Cybersecurity Policy Report, House Bill Would Treat Personal Data as Property, (May 5, 2026)
Legislation that would treat personal data as property that can’t be used or sold without consent and would empower private lawsuits against some online operators has been introduced in the House by Rep. Michael Cloud (R., Texas).
The You Own the Data Act (YODA) (H.R. 8652, 119th Cong. (2026)) declares that data “is the property of the user, as the user creates the data. A user maintains ownership of the data of such user, even when such data is sold or leased with the consent of such user.”
The bill would require online platforms with more than 100 million users to delete or deidentify personal information at the request of a user and provide “a list of each third party and service provider to whom the covered entity has transferred or shared the covered data of the user,” according to its text.
Covered platforms would also have to, among other things, correct inaccurate information and give users their data in a portable format if requested. Users would be able to exercise their rights under the bill twice a year.
The bill’s provisions would be enforced by the Federal Trade Commission and state attorneys general. Individuals would be empowered to file lawsuits for violations committed by platforms with more than $50 million in annual revenues.
“Big Tech has commodified personal data as a product to be sold for profit. YODA prohibits companies from requiring users to surrender their data as a condition of service, limits data collection to what is reasonably necessary to provide the requested service, and bans tracking cookies without explicit user authorization,” Rep. Cloud said in a news release.
“The Constitution protects Americans’ right to private property and privacy from unwarranted searches and seizures. That principle doesn’t disappear the moment you open a browser,” he added.
The bill has no co-sponsors and was referred to the House Energy and Commerce Committee. A similar bill introduced by Rep. Cloud in the 118th Congress failed to advance. The bill’s name reflects its introduction date, Star Wars Day, an unofficial holiday celebrated on “May the Fourth.”
News: FederalLegislation DataPrivacy