A reasonable compromise on federal data privacy should protect and promote innovation by minimizing compliance costs and restrictions on data use, as well as address concrete privacy harms, improve transparency requirements, and strengthen oversight and enforcement.