAA. Customers have reported issues accessing and deleting their data from their 23andMe accounts. The Chairmen have requested answers to the following questions: If 23andMe were to sell the personal information of its customers either as a standalone asset or as part of a broader sale of the company, what post-sale data privacy and security protections would be in place for its customers’ personal information? Please describe how the representations made in 23andMe’s privacy statement will continue to apply—and be enforced—if the personal information of 23andMe’s customers is sold to a third party. Please include in this response information about what, if anything, would hold a third-party buyer to 23andMe’s privacy statement or prevent it from subsequently using, transferring, or otherwise selling, such information in the future. Does 23andMe plan to change its privacy statement at any time prior to selling any customers’ personal information? If so, please explain the change 23andMe plans to implement and when those changes will go into effect. Does 23andMe intend to vet prospective buyers to which it may sell its customers’ personal information? If so, please detail the vetting process and whether it will include the prospective buyer’s history of implementing data security protections and compliance with sectoral, state, or any other data privacy and security laws. If not, please explain why. Please detail the categories of customer information 23andMe has, and of that what 23andMe is considering selling. Has 23andMe notified its customers of the company’s bankruptcy announcement? If so, please attach the customer notification. If not, please explain why. Has 23andMe provided its customers with a guide for how to delete, or request to delete any information currently in 23andMe’s possession? If so, please provide a copy of that guide and specify when it was provided to customers. If not, please explain why, and explain whether 23andMe will contact each of its customers and provide an opportunity to delete their personal information prior to a potential sale of the company or personal information maintained by the company. Please detail the number of requests 23andMe received from its customers to delete their personal information between when 23andMe filed for bankruptcy and the date of the response to this letter. Of those requests, please provide a breakdown of how many requests were made by customers through their 23andMe online accounts and how many were made via customer service calls because customers were unable to successfully delete their information through their online accounts. Of those requests, please detail the number of fulfilled requests. Will 23andMe offer for sale any information in which a customer has requested the deletion of such information? If so, does 23andMe’s privacy policy consider selling information a legitimate purpose for retaining information past a customer's request to delete their information? Will 23andMe deidentify its customers’ personal information prior to selling it or the company? If so, please detail which information will be deidentified. If not, please explain why the company is electing not to deidentify information. CLICK HERE to read the full letter. CLICK HERE to read the story from CNBC. ###

WASHINGTON, D.C. – Today, Congressman Brett Guthrie (KY-02), Chairman of the House Committee on Energy and Commerce, and Congressman Gus Bilirakis (FL-12), Chairman of the Subcommittee on Commerce, Manufacturing, and Trade, released the following statement after Mark Meador was confirmed by the Senate to serve as a Commissioner on the Federal Trade Commission: “In the last administration, the FTC abandoned its rich bipartisan tradition and historical mission, in favor of a radical agenda and partisan mismanagement. The Commission needs to return to protecting Americans from bad actors and preserving competition in the marketplace,” said Chairmen Guthrie and Bilirakis. “We trust that Commissioner Meador, along with Chairman Ferguson and Commissioner Holyoak, are capable of restoring America’s trust in this institution and returning the Commission to its former position as the country’s premier consumer protection agency focusing on transparency and accountability.” ###

WASHINGTON, D.C. – Today, Congressman Brett Guthrie (KY-02), Chairman of the House Committee on Energy and Commerce, and Congressman Gus Bilirakis (FL-12), Chairman of the Subcommittee on Commerce, Manufacturing, and Trade, along with 10 members of the subcommittee, sent a letter to DeepSeek regarding their data practices and close relationship with the Chinese Communist Party (CCP). “DeepSeek admits to sending Americans’ personal information to servers in China, where it is undoubtedly accessed by officials connected to the Chinese Communist Party. We are concerned that this relationship with agents having close connections to our primary adversary jeopardizes our data and our national security,” said Chairmen Guthrie and Bilirakis. “To ensure Americans and their businesses are secure from foreign interference, we are launching this investigation into DeepSeek and the risks it poses to our nation.” KEY LETTER EXCERPT: “By its own admission, the company’s mobile application—available on app stores in the U.S.—is sending Americans’ personal information to servers in the People’s Republic of China. According to media reports, the company is also sharing users’ personal information with other CCP-linked entities, including ByteDance Ltd. Researchers, meanwhile, have identified serious weaknesses in DeepSeek’s purported security controls and model safeguards. To address these risks, a growing number of states, including New York, Texas, and Virginia have banned DeepSeek on government devices, with states attorneys-general calling for a broader ban.” Background: On January 20, 2025, DeepSeek launched its open-source AI chatbot. On February 18, 2025, DeepSeek was accused of sharing user data with ByteDance, the parent company of TikTok. On March 6, 2025, 21 state attorneys-general urged Congressional leadership to prohibit government devices from “downloading and using the Chinese Communist Party’s DeepSeek AI Software.” On April 16, 2025, the Select Committee on the Chinese Communist Party published a report on DeepSeek funneling American data to the CCP and manipulating results to align with CCP propaganda. The Committee members requested answers to the following questions: Provide a detailed description of the types and sources of data used to train your AI models, including any U.S. personal or proprietary information. Confirm whether information entered into your AI applications or chatbots by American consumers or businesses is used to train your AI models. If yes, identify where this information is stored and accessed from, and whether it is shared with any state entity of the People’s Republic of China or other Chinese companies. Describe the technical, administrative, and physical controls used to secure personal and proprietary information associated with your AI offerings, as well as your process for evaluating the security of third-party service providers. Provide a detailed description of any U.S. technology products or services used to develop, integrate, or bring to market your AI offerings. This includes the use of open and closed source AI models developed by U.S. companies and the unauthorized “distillation” of American models. Provide a detailed description of how your AI models are developed and trained, including any steps taken to influence system outputs for alignment with Chinese Communist Party ideology or political goals. Provide a detailed description of any direct or indirect subsidies you receive from the People’s Republic of China, or its political subdivisions, related to AI development. Confirm whether your company has received a request from the People’s Republic of China, or its political subdivisions, for data related to your company’s AI offerings. This includes personal and proprietary data used to train or finetune an AI model and data ingested by your AI services. CLICK HERE to read the full letter. CLICK HERE to read the story from Fox News. ###

WASHINGTON, D.C.  – Today, Congressman Brett Guthrie (KY-02), Chairman of the House Committee on Energy and Commerce, Congressman Gus Bilirakis (FL-12), Chairman of the Subcommittee on Commerce, Manufacturing, and Trade, and Congressman Gary Palmer (AL-06), Chairman of the Subcommittee on Oversight and Investigations, sent a letter to 23andMe regarding the handling of Americans' sensitive data following the company's decision to file for bankruptcy. KEY EXCERPT: “According to 23andMe’s privacy statement, in a bankruptcy, customers’ ‘Personal Information may be accessed, sold or transferred as part of that transaction and this Privacy Statement will apply to [customer] Personal Information as transferred to the new entity.’ Additionally, a judge recently ruled 23andMe has the right to sell the sensitive medical and genetic information of its 15 million customers, which is considered to be the company’s most valuable asset. With the lack of a federal comprehensive data privacy and security law, we write to express our great concern about the safety of Americans’ most sensitive personal information.” Background: On March 23, 2025, 23andMe initiated Chapter 11 bankruptcy proceedings, which could have ramifications for the highly sensitive information of millions of Americans. While Americans’ personal health information is protected under the Health Insurance Portability and Accountability Act (HIPAA), these protections only apply if the information is collected by a HIPAA covered entity. Generally, direct-to-consumer companies, like 23andMe, are not covered by HIPAA. Customers have reported issues accessing and deleting their data from their 23andMe accounts. The Chairmen have requested answers to the following questions: If 23andMe were to sell the personal information of its customers either as a standalone asset or as part of a broader sale of the company, what post-sale data privacy and security protections would be in place for its customers’ personal information? Please describe how the representations made in 23andMe’s privacy statement will continue to apply—and be enforced—if the personal information of 23andMe’s customers is sold to a third party. Please include in this response information about what, if anything, would hold a third-party buyer to 23andMe’s privacy statement or prevent it from subsequently using, transferring, or otherwise selling, such information in the future. Does 23andMe plan to change its privacy statement at any time prior to selling any customers’ personal information? If so, please explain the change 23andMe plans to implement and when those changes will go into effect. Does 23andMe intend to vet prospective buyers to which it may sell its customers’ personal information? If so, please detail the vetting process and whether it will include the prospective buyer’s history of implementing data security protections and compliance with sectoral, state, or any other data privacy and security laws. If not, please explain why. Please detail the categories of customer information 23andMe has, and of that what 23andMe is considering selling. Has 23andMe notified its customers of the company’s bankruptcy announcement? If so, please attach the customer notification. If not, please explain why. Has 23andMe provided its customers with a guide for how to delete, or request to delete any information currently in 23andMe’s possession? If so, please provide a copy of that guide and specify when it was provided to customers. If not, please explain why, and explain whether 23andMe will contact each of its customers and provide an opportunity to delete their personal information prior to a potential sale of the company or personal information maintained by the company. Please detail the number of requests 23andMe received from its customers to delete their personal information between when 23andMe filed for bankruptcy and the date of the response to this letter. Of those requests, please provide a breakdown of how many requests were made by customers through their 23andMe online accounts and how many were made via customer service calls because customers were unable to successfully delete their information through their online accounts. Of those requests, please detail the number of fulfilled requests. Will 23andMe offer for sale any information in which a customer has requested the deletion of such information? If so, does 23andMe’s privacy policy consider selling information a legitimate purpose for retaining information past a customer's request to delete their information? Will 23andMe deidentify its customers’ personal information prior to selling it or the company? If so, please detail which information will be deidentified. If not, please explain why the company is electing not to deidentify information. CLICK HERE to read the full letter. CLICK HERE to read the story from CNBC. ###

Washington, D.C. — House Energy and Commerce Committee Chair Cathy McMorris Rodgers (R-WA) today sent letters to five independent federal agencies urging the Biden-Harris administration appointees to abandon partisan efforts and instead focus remaining efforts on bipartisan, consensus items.   The letters state, “The results of the 2024 presidential election are now apparent and leadership of the [agency] will soon change. As a traditional part of the peaceful transfer of power, the [agency] should immediately stop work on any partisan or controversial item under consideration, consistent with applicable law and regulation.”    Click below to read each agency’s letter:   Consumer Product Safety Commission (CPSC) Federal Communications Commission (FCC)   Federal Trade Commission (FTC)   Federal Energy Regulatory Commission (FERC)   Nuclear Regulatory Commission (NRC) Note: In the letter, Chair Rodgers urges NRC to continue timely implementation of the ADVANCE Act.