which the personal information will be 
used, to protect individuals’ personal infor-
mation from unauthorized use, disclosure, 
access, destruction, or modification; and 
(ii) allows an individual, through a 
single submission, to request that every 
data broker who is registered under sub-
section (a) and who maintains any per-
sistent identifiers (as described in subpara-
graph (B)(iii)) delete any personal infor-
mation related to such individual held by 
such data broker or affiliated legal entity 
of the data broker. 
(B) REQUIREMENTS.—The centralized sys-
tem established in subparagraph (A) shall meet 
the following requirements: 
(i) Subject to the regulations promul-
gated 
in 
accordance 
with 
paragraph 
(2)(B)(ii), the centralized system shall 
allow an individual to request the deletion 
of all personal information related to such 
individual through a single deletion re-
quest. 
VerDate Sep 11 2014 
03:11 Feb 24, 2022
Jkt 029200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H6752.IH
H6752
pbinns on DSKJLVW7X2PROD with BILLS
(ii) The centralized system shall pro-
vide a standardized form to allow an indi-
vidual to make such request. 
(iii) Such standardized form shall in-
clude the individual’s email, phone number, 
physical address, and any other persistent 
identifier determined by the Commission to 
aid in the deletion request. 
(iv) The centralized system shall auto-
matically hash all submitted information 
and allow the Commission to maintain 
independent hashed registries of each type 
of information obtained through such form. 
(v) The centralized system shall only 
permit data brokers who are registered 
with the Commission to submit hashed 
queries to the independent hashed reg-
istries described in clause (iv). 
(vi) The centralized system shall allow 
an individual to make such request using 
an internet website operated by the Com-
mission. 
(vii) The centralized system shall not 
charge the individual to make such re-
quest. 
VerDate Sep 11 2014 
03:11 Feb 24, 2022
Jkt 029200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H6752.IH
H6752
pbinns on DSKJLVW7X2PROD with BILLS
(viii) The centralized system shall 
automatically delete any individual data 
field stored in the system once such data 
field has been stored in the centralized sys-
tem for 2 years. The Commission shall in-
form the individual of this automatic dele-
tion period when the individual makes a 
deletion request. Beginning 4 years after 
the date of enactment of this Act, the 
Commission may promulgate rules to ad-
just such retention period or enable auto-
matic renewal of requests if it determines 
that such adjustment or automatic renewal 
would better protect individual privacy or 
the public interest. 
(C) TRANSITION.— 
(i) IN GENERAL.—Not later than 8 
months after the effective date of the regu-
lations promulgated under subparagraph 
(A), each data broker shall— 
(I) not less than once every 31 
days, access the hashed registries 
maintained by the Commission as de-
scribed in subparagraph (B)(iv); and 
VerDate Sep 11 2014 
03:11 Feb 24, 2022
Jkt 029200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H6752.IH
H6752
pbinns on DSKJLVW7X2PROD with BILLS
(II) process any deletion request 
associated with a match between such 
hashed registries and the records of 
the data broker. 
(ii) FTC GUIDANCE.—Not later than 
6 months after the effective date of the 
regulations promulgated under subpara-
graph (A), the Commission shall publish 
guidance on the process and standards to 
which a data broker must adhere in car-
rying out clause (i). 
(2) DELETION.— 
(A) INFORMATION DELETION.— 
(i) IN
GENERAL.—Subject to clause 
(ii), not later than 31 days after accessing 
the hashed registries described in para-
graph (1)(B)(iv), a data broker and any 
associated legal entity shall delete all per-
sonal information in its possession related 
to the individual making the request. Im-
mediately following the deletion, the data 
broker shall send an affirmative represen-
tation to the Commission with the number 
of records deleted pursuant to each match 
with a value in the hashed registries. 
VerDate Sep 11 2014 
03:11 Feb 24, 2022
Jkt 029200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6201
E:\BILLS\H6752.IH
H6752
pbinns on DSKJLVW7X2PROD with BILLS