arrow_back Back to App

YODA Act: More Control Over Your Online Data

This act aims to give you more control over your personal data online. Companies will need your consent to collect and share data, and you will gain the right to access, correct, and delete your information. This is intended to enhance your privacy and security online.
Key points
Companies cannot ask to share your contacts without your written consent and the consent of those contacts.
You have the right to access, correct, delete, and port your data in a readable format.
Companies must limit data collection and use to what is reasonably necessary for providing a service.
You have the right to opt out of data collection on every website or application.
Companies must delete browsing history and biometric data within 60 days.
Data of minors under 18 cannot be collected or shared without parental consent.
Companies cannot track your activity (e.g., with cookies) without your consent and must offer the same services even if you decline.
Companies must provide clear and concise privacy notices (under 1000 words) and annual reports on data sharing if you allow it.
In case of a data breach, companies must notify you and offer compensation, such as credit protection services.
You can sue companies for violating these rules, and the Federal Trade Commission and State Attorneys General can also enforce these provisions.
article Official text account_balance Process page
Expired
Citizen Poll
No votes cast
Additional Information
Print number: 118_HR_3045
Sponsor: Rep. Cloud, Michael [R-TX-27]
Process start date: 2023-05-02
Lustra uses Artificial Intelligence. Verify details in source documents.
Summarized by: gemini-2.5-flash-preview-05-20
Source data: api.congress.gov
AI work logs for this document launch

OFFICIAL LEGAL TITLE

YODA

FREQUENTLY ASKED QUESTIONS

What is the official ID of this bill?

The official print number for this legislation is 118_HR_3045.

Which chamber initiated this legislation?

This legislation was initiated in the House of Representatives.

When did the legislative process begin?

The process officially started on 2023-05-02.

What are the main provisions?

Key points include:

  • Companies cannot ask to share your contacts without your written consent and the consent of those contacts.
  • You have the right to access, correct, delete, and port your data in a readable format.
  • Companies must limit data collection and use to what is reasonably necessary for providing a service.
  • You have the right to opt out of data collection on every website or application.
  • Companies must delete browsing history and biometric data within 60 days.
  • Data of minors under 18 cannot be collected or shared without parental consent.
  • Companies cannot track your activity (e.g., with cookies) without your consent and must offer the same services even if you decline.
  • Companies must provide clear and concise privacy notices (under 1000 words) and annual reports on data sharing if you allow it.
  • In case of a data breach, companies must notify you and offer compensation, such as credit protection services.
  • You can sue companies for violating these rules, and the Federal Trade Commission and State Attorneys General can also enforce these provisions.
What is the specific legal status?

The current status is Expired.

Where can I read the full text of this legislation?

The full official text is available at: View full text

Who is the primary sponsor?

The primary sponsor is Rep. Cloud, Michael [R-TX-27].

What is the latest detailed status?

The latest detailed status is: Referred to the Subcommittee on Innovation, Data, and Commerce.

Is this summary verified?

Yes. This content was analyzed by AI and verified by the Lustra Judge System on 2025-12-25.

CATEGORIES

Courts and Law Informatization