Sponsors (2)
Official title: Require covered entities to issue a short-form terms of service summary statement, and for other purposes.
Introduced March 10, 2025 by Bill Cassidy · Last progress March 10, 2025
The bill increases transparency and accessibility of privacy terms (helping vulnerable users and enabling automated tools) at the cost of added compliance burdens, competitive pressure on smaller firms, and some regulatory and reputational risks.
All consumers — especially people with disabilities and low-literacy users — get clearer, accessible, standardized summaries of privacy terms and data practices, making it easier to understand rights and what data is collected/shared.
Users (including small businesses) gain better safety and remediation guidance because platforms must disclose past breaches and explain how to delete or limit sensitive data.
Developers and businesses benefit from standardized, machine-readable interactive terms (e.g., diagrams, APIs) that enable automated privacy tools and lower time costs for interpreting dense contracts.
Covered companies (and ultimately their customers) face increased compliance costs to redesign terms, produce diagrams/interactive formats, and maintain logs, which may raise prices or reduce services.
Smaller firms that are nonetheless covered may struggle with the technical and administrative requirements, favoring larger platforms and potentially reducing competition.
The FTC's authority to require 'other necessary' disclosures and future rulemaking creates regulatory uncertainty about what additional information businesses will need to provide.
Based on analysis of 2 sections of legislative text.
Requires the FTC to set rules within 360 days that mandate short-form, accessible ToS summaries, data-flow diagrams, and interactive machine-readable full terms.
Requires the Federal Trade Commission to write a rule within 360 days that creates standard, short-form terms-of-service (ToS) summaries for entities that publish ToS. The rule must make websites display a truthful, easy-to-read summary and a graphic data-flow diagram, provide the full terms in an interactive machine-readable format, and include information such as sensitive data categories, rights waived or transferred, breach history, deletion directions, and an estimate of reading effort. The FTC must also publish additional required content and guidance for the diagrams and machine‑readable format.