United States lawmakers advanced a bipartisan federal data privacy framework on Wednesday after a hearing that put Google’s advertising data practices and Spirit Airlines’ handling of passenger information under the spotlight.

Members of the House Commerce Committee questioned technology and airline representatives on how consumer data is collected, shared and sold. The proposed framework would set national standards for data minimisation, give consumers rights over their personal information, and restrict the sale of sensitive data to foreign adversaries including China and Russia.

Texas Attorney General Ken Paxton’s separate investigation into Spirit Airlines featured prominently in the debate. Paxton’s office is examining a February data breach at the carrier that exposed customer personal information, and whether the airline’s disclosures to travellers were adequate.

Lawmakers also raised concerns about data brokers that aggregate location and purchase history from apps and sell it to third parties. Google representatives faced questions on how advertising identifiers collected across its services are used to build consumer profiles.

Privacy advocates welcomed the bipartisan momentum but cautioned that enforcement funding and a private right of action would determine whether the framework has real teeth.