DELETE Act

Key Points

• The bill creates a free, centralized online tool run by the FTC that lets any person submit a single request to delete their personal information from every registered data broker at once. No fees are charged to individuals.
• Data brokers would be required to register with the FTC within 18 months and re-register every year, disclosing basic information about their data practices and opt-out procedures.
• Once registered, data brokers must check the FTC's deletion registry at least once every 31 days. They have 31 days after checking to delete all matching personal records and stop collecting new data on those individuals.
• The system uses cryptographic hashing and salting to protect user privacy, so data brokers can match records without seeing people's raw personal details. This prevents the deletion system itself from becoming a data leak risk.
• Violations are treated as unfair or deceptive trade practices under the FTC Act, giving the agency power to fine or sue data brokers that refuse to register, ignore deletion requests, or fail to comply with audits every three years.
• States can keep their own data privacy laws as long as they offer equal or greater protections than this federal law. The bill does not override stronger state rules.