Bill · H.R. 8652· House(119-HR-8652)
YODA
- Introduced
- 5/4/2026
- Last activity
- 5/4/2026 — Referred to the House Committee on Energy and Commerce.
- Sponsored by
- Michael Cloud
- Cosponsors
- None
- Introduced
- In Committee
What this bill would do
The "You Own the Data Act" (YODA) establishes that personal data is the property of the user. It aims to affirm user ownership and prevent entities from requiring the transfer or monetization of private data in exchange for services. The bill mandates that users have the right to access, correct, delete, and move their data. It also places strict limits on data collection, retention, and the use of tracking cookies. Furthermore, it requires parental consent for the data of minors and establishes strict rules for data security and breach notifications. Finally, the act provides enforcement mechanisms through the Federal Trade Commission, state attorneys general, and a private right of action.
Yes· 3 of 7
Does this protect people from being watched or searched?+10
The act provides robust privacy protections by granting users control over their data, limiting collection, and prohibiting unauthorized tracking cookies.
Does this give people more control over their personal data?+10
The bill establishes significant new rights for individuals to control, delete, and move their digital data, effectively making privacy a property right.
Does this give people more protection from unfair business practices?+8
The bill enhances consumer protections by establishing data ownership, providing rights to access, correct, and delete personal information, and requiring breach notifications.
The opposite
No question was scored the opposite.
Who it would affect, and how
Potential Positive Impacts for People
-
Control Over Personal Information: Users gain the right to access, correct, delete, or move their data, including receiving a list of third parties who have received it (Section 3(b)).
-
Protection of Privacy and Anonymity: The bill allows individuals to use popular consumer technologies without having to give up their rights to privacy (Section 2(7)).
-
Prevention of Unwanted Contact Sharing: Entities are prohibited from asking users to share contact information unless both the user and their contacts provide written consent (Section 3(a)).
-
Enhanced Data Security: In the event of a data breach, entities must notify users and provide remedies such as credit protection or fraud monitoring (Section 3(i)).
-
Protection for Minors: Entities cannot collect or transfer the data of users under 18 without affirmative consent from a parent or guardian, where technically feasible (Section 3(f)).
-
Limits on Data Retention: Rules are set to require the deletion of browsing history or biometric data within 60 days of collection (Section 3(b)(4)).
-
Right to Opt Out: Commercial data operators must provide a clear icon for users to opt out of data collection on every website or application (Section 3(d)(1)).
Potential Negative Impacts for People
- Terms of Service Requirements: Despite the goal of ownership, a covered entity may still require a user to consent to the transfer of data through terms of service in order to use a specific service (Section 3(e)).
Groups and Interests Ranking
Every group the model scored this bill for, from -10 to +10. Hover a score for the reason it gave.
- Governance And Ideology
- Improves Privacy Rights+10Improves Government Transparency+5
- Demographic And Interest Groups
- Good For Children+7Good For Low Income Households+3Good For People With Disabilities+2
- Education And Technology
- Improves Data Privacy+10
- Economy And Finance
- Improves Consumer Protection+8
- 5/4/2026
- Referred to the House Committee on Energy and Commerce.
- Introduced in House