MY DATA Act of 2025

The MY DATA Act of 2025 prohibits businesses (referred to as "covered entities") from blocking consumers from using de-identified data (information that cannot be traced back to a person) or cloaked data (unique identifiers that hide a person's identity while enabling communication). It requires covered entities to allow consumers to access or control their data, with enforcement handled by the Federal Trade Commission as an unfair or deceptive practice under existing law. The bill excludes government agencies and specific nonprofits (like those serving missing children cases) from these requirements, focusing on commercial entities that collect personal information.