H.R.1181

Protecting Privacy in Purchases Act

Chamber Passed·7/15/26

Overview

This legislation directly targets the use of specialized merchant category codes (MCCs) to track and identify firearms and ammunition purchases at the point of financial transaction. The bill responds to a specific development in the payments industry: the International Organization for Standardization's creation of a dedicated MCC for firearms retailers, which critics argued would enable financial institutions and payment networks to monitor, flag, or restrict lawful gun purchases. The bill's core objective is to prevent payment card networks and the entities that process card transactions from singling out firearms retailers through distinctive coding that separates them from general merchandise or sporting goods sellers. By doing so, the legislation aims to protect the financial privacy of law-abiding gun buyers and prevent what proponents characterize as de facto surveillance of constitutionally protected commerce. The bill operates exclusively within the federal regulatory framework governing payment systems and commerce, establishing new prohibitions, an enforcement mechanism through the Attorney General, and a preemption clause that displaces any state or local efforts to mandate such coding.

Core Provisions

The bill establishes two parallel prohibitions that together close off both ends of the MCC assignment process. Under §2(a)(1), payment card networks are forbidden from requiring firearms retailers to use any merchant category code that distinguishes them from general-merchandise retailers or sporting-goods retailers. Under §2(a)(2), covered entities — defined as entities that establish merchant relationships for processing credit, debit, or prepaid card transactions — are prohibited from assigning such distinguishing codes to firearms retailers. These twin prohibitions ensure that neither the network rules that govern card acceptance nor the direct contractual relationships between processors and merchants can be used to impose distinctive firearms-specific coding. The bill defines 'merchant category code' as a multi-digit classification code issued by the International Organization for Standardization, directly targeting the ISO 5941 code that prompted the legislation. 'Firearms retailer' is defined by reference to 18 U.S.C. § 921(a), encompassing persons or entities engaged in the lawful business of selling or trading firearms or ammunition, with firearms and ammunition defined by cross-reference to the relevant subsections of that statute. The bill creates no new amendments to existing statutes but establishes a freestanding prohibition operative 90 days after enactment.

Key Points

  • Payment card networks prohibited from requiring distinctive MCC use by firearms retailers [§2(a)(1)]
  • Covered entities prohibited from assigning distinctive MCCs to firearms retailers [§2(a)(2)]
  • MCC defined as a multi-digit ISO-issued merchant classification code [§2(e)(5)]
  • Firearms retailer defined by reference to 18 U.S.C. § 921(a)(3), (5), (7), (16), (29), (30) [§2(e)(3)-(4)]
  • Covered entity defined as an entity establishing merchant relationships for card transaction processing [§2(e)(2)]
  • Complaint process to be established within 90 days of enactment [§2(b)(1)]

Legal References

  • 18 U.S.C. § 921(a)(3), (5), (7), (16), (29), (30) — definitions of firearm, frame, receiver, dealer, ammunition, and related terms
  • 18 U.S.C. § 921(a)(17)(A) — definition of ammunition
  • ISO Merchant Category Code framework (International Organization for Standardization)

Implementation

Enforcement authority is vested exclusively in the Attorney General, who bears responsibility for receiving complaints, investigating violations, and pursuing remedies. Within 90 days of enactment, the Attorney General must establish a formal process for submitting complaints alleging violations of the prohibitions [§2(b)(1)]. Upon receiving a complaint, the Attorney General is required to investigate the alleged violation [§2(b)(2)]. Where a violation is found, the Attorney General must issue a written notice to the violating party, which then has 30 days to remedy the violation [§2(b)(3)]. If the violation is not remedied within that 30-day cure period, the Attorney General is authorized to bring a civil action in federal court seeking an injunction [§2(b)(4)(A)]. The bill explicitly forecloses any private right of action, meaning that aggrieved firearms retailers or individuals cannot independently sue payment networks or covered entities for violations — enforcement is entirely a government function [§2(b)(4)(B)]. The Attorney General is also required to submit annual reports to Congress detailing investigations conducted, summaries of findings, and data on the effectiveness of the enforcement regime [§2(d)]. No dedicated appropriation is specified, meaning implementation costs are absorbed within existing Department of Justice resources.

Impact

The primary direct beneficiaries of this legislation are firearms retailers and, derivatively, their customers. Firearms retailers operating under the existing ISO MCC framework face the prospect of their transaction data being aggregated, analyzed, or acted upon by financial institutions in ways that could restrict access to payment processing services. By prohibiting the assignment of distinguishing codes, the bill removes the data infrastructure that would enable such targeting. Payment card networks and covered entities bear the compliance burden, as they must audit and modify their coding practices and network rules to conform to the prohibitions. The administrative burden on the Department of Justice is real but bounded — the complaint-driven enforcement model means the agency responds to reported violations rather than conducting proactive market surveillance. The absence of a private right of action limits litigation exposure for the payments industry while concentrating enforcement discretion in the executive branch. There are no sunset provisions, making the prohibitions permanent absent future legislative action. The bill does not impose civil monetary penalties, relying solely on injunctive relief as the enforcement remedy, which may limit its deterrent effect against large payment networks that could absorb litigation costs.

Legal Framework

The bill rests on Congress's Commerce Clause authority to regulate interstate commerce, as payment card networks and transaction processing entities operate as quintessential instruments of interstate commerce. The statutory definitions anchor the bill's scope to existing federal firearms law under Title 18, ensuring that the protected class of 'firearms retailers' is defined with precision by reference to established federal definitions rather than creating new, potentially ambiguous categories. The preemption provision in §2(c) is broad and explicit: the bill displaces any state or local law, regulation, or rule that would require or permit the use of merchant category codes that distinguish firearms retailers from general-merchandise or sporting-goods retailers. This preemption operates in both directions — it prevents states from mandating the very coding practices the federal bill prohibits, foreclosing the possibility that state-level financial regulators could require payment processors to implement firearms-specific MCCs. Judicial review is available through the federal court system in the context of injunctive actions brought by the Attorney General, but the bill creates no independent administrative adjudication process and no private cause of action, meaning courts will only encounter the statute in government-initiated enforcement proceedings.

Legal References

  • U.S. Const. Art. I, § 8, cl. 3 (Commerce Clause)
  • 18 U.S.C. § 921 — Federal Firearms Act definitions
  • 18 U.S.C. § 921(a)(17)(A) — ammunition definition

Critical Issues

The bill's exclusive reliance on injunctive relief as an enforcement remedy represents a significant structural weakness. Without civil monetary penalties, payment card networks — which are among the largest and most profitable financial infrastructure companies in the world — face no financial consequence for violations beyond the cost of litigation and eventual compliance. A determined violator could delay compliance through litigation with minimal financial risk. The absence of a private right of action further concentrates enforcement in the Attorney General's office, creating a dependency on executive branch prioritization that may vary across administrations. Opponents of the bill argue that merchant category codes are neutral commercial tools that serve legitimate fraud detection and financial monitoring purposes, and that prohibiting their use for firearms retailers creates an asymmetry in the financial system's ability to detect suspicious transaction patterns. There is also a First Amendment dimension raised by critics: financial institutions and payment networks may argue that coding and categorization decisions constitute protected commercial speech or expressive conduct, though this argument faces significant doctrinal hurdles given the commercial regulation context. The bill's preemption of state law is likely to generate federalism objections, particularly from states that have enacted or are considering legislation requiring financial institutions to report large firearms purchases. Finally, the bill's definitions, while anchored in federal firearms law, do not address mixed-use retailers — large sporting goods chains that sell firearms alongside other merchandise — potentially creating ambiguity about whether such retailers qualify as 'firearms retailers' subject to the bill's protections.

Legal References

  • 18 U.S.C. § 921 — definitional provisions governing scope of 'firearms retailer' classification

Where it stands

Last
Passed the House · 221–201 · Jul 15
Current
Banking, Housing, And Urban Affairs Committee
Next
Senate floor vote

Sponsors

Roll Call Votes

Calendar

Jul 13

4:00 PM

House Committee on Rules Hearing

Jun 23

2:00 PM

House Committee on Rules Hearing

History

Jul 15

Senate

Received in the Senate and Read twice and referred to the Committee on Banking, Housing, and Urban Affairs.

Jul 14

House

Rule H. Res. 1423 passed House.

Jul 14

House

Considered under the provisions of rule H. Res. 1423. (consideration: CR H4441-4445)