On 25 November 2025, the Don't Sell Kids' Data Act, 2025 (HR 6292) was introduced in the House of Representatives. The Act applies to data brokers, and restricts them from collecting, maintaining, or using the personal data of users known to be minors, with the exception of data required to ensure compliance. Data maintained to assist with compliance may only be used for this purpose. The Act requires, in addition to the prevention of sale, collection, or use of such data, that data brokers delete any data. The Act also requires brokers to establish a mechanism by which a teen or their parent, guardian, or an agent representing the teen on behalf of the parent or guardian can request the deletion of their data. The broker must identify and delete the data within 10 days following a submission of this request. The Federal Trade Commission (FTC) is responsible for enforcement of the Act by treating violations as "unfair or deceptive act[s]" under the FTC Act. State Attorneys General, officials, and agencies of the state may bring a civil action on behalf of state citizens concerning violations of the Act. Prior to doing so, they must notify the FTC, which has the right to intervene, file appeals, and be heard on all related matters. Individuals may also bring civil action for violations of the Act. The Act is to take effect 180 days following enactment.
Original source