- Targeted stakeholdersStrengthens individual privacy rights and formalizes user ownership of personal data.
- Targeted stakeholdersIncreases transparency by requiring concise privacy notices and annual reports on data sharing.
- Targeted stakeholdersProvides users rights to access, correct, delete, and port their data free of charge.
You Own the Data Act
Referred to the House Committee on Energy and Commerce.
The You Own the Data Act (H.R. 8652) declares users own their online data and imposes consumer-access, correction, deletion, and portability rights.
It limits collection, retention, and monetization by large data operators, requires transparency and breach remedies, restricts sharing contacts and minors’ data without consent, and authorizes enforcement by the FTC, state attorneys general, and a private right of action for larger defendants.
Comprehensive privacy overhaul with significant industry impact and private enforcement is politically and procedurally challenging despite public appeal.
Relative to its intended legislative type, this bill is a clearly focused substantive policy proposal that defines new user-centric data rights and prohibitions and establishes enforcement mechanisms within the FTC framework. It contains many concrete prescriptions (definitions, deadlines, access/deletion/portability rights, and enforcement routes).
Support for user ownership vs. concern over regulatory burden.
Who stands to gain, and who may push back.
- Targeted stakeholdersImposes compliance costs on covered entities and large online operators for new technical and legal obligations.
- Targeted stakeholdersMay reduce revenue for ad-supported services by restricting tracking cookies and monetization justifications.
- Targeted stakeholdersPrivate right of action could lead to increased litigation and legal defense expenses for companies.
Why the argument around this bill splits.
Support for user ownership vs. concern over regulatory burden.
Generally supportive: the bill affirms individual data ownership, restricts monetization, and strengthens access, deletion, and minors' protections.
Skeptical about provisions that permit terms-of-service conditioning and high thresholds that may exempt many companies.
Cautiously favorable: the bill creates concrete consumer rights and transparency while recognizing enforcement mechanisms.
Concerned about operational feasibility, internal tensions (e.g., forced consent vs. opt-out rules), and compliance costs for business.
Skeptical or opposed: supports the concept of individual data property, but views the bill as heavy-handed regulation that burdens businesses, expands FTC power, and invites litigation.
Favors parental protections but objects to federal regulatory expansion.
The path through Congress.
Reached or meaningfully advanced
Reached or meaningfully advanced
Still ahead
Still ahead
Still ahead
Comprehensive privacy overhaul with significant industry impact and private enforcement is politically and procedurally challenging despite public appeal.
- No Congressional Budget Office cost estimate provided
- Interaction with existing state privacy laws and potential preemption disputes
Recent votes on the bill.
No vote history yet
The bill has not accumulated any surfaced votes yet.
Go deeper than the headline read.
Support for user ownership vs. concern over regulatory burden.
Comprehensive privacy overhaul with significant industry impact and private enforcement is politically and procedurally challenging despite…
Relative to its intended legislative type, this bill is a clearly focused substantive policy proposal that defines new user-centric data rights and prohibitions and establishes enforcement mechanisms within the FTC fram…
Go beyond the headline summary with full stakeholder mapping, legislative design analysis, passage barriers, and lens-by-lens tradeoff breakdowns.