H.R. 10284 — Smart Meter Data Privacy Protection Act

This section prohibits covered utilities from using or monetizing personal consumption data except for authorized operational purposes such as billing, outage management, grid reliability, regulatory compliance, and consumer-authorized demand response. It requires annual reports to the Federal Trade Commission detailing the types of data collected, uses, and recipients; mandates bill credits equal to three times any revenue from violations, which utilities may not recover from consumers; authorizes Federal Trade Commission enforcement as an unfair or deceptive practice and state parens patriae actions; directs the Commission to establish data security and retention standards; and sets a federal baseline without preempting stronger state laws.