DASHBOARD Act Mandates Quarterly Reports on Your Data's Dollar Value, Gives Users 'Delete All' Button

The new DASHBOARD Act of 2025 is taking aim at how big tech companies handle—and profit from—your personal information. This legislation essentially forces companies that collect user data, dubbed “commercial data operators,” to tell you what they think your data is worth and give you an easy way to wipe it all out.

The Quarterly Data Pay Stub

If you use a service that qualifies as a commercial data operator, Section 3 requires them to send you an “assessment detailing the economic value” they place on your data at least every 90 days. Think of it like a quarterly statement for your digital self. This is a massive change. Right now, companies treat your data like a free resource, but this bill requires them to put a dollar figure on it. They also have to clearly explain what types of data they are collecting and how they are using it, especially if that use isn't directly related to the service you signed up for (like selling it to a third party).

Finally, a Real 'Delete All' Button

One of the most user-friendly parts of this bill is the mandatory “single, easy setting” that allows you to delete all the data the operator possesses or controls about you. This isn't just deleting your account; it’s a total data scrub. This is a huge win for consumer control. However, there are three practical exceptions where they can keep your information: if they have a legal requirement to keep it (like tax records), if they need it for a lawsuit, or if they need it to spot security problems or stop fraud. This is fair, but it gives companies a little wiggle room to interpret when they can legally hold onto your data.

The SEC Steps In: Data as a Financial Asset

For companies that are massive—specifically those with over 100 million unique monthly U.S. users—Section 4 treats user data not just as a consumer issue but as a serious financial asset. These companies, which are also defined as commercial data operators, must now disclose the aggregate value of the user data they hold in their quarterly and annual reports to the Securities and Exchange Commission (SEC), provided that value is “material” (important enough to matter to investors).

This means that for the first time, data will be officially valued and reported like inventory or machinery. The SEC is tasked with creating the exact formula for how companies must calculate this value. They also have to disclose any contracts over $10 million for sharing or licensing user data. Furthermore, they must provide qualitative reports detailing the technical safeguards they use to protect the data, the financial risks associated with holding that much data, and exactly how much revenue they make from obtaining, collecting, selling, or sharing that user data. This level of transparency is designed to help investors understand the true assets and risks of data-driven companies. If you’re an investor, this means you’ll finally get a clearer picture of how much of a company’s bottom line is tied up in the data they hold.

Who Enforces What?

The bill splits enforcement between the two heavy hitters in federal regulation. If a commercial data operator fails to provide the quarterly value assessment or the “delete all” button, the violation is treated like an unfair or deceptive business practice under the Federal Trade Commission (FTC) Act. This means the FTC has the power to fine and enforce the consumer-facing rules. Meanwhile, the SEC handles all the financial disclosure requirements for publicly traded companies, ensuring that data value is reported accurately to the market. This dual approach ensures that both consumer rights and financial transparency are covered, though it does put a significant new compliance burden on the tech industry.