ACCESS Act of 2025

This bill aims to make it easier for people to switch and connect between big online communication services, like messaging, photo sharing, and social networks. It would require large platforms to let you securely move your data to yourself or to a rival service you choose (data portability), and to keep technical doors open so different services can work together (interoperability) on fair, reasonable, and nondiscriminatory terms. It also lets you appoint a trusted helper company to manage your account for you, under strict privacy and safety rules, and with the right for platforms to block bad actors who break those rules .

The Federal Trade Commission (FTC) would set rules and enforce them. Within 180 days, the FTC must set up ways to verify data requests, and the National Institute of Standards and Technology must publish model technical standards to help services work together. Within 1 year, the FTC must issue key regulations. Violations can be treated like unfair or deceptive practices, with fines counted per user affected. The bill does not override existing federal privacy laws and takes effect when the FTC issues its regulations. Some services that don’t make money from user data are exempt from these duties .

• Who is affected | What changes | When
• People who use big online platforms | Can securely move their data and use apps that connect across services; may appoint a trusted third party to help manage accounts | FTC must set verification rules and NIST must set model standards within 180 days; broader rules due within 1 year; the law starts when those rules are issued
• Large online platforms | Must provide clear, secure interfaces for data transfers, cross-service messaging/connection, and third‑party account helpers; must treat rivals fairly and give notice of interface changes; cannot misuse data from rivals | Documentation due within 120 days; ongoing duties after FTC rules take effect
• Competing services and trusted third‑party helpers | May access interfaces under fair rules; must protect user data; misuse can lead to deregistration or loss of access | Access tied to registration, security standards, and FTC procedures set on the timelines above