To affirm user ownership of their data, prohibit entities from requiring the transfer or monetization of private data in exchange for services, prohibit the collection of third-party contact information without written consent, and for other purposes.
About This Bill
Committee
Latest Action · May 2, 2023
Referred to the Subcommittee on Innovation, Data, and Commerce.
The You Own the Data Act affirms that users own their personal data and prohibits companies from requiring people to surrender or allow monetization of their data in order to access services. The bill applies to large technology companies and data brokers that collect personally identifiable information online, such as location data, browsing history, biometric information, and contact lists. Companies must allow users to access, correct, delete, and port their data within 90 days of request at no cost, and must delete browsing and biometric data within 60 days of collection. The legislation requires companies to limit data collection to what is necessary for providing requested services or preventing fraud, provide clear privacy notices under 1,000 words, and obtain written consent before collecting contact information from users' address books. Enforcement is handled by the Federal Trade Commission and state attorneys general, with individuals able to sue covered entities for violations and potentially recover $100 to $750 per violation plus attorney's fees.
Take Action
Your position
Add a comment
to comment on this bill.
Annotate the text
Highlight any passage on the Summary or Full Text tab to attach a note. Annotations appear on the Annotations tab.