Requires the Federal Trade Commission to write rules within 360 days that force covered online services to display three things to users: a short, truthful and machine-readable terms‑of‑service summary; a clear graphic showing how user data flows through the service; and the full terms presented in an interactive, machine‑readable format. The short summary must be accessible and include items like categories of sensitive data processed, how to delete an account or data, legal liabilities, and recent breach history. The FTC and State attorneys general get enforcement authority, and the law defines key terms such as “covered entity,” “interactive data format,” and “sensitive information.”