The bill substantially increases consumer data transparency and control and standardizes market disclosures (benefiting users and investors), but does so at the cost of meaningful compliance burdens, potential harms to small firms and competition, and risks that disclosures or statutory linkages create new uncertainties or reveal sensitive business information.
All users (everyday Americans) gain clearer, actionable privacy rights — they receive periodic estimates of the economic value firms place on their data, see what data are collected and how it is used, and can delete full or field-level personal data via a single setting.
Investors and market participants gain standardized, comparable disclosures about the value, revenue, and risk tied to user data because the SEC must develop valuation methods and issuers must report data-related measures.
Federal enforcement and rulemaking (FTC and SEC) are clarified and empowered to create uniform privacy standards and remedies nationwide, reducing patchwork regulation and creating consistent expectations for firms and consumers.
Companies will face substantial compliance, accounting, and disclosure costs to value data, implement deletion and disclosure controls, and adapt systems — costs that are likely to be passed to consumers through higher prices, paid tiers, or reduced free services.
Smaller firms and startups may struggle with tight rulemaking deadlines and threshold rules (e.g., monthly user or deal-size cutoffs), creating compliance burdens, incentives to restructure or limit growth, and potential reductions in competition.
Mandated disclosure of valuation methods, data-related revenue, and other data metrics could reveal competitively sensitive information or trade secrets, risking commercial harm to firms.
Based on analysis of 4 sections of legislative text.
Requires data operators to tell users how their data is valued and used, provide deletion tools, and requires SEC/FTC rules and disclosures about user-data valuation and contracts.
Introduced July 15, 2025 by Bill Foster · Last progress July 15, 2025
Requires online companies that act as “commercial data operators” to tell users how their data is being used and how much the company values that data, give easy ways to delete data, and follow new rules enforced by the Federal Trade Commission. Also requires public companies that are data operators to disclose the aggregate value of user data and other data-related contracts and risks to the Securities and Exchange Commission, which must develop valuation methods and update disclosure rules. Creates timelines for rulemaking: the FTC must write enforcement regulations within one year, and the SEC must adopt new disclosure rules and valuation guidance (including a report and proposed regulation) within multi-year deadlines. The goal is greater user transparency, stronger deletion controls, and more investor disclosure about the financial role of user data.