DELETE Act

This bill would let you make one request to wipe your personal data from many data brokers at once. The FTC must set up a secure online system where you can submit your email, phone, address, and other identifiers . With a single request, the system tells all registered data brokers to delete your information and, unless you say otherwise, to stop collecting it going forward; it’s free to use. Data brokers can also check the system before collecting new data to make sure an identifier isn’t covered by a deletion request.

Data brokers would have to register with the FTC each year and share basic details like how to opt out; the FTC will publish this info online with a disclaimer, unless doing so would put safety or welfare at risk . After the rules are in place, brokers must check the FTC’s secure registries at least every 31 days and, within 31 days of checking, delete any matching records. There are narrow exceptions for legal needs or approved research, and any data kept for those reasons cannot be used for marketing. Brokers must report how often they complete deletion requests each year and undergo an independent audit every three years; the FTC enforces the rules using its consumer-protection powers and will study the program and report back after three years and then yearly for four more years . State privacy laws are only overridden if they conflict; state laws that protect people more can still apply. Data brokers pay a small annual fee to access the system, capped at 1% of the system’s expected yearly cost, and that money funds running, enforcing, and promoting the program .

Key points

• Who: Individuals and data brokers
• What changes: One free, online request to delete your data across all registered brokers and to stop future collection; yearly broker registration with public info; regular checks and fast deletions; audits and annual reporting; FTC enforcement; stronger state privacy laws still stand
• When: FTC issues rules and sets up the system within 1 year; brokers must register starting 18 months after enactment and then yearly; after rules take effect, brokers must check the registries at least every 31 days and delete matches within 31 days; audits begin within 3 years; the FTC’s first program report comes at 3 years, then annually for 4 more years