YODA

The You Own the Data Act (YODA) gives U.S. users control over their personal data collected by large online platforms and data brokers. It requires covered entities (like major social media companies or data brokers with over 100 million users) to obtain explicit written consent before sharing user contacts or data, and to provide users with free access to view, correct, delete, or port their data within 90 days of a request. The bill also mandates data minimization - limiting collection to what’s necessary for services - and bans tracking cookies without consent, while requiring clear privacy notices under 1,000 words. Enforcement is handled by the FTC, state attorneys general, and allows private lawsuits for violations, with penalties up to $750 per violation for users.