WHAT THIS BILL REGULATES · 1 REQUIREMENT TYPE
How Is This Bill Enforced
Verbatim statutory text on the left; plain-language analysis and a per-section checklist on the right. Numbered markers cross-link to the matching checklist row.
This Act may be cited as the ''Data and Algorithm Transparency Agreement Act'' or the ''DATA Act''.
This section establishes the short title of the bill as the Data and Algorithm Transparency Agreement Act or the DATA Act. It creates no compliance obligations.
(a) Beginning 1 year after the date of enactment of this Act, any covered platformCovered platformthe term "covered platform" means a public-facing website, internet application, or mobile internet application, including a social network, video sharing service, ad network, mobile operating system, search engine, email service, or internet access service that— (A) has not less than 30,000,000 active monthly users in the United States; and (B) uses an algorithm to increase or decrease the availability of content on the website or application.Sec. 2(b)(2) shall comply with the requirements of subsection (c).
(b)(1) The term ''covered dataCovered dataThe term "covered data" means, with respect to an individual, data regarding the habits, traits, preferences, beliefs, or location of the individual.Sec. 2(b)(1)'' means, with respect to an individual, data regarding the habits, traits, preferences, beliefs, or location of the individual.
(b)(2) the term ''covered platformCovered platformthe term "covered platform" means a public-facing website, internet application, or mobile internet application, including a social network, video sharing service, ad network, mobile operating system, search engine, email service, or internet access service that— (A) has not less than 30,000,000 active monthly users in the United States; and (B) uses an algorithm to increase or decrease the availability of content on the website or application.Sec. 2(b)(2)'' means a public-facing website, internet application, or mobile internet application, including a social network, video sharing service, ad network, mobile operating system, search engine, email service, or internet access service that— (A) has not less than 30,000,000 active monthly users in the United States; and (B) uses an algorithm to increase or decrease the availability of content on the website or application.
(c)(1)(A)–(B) 1 IN GENERAL.—A covered platformCovered platformthe term "covered platform" means a public-facing website, internet application, or mobile internet application, including a social network, video sharing service, ad network, mobile operating system, search engine, email service, or internet access service that— (A) has not less than 30,000,000 active monthly users in the United States; and (B) uses an algorithm to increase or decrease the availability of content on the website or application.Sec. 2(b)(2) shall not collect any covered data of an individual without obtaining the individual's express consent for such data collection. (B) REVOCATION OF CONSENT; RIGHT TO DELETE.—A covered platformCovered platformthe term "covered platform" means a public-facing website, internet application, or mobile internet application, including a social network, video sharing service, ad network, mobile operating system, search engine, email service, or internet access service that— (A) has not less than 30,000,000 active monthly users in the United States; and (B) uses an algorithm to increase or decrease the availability of content on the website or application.Sec. 2(b)(2) shall— (i) allow any individual to revoke or withdraw the individual's prior consent to the covered platformCovered platformthe term "covered platform" means a public-facing website, internet application, or mobile internet application, including a social network, video sharing service, ad network, mobile operating system, search engine, email service, or internet access service that— (A) has not less than 30,000,000 active monthly users in the United States; and (B) uses an algorithm to increase or decrease the availability of content on the website or application.Sec. 2(b)(2) collecting the individual's covered dataCovered dataThe term "covered data" means, with respect to an individual, data regarding the habits, traits, preferences, beliefs, or location of the individual.Sec. 2(b)(1); and (ii) at the request of an individual, delete any covered data of the individual collected or held by the platform.
(c)(2)(A)–(B) 2 IN GENERAL.—A covered platformCovered platformthe term "covered platform" means a public-facing website, internet application, or mobile internet application, including a social network, video sharing service, ad network, mobile operating system, search engine, email service, or internet access service that— (A) has not less than 30,000,000 active monthly users in the United States; and (B) uses an algorithm to increase or decrease the availability of content on the website or application.Sec. 2(b)(2) shall not sell, share, or otherwise convey to a third party entity any covered data of an individual without obtaining the individual's express consent. (B) REVOCATION OF CONSENT.—A covered platformCovered platformthe term "covered platform" means a public-facing website, internet application, or mobile internet application, including a social network, video sharing service, ad network, mobile operating system, search engine, email service, or internet access service that— (A) has not less than 30,000,000 active monthly users in the United States; and (B) uses an algorithm to increase or decrease the availability of content on the website or application.Sec. 2(b)(2) shall allow any individual to revoke or withdraw the individual's prior consent to any sale, sharing, or conveyance of the individual's covered dataCovered dataThe term "covered data" means, with respect to an individual, data regarding the habits, traits, preferences, beliefs, or location of the individual.Sec. 2(b)(1).
(c)(3)(A)–(C) 3 IN GENERAL.—A covered platformCovered platformthe term "covered platform" means a public-facing website, internet application, or mobile internet application, including a social network, video sharing service, ad network, mobile operating system, search engine, email service, or internet access service that— (A) has not less than 30,000,000 active monthly users in the United States; and (B) uses an algorithm to increase or decrease the availability of content on the website or application.Sec. 2(b)(2) shall provide notice to users of the platform of the requirements described in paragraphs (1) and (2). (B) MANNER OF NOTIFICATION.—The notice required under subparagraph (A) shall contain the information described in subparagraph (C) and shall be provided by a covered platformCovered platformthe term "covered platform" means a public-facing website, internet application, or mobile internet application, including a social network, video sharing service, ad network, mobile operating system, search engine, email service, or internet access service that— (A) has not less than 30,000,000 active monthly users in the United States; and (B) uses an algorithm to increase or decrease the availability of content on the website or application.Sec. 2(b)(2) to a user— (i) in plain language and in a conspicuous manner; (ii) in addition to any notice relating to the terms of service of the platform; (iii) each time the user logs in to the platform unless the user affirmatively waives receiving the notice; and (iv) each time the platform modifies its terms of service. (C) CONTENTS OF NOTIFICATION.—A notice required under this paragraph shall include the following: (i) With respect to the collection of covered dataCovered dataThe term "covered data" means, with respect to an individual, data regarding the habits, traits, preferences, beliefs, or location of the individual.Sec. 2(b)(1) by a covered platformCovered platformthe term "covered platform" means a public-facing website, internet application, or mobile internet application, including a social network, video sharing service, ad network, mobile operating system, search engine, email service, or internet access service that— (A) has not less than 30,000,000 active monthly users in the United States; and (B) uses an algorithm to increase or decrease the availability of content on the website or application.Sec. 2(b)(2)— (I) the type of data to be collected; (II) whether the collection of data will continue beyond the user's immediate use of the covered platformCovered platformthe term "covered platform" means a public-facing website, internet application, or mobile internet application, including a social network, video sharing service, ad network, mobile operating system, search engine, email service, or internet access service that— (A) has not less than 30,000,000 active monthly users in the United States; and (B) uses an algorithm to increase or decrease the availability of content on the website or application.Sec. 2(b)(2); and (III) how the data will be used by the covered platformCovered platformthe term "covered platform" means a public-facing website, internet application, or mobile internet application, including a social network, video sharing service, ad network, mobile operating system, search engine, email service, or internet access service that— (A) has not less than 30,000,000 active monthly users in the United States; and (B) uses an algorithm to increase or decrease the availability of content on the website or application.Sec. 2(b)(2). (ii) With respect to the sale, sharing, or conveyance of covered dataCovered dataThe term "covered data" means, with respect to an individual, data regarding the habits, traits, preferences, beliefs, or location of the individual.Sec. 2(b)(1) by a covered platformCovered platformthe term "covered platform" means a public-facing website, internet application, or mobile internet application, including a social network, video sharing service, ad network, mobile operating system, search engine, email service, or internet access service that— (A) has not less than 30,000,000 active monthly users in the United States; and (B) uses an algorithm to increase or decrease the availability of content on the website or application.Sec. 2(b)(2)— (I) the specific data that will be sold, shared, or otherwise conveyed to a third party entity; (II) the name of any third party entity to which data will be sold, shared, or otherwise conveyed; and (III) the country of origin of the third party entity to which the data will be sold, shared, or conveyed.
Section 2 is the operative heart of the bill. It imposes three core obligations on covered platforms — large internet platforms with at least 30 million U.S. monthly active users that use algorithms to manipulate content availability. First, platforms must obtain express consent before collecting any covered data (habits, traits, preferences, beliefs, or location), and must honor revocation requests and deletion requests. Second, platforms must obtain express consent before selling, sharing, or conveying covered data to third parties, again with a revocation right. Third, platforms must provide detailed notice to users of these consent rights, delivered in plain language, separately from terms of service, at each login (unless affirmatively waived), and upon any terms-of-service modification.
The notice must disclose, for data collection: the type of data, whether collection persists beyond the immediate session, and how the data will be used. For data sharing: the specific data shared, the names of third-party recipients, and the country of origin of each recipient. Compliance is required beginning one year after enactment.
(a)(1)–(2) UNFAIR OR DECEPTIVE ACTS OR PRACTICES.—A violation of this Act or a regulation promulgated under this Act shall be treated as an unfair or deceptive act or practice in violation of a rule promulgated under section 18(a)(1)(B) of the Federal Trade Commission Act (15 U.S.C. 57a(a)(1)(B)). (2) POWERS OF THE COMMISSION.— (A) IN GENERAL.—The Federal Trade Commission shall enforce this Act and any regulation promulgated under this Act in the same manner, by the same means, and with the same jurisdiction, powers, and duties as though all applicable terms and provisions of the Federal Trade Commission Act (15 U.S.C. 41 et seq.) were incorporated into and made a part of this Act. (B) PRIVILEGES AND IMMUNITIES.—Any covered entity who violates this Act or a regulation promulgated under this Act shall be subject to the penalties and entitled to the privileges and immunities provided in the Federal Trade Commission Act (15 U.S.C. 41 et seq.).
(b)(1)–(3) IN GENERAL.—An individual alleging a violation of this Act may bring a civil action in any court of competent jurisdiction, State or Federal. (2) INJURY IN FACT.—A violation of this Act with respect to the requirements to notify and obtain the express consent of the user before the user's data may be collected, sold, shared, or otherwise conveyed to a third-party entity constitutes a concrete and particularized injury in fact to that individual. (3) RELIEF.—In a civil action brought under paragraph (1) in which the plaintiff prevails, the court shall award— (A) the greater of— (i) not less than $5,000; and (ii) actual damages; and (B) reasonable attorney's fees and litigation costs.
(c) The Federal Trade Commission shall promulgate in accordance with section 553 of title 5, United States Code, such rules as may be necessary to carry out this Act.
Section 3 establishes a dual enforcement framework. The Federal Trade Commission has primary enforcement authority, treating violations as unfair or deceptive acts or practices under FTC Act section 18(a)(1)(B) and exercising the same jurisdiction, powers, and duties as under the FTC Act. The bill also creates an explicit private right of action: any individual alleging a violation may sue in state or federal court. The statute declares that a violation of the notice-and-consent requirements constitutes a concrete and particularized injury in fact, removing standing barriers. Prevailing plaintiffs receive the greater of $5,000 or actual damages, plus reasonable attorney's fees and litigation costs. The FTC is directed to promulgate implementing rules under APA notice-and-comment procedures.