DASHBOARD Act of 2025

This bill makes big online services and data brokers tell people more about their data and give investors a clearer picture of how valuable that data is. Companies must tell each user, at least every 90 days, how much the company thinks their data is worth, what types of data it collects, and how it uses that data beyond the core service. Users must be able to delete all their data or specific fields through a single, easy setting, with limited exceptions for legal needs, lawsuits, and security or fraud prevention. The Federal Trade Commission (FTC) will enforce these rules and must issue regulations within a year.

Public companies that run very large consumer services or act as data brokers—those with over 100 million unique monthly U.S. users and that make significant money from user data—must report to the Securities and Exchange Commission (SEC) the total value (if material) of the user data they hold and certain data-collection contracts. The SEC will set standard ways to value data, and require more details, like how data is protected, risks from storing it, where it comes from, revenue tied to it, any contracts over $10 million, and any data acquisitions over $100 million. The SEC must also report on these disclosures within three years and then propose new rules based on its findings.

Key points:

• Who is affected: Users of very large online services; very large online platforms and data brokers; public companies that meet those thresholds.
• What changes: Regular user notices on data value and use; easy data deletion; SEC filings must include the value of user data and major data-related deals; FTC and SEC will issue rules to implement and standardize these steps.
• When: User notices at least every 90 days; FTC rules within 1 year; SEC disclosure updates within 1 year; SEC report in 3 years, followed by proposed rules within 180 days.