The MY DATA Act of 2025 prohibits companies and other organizations that collect personal data from blocking individuals from using de-identified or "cloaked" versions of their own data. De-identified data contains no personal identifiers, while cloaked data uses masked identifiers that allow communication between a person and a company without revealing their actual identity. The law applies to any business or organization that collects, processes, or transfers personal information, with exceptions for government agencies and nonprofits serving missing and exploited children. The Federal Trade Commission will enforce the rule and treat violations as unfair or deceptive business practices, with penalties available under existing FTC authority. The bill contains no specific funding allocation or implementation timeline mentioned in the text.
Take Action
Your position
Add a comment
to comment on this bill.
Annotate the text
Highlight any passage on the Summary or Full Text tab to attach a note. Annotations appear on the Annotations tab.