S. 1287 — DELETE Act

This section directs the Federal Trade Commission (FTC) to promulgate regulations not later than one year after enactment to (1) require data brokers to register with the FTC not later than 18 months after enactment and annually thereafter, providing specified information (e.g., contact details, opt-out methods and limitations, data types and sources collected, credentialing processes) except for trade secrets; and (2) make such registration information publicly available in a downloadable, machine-readable format with a disclaimer on accuracy, unless public safety or welfare risks justify otherwise. The section further directs the FTC, through regulations promulgated not later than one year after enactment, to establish a centralized deletion system that allows individuals—via a single internet-based request using a standardized form with persistent identifiers (e.g., email, phone, address)—to direct all registered data brokers maintaining persistent identifiers to delete related personal information (including from affiliates) and, unless specified otherwise, discontinue future collection; the system must include hashed registries for queries by registered data brokers (with unique salts per registry type), security safeguards, and no charge to individuals. During a transition period ending eight months after the regulations' effective date, data brokers must access the hashed registries at least every 31 days to process matches.