Your data gets a price tag—and companies must disclose it

What it does

This bill requires large online platforms and data brokers (those with over 100 million U.S. users and significant revenue from data) to disclose to users what their personal data is worth, what data is collected, and how it's used — and to let users delete their data. It also requires these companies to report the aggregate value of user data they hold to the SEC if they are publicly traded, so investors know what data assets are worth.

Why we flagged it

The bill's core mechanism is a dual-track disclosure regime: consumer-facing (data value, types, uses, deletion rights) and investor-facing (SEC reporting of aggregate data asset value). It is fundamentally a transparency and consumer-protection measure, not a carve-out or subsidy.

What the text implies

• The SEC must develop a standardized methodology for valuing user data across companies, which may create a new asset class on corporate balance sheets and affect how data-driven companies are valued and compared by investors.
• The FTC enforcement mechanism (treating violations as unfair/deceptive practices under FTC Act) may result in civil penalties and injunctions, but the bill does not create a private right of action for consumers — enforcement is agency-only.
• Companies may face pressure to reduce data collection or retention to lower reported asset values and associated financial/legal risk disclosures, potentially reducing the scope of behavioral tracking.
• The 90-day reassessment requirement and deletion rights may impose significant operational costs on data brokers and platforms, particularly smaller competitors, potentially consolidating market power among larger players with compliance infrastructure.
• Disclosure of data sources (sale, direct relationship, indirect relationship, etc.) may expose third-party data-collection networks and reveal competitive intelligence about data supply chains.

Section numbers refer to the bill text the analysis read — linked under Primary records below.

Who it affects

Ordinary people gain transparency about their data's value and a deletion right, while publicly traded data operators face new disclosure obligations that inform both users and investors. The bill does not shield companies from liability or restrict consumer remedies; it expands them.

Who stands to gain

• data privacy and compliance software vendors
• cybersecurity firms (data protection measures disclosure requirement)
• legal and consulting firms advising on SEC compliance

Named in the bill

Securities and Exchange Commission (SEC), Federal Trade Commission (FTC), Commercial data operators, Data brokers, Online service providers, AIG, FBK, FMAO, PFG, PRU

Where it stands

• Jul 15, 2025 — Introduced · Congress.gov: “Introduced in House”
• Jul 15, 2025 — Referred to House Committee on Financial Services and House Committee on Energy and Commerce · Congress.gov: “Referred to the Committee on Energy and Commerce, and in addition to the Committee on Financial Services, for…”

Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.