Don’t Sell Kids’ Data Act of 2025

This bill aims to protect the privacy of minors by prohibiting data brokers from collecting, using, or maintaining the personal data of individuals they know are a child (under 13) or a teen (ages 13 to 17). This prohibition extends to selling, licensing, or otherwise making available such data. A narrow exception allows data brokers to collect, use, or maintain data only as necessary to ensure compliance with these prohibitions or deletion requirements. The legislation mandates that data brokers delete any personal data they maintain on known children or teens. Furthermore, it requires them to establish a clear mechanism for teens, parents or legal guardians of children, or their agents to request the deletion of such personal data. Upon receiving a request, data brokers must identify and delete the relevant data within 10 days and notify the requester of its completion, with public notice of this process. Enforcement of this Act falls under the purview of the Federal Trade Commission (FTC) , treating violations as unfair or deceptive acts or practices. States can also bring civil actions to enjoin violations, enforce compliance, and seek damages on behalf of their residents. Importantly, individuals are granted a private right of action , allowing them to sue data brokers for violations related to their personal data, with potential awards including actual damages (not less than $1,000 per violation), injunctive relief, and attorney fees, which can be tripled for willful violations.