YODA

The You Own the Data Act (YODA) establishes new federal rules requiring major online platforms and data brokers to give users greater control over their personal information. Covered entities, defined as large websites with over 100 million users or data brokers generating significant revenue from user data, must obtain written consent before sharing contact lists and allow users to access, correct, delete, or export their data within 90 days. The bill also mandates that these companies stop tracking cookies without permission, limit data retention to 60 days for browsing and biometric data, and provide clear privacy notices in under 1,000 words. Enforcement is handled by the Federal Trade Commission and state attorneys general, while individuals can sue companies for violations and receive damages of up to $750 per incident.