The TLDR Act requires large commercial websites and online services to provide simplified summaries of their terms of service to users within one year of the law's passage. Specifically, companies must post a short-form summary statement at the top of their terms page that explains what sensitive information (such as health data, location, financial records, and browsing history) they collect, whether that data is required for basic service or optional features, what legal rights users waive (like class action lawsuits), any past data breaches from the previous three years, and how long the full terms take to read. Companies must also include a graphic diagram showing how user data flows to subsidiaries and third parties, and present the full terms in a machine-readable, interactive format accessible to people with disabilities and low literacy levels. The Federal Trade Commission has 360 days to issue detailed rules defining requirements, and violations are treated as unfair or deceptive practices under existing FTC authority. State attorneys general can also sue on behalf of consumers, and the law exempts small businesses from these requirements.
Take Action
Your position
Add a comment
to comment on this bill.
Annotate the text
Highlight any passage on the Summary or Full Text tab to attach a note. Annotations appear on the Annotations tab.