Sponsor
Lori Trahan
Representative · D-MA
Representative · D-MA
The bill gives Americans a simpler way to delete personal data and increases transparency and oversight funded by broker fees, but it centralizes sensitive information, may weaken stronger state protections, raises compliance costs that could be passed to consumers, and leaves accuracy and trade-secret gaps that can limit real accountability.
All individuals (especially uninsured, low-income people, and people with disabilities) can submit a single deletion request to remove their personal data held by registered data brokers, reducing unwanted data exposure.
Consumers and taxpayers gain greater visibility into who collects personal data through mandatory broker registration and a public, machine-readable registry, improving transparency about data-collection sources.
Consumers benefit from increased oversight because the bill requires annual audits and reporting, which raise accountability for brokers' compliance with deletion and security obligations.
All individuals face elevated risk because centralizing sensitive identifiers and contact data (even hashed) creates a high-value target; a breach could expose large amounts of personal information.
Consumers and small-business owners will likely bear higher costs because brokers face increased compliance expenses (registration, hashing, monthly checks, deletion timelines, audits, fees) that may be passed along.
Residents of states with stronger privacy laws could lose protections because the bill preempts inconsistent state privacy laws and may create a weaker national floor in some jurisdictions.
Based on analysis of 2 sections of legislative text.
Requires the FTC to register data brokers annually and build a centralized system for individuals to delete their personal data and opt out of future collection tied to persistent identifiers.
Official title: To establish a centralized system to allow individuals to request the simultaneous deletion of their personal information across all data brokers, and for other purposes.
Introduced April 2, 2025 by Lori Trahan · Last progress April 2, 2025
Creates a federal, annual registration program for data brokers and requires the Federal Trade Commission to build a centralized, secure system that lets a person submit a single request to delete their personal information from registered data brokers and to opt out of future collection tied to persistent identifiers. The FTC must issue implementing regulations within one year; data brokers must register within 18 months and annually after that, and the registration data will be published in machine-readable form unless safety concerns require limited disclosure.