119-HR-2612 Investigative Journalist Impact Analysis

Summary

The DELETE Act would require data brokers to register with the FTC and participate in a centralized system that lets any individual submit a single request to delete their personal information and halt future collection, enforced via 31‑day processing cycles, triennial third‑party audits, and FTC rulemaking and penalties. [1]Congress.gov — H.R. 2612 — DELETE Act (bill text)

Relative to today’s patchwork of state registries and firm‑by‑firm opt‑outs, the bill would standardize deletion at national scale. Benefits (privacy, safety, time savings) are plausible and supported by recent FTC actions against location‑data brokers and evidence that individual opt‑outs are time‑consuming; costs and risks concentrate in compliance overhead, ad‑tech performance, and the security of a hashed‑identifier registry. [3]Federal Trade Commission — FTC final order: X‑Mode/Outlogic banned from selling…[4]Federal Trade Commission — FTC final order: InMarket prohibited from selling/sh…[7]Consumer Reports — Consumer Reports Innovation Lab: Helping 104 consumers exerc…

Statutory anchors: 1‑year rulemaking to stand up the system, 31‑day deletion processing after registry checks, triennial audits, and a per‑broker subscription fee (capped at 1% of system cost) to fund access. [1]Congress.gov — H.R. 2612 — DELETE Act (bill text)

Economic Effects

Direct compliance, indirect market impacts, and distributional effects across data‑reliant sectors.

• Compliance obligations (registration; monthly hashed‑registry queries; 31‑day deletion cycles; reporting; triennial independent audits) will raise fixed and variable costs for entities that meet the bill’s “data broker” definition—even when those firms also run exempt lines of business. Cost magnitude depends on FTC standards, but obligations are clear in the bill text. [1]Congress.gov — H.R. 2612 — DELETE Act (bill text)
• Funding mechanism: each registered broker pays an annual subscription to access the FTC system, with the per‑broker amount capped at 1% of the system’s expected annual operating cost. With hundreds of brokers nationally (state registries list 500+ in CA; multi‑state analysis identifies ~750 unique entities), fee revenue can plausibly cover operations if participation is broad. [8]IAPP — CPPA board approves broker regulations; >500 registered[9]Privacy Rights Clearinghouse — Privacy Rights Clearinghouse consolidated broker…[1]Congress.gov — H.R. 2612 — DELETE Act (bill text)
• State cost signals: California’s data‑broker registration fee is $6,600 for 2025, framing likely order‑of‑magnitude compliance fees at state level; federal fees will be set by the FTC. [10]California Privacy Protection Agency — CPPA: 2025 broker registration fee ($6,6…
• Advertising and lead‑generation sectors could see reduced precision and signal loss as deletion/collection‑stop requests scale, analogous to performance headwinds observed under GDPR and Apple’s App Tracking Transparency (ATT). Peer‑reviewed and academic work finds lower ad performance and increased concentration post‑GDPR; research on ATT shows outsized revenue hits for small e‑commerce firms. Magnitude under H.R. 2612 is uncertain but directionally similar. [11]SAGE Journals — Journal of Marketing article: Early impact of GDPR on display a…[12]arXiv — Working paper: Impact of privacy laws (GDPR) on user behavior and conce…[13]Robert H. Smith School of Business — Research summary: Small businesses and App…
• Downstream small‑business exposure: Firms relying on third‑party audience data for customer acquisition (DTC, local services, nonprofits) may face higher CACs and a tilt toward first‑party data or contextual advertising. Evidence from privacy shocks (GDPR, ATT) supports this risk. [11]SAGE Journals — Journal of Marketing article: Early impact of GDPR on display a…[12]arXiv — Working paper: Impact of privacy laws (GDPR) on user behavior and conce…[13]Robert H. Smith School of Business — Research summary: Small businesses and App…
• Consumer time savings: Centralized deletion reduces the manual burden. Prior research indicates that managing data rights one‑by‑one can consume dozens of hours annually. [7]Consumer Reports — Consumer Reports Innovation Lab: Helping 104 consumers exerc…

Social Effects

Implications for individual privacy/safety and for communities and vulnerable groups.

• Safety and dignity benefits: FTC enforcement against location‑data brokers details risks from tracking visits to clinics, places of worship, shelters, and protests. A uniform delete/collection‑stop right would directly mitigate these harms by shrinking broker‑held datasets and preventing reacquisition. [3]Federal Trade Commission — FTC final order: X‑Mode/Outlogic banned from selling…[4]Federal Trade Commission — FTC final order: InMarket prohibited from selling/sh…
• Vulnerable populations (survivors of domestic violence, undocumented people, LGBTQ+ communities) stand to benefit disproportionately from curbs on sensitive location trails and profiling. Case files and orders highlight how such data can enable stalking, discrimination, and exposure. [3]Federal Trade Commission — FTC final order: X‑Mode/Outlogic banned from selling…
• Equity and access: Centralization (no‑cost, standardized web portal) lowers friction for individuals with limited time/means to navigate piecemeal opt‑outs; this addresses well‑documented frictions in current processes. [1]Congress.gov — H.R. 2612 — DELETE Act (bill text)[7]Consumer Reports — Consumer Reports Innovation Lab: Helping 104 consumers exerc…
• Research and journalism carve‑outs allow retention when required (e.g., human‑subjects research, lawful process), limiting disruption to public‑interest work compared to a blanket deletion mandate. [1]Congress.gov — H.R. 2612 — DELETE Act (bill text)

Environmental Effects

Storage deletion and data‑collection curbs could marginally affect data‑center loads; scale is uncertain.

• By removing records and limiting reacquisition, aggregate storage footprints at brokers and some downstream clients should decline modestly; at national scale the effect is uncertain relative to AI‑driven compute growth. Authoritative outlooks show data‑center electricity demand rising sharply this decade, suggesting any savings from broker‑level storage reductions will be small in the broader load trajectory. [14]Web search · turn 4 #0[15]International Energy Agency — IEA news: AI set to drive surging electricity dem…
• U.S. agencies project rising data‑center electricity shares through 2028, driven largely by AI/accelerated compute rather than storage. Thus, environmental benefits from the DELETE Act likely exist but are secondary. [16]U.S. Department of Energy — DOE press release summarizing LBNL 2024 report on U…

Temporal Analysis

Short‑term implementation vs. longer‑term market/system dynamics.

Unintended Consequences

Credible risks and second‑order effects to watch.

• Centralized hashed‑identifier registries as a target: Even salted and hashed PII can function as persistent identifiers; if salts are widely shared with registrants and registry values leak, adversaries could mount dictionary or matching attacks. The FTC has explicitly warned that hashing does not make identifiers anonymous. Mitigation will depend on cryptographic design and strict access controls. [17]Federal Trade Commission — FTC Tech blog: No, hashing still doesn’t make your d…
• Regulatory arbitrage and relabeling: Firms may restructure to claim exclusions (e.g., identity verification/fraud prevention lines) or shift toward first‑party data, reinforcing large platforms’ advantages—patterns observed after major privacy shocks (GDPR, ATT). [12]arXiv — Working paper: Impact of privacy laws (GDPR) on user behavior and conce…[11]SAGE Journals — Journal of Marketing article: Early impact of GDPR on display a…[13]Robert H. Smith School of Business — Research summary: Small businesses and App…
• Non‑registration/non‑compliance risk: State experience shows gaps and potential under‑registration by hundreds of entities, implying the federal system will need robust detection and penalties to avoid blind spots. [18]Web search · turn 3 #5
• System funding and capacity: Although per‑broker fees are capped at 1% of system cost, adequacy depends on participation and enforcement; if many brokers under‑register or avoid the system, FTC may face resource strain. [1]Congress.gov — H.R. 2612 — DELETE Act (bill text)
• Interplay with shifting federal policy: With CFPB’s 2024–25 data‑broker rule withdrawn, reliance on FTC authority heightens; if FTC budgets or priorities change, the centralized system’s deterrence value could erode. [5]govinfo.gov / Federal Register — Federal Register: CFPB withdraws proposed Data…

Assessment

Analytical bottom line (not advocacy).

Overall stance: neutral. The DELETE Act plausibly delivers meaningful privacy/safety gains and real consumer time savings, while imposing material compliance costs and introducing centralized‑system security risks. Net outcomes hinge on FTC rule design (especially registry security and broker‑query controls), cross‑walks with state systems (e.g., California’s), and market adaptation in advertising and lead‑gen. [1]Congress.gov — H.R. 2612 — DELETE Act (bill text)[3]Federal Trade Commission — FTC final order: X‑Mode/Outlogic banned from selling…[4]Federal Trade Commission — FTC final order: InMarket prohibited from selling/sh…[6]California Privacy Protection Agency — CPPA announcement: California Delete Act…

Sourcing

Key public, government, and research sources underpinning this analysis.

• Bill text and status: Congress.gov H.R. 2612; actions and related Senate bill. [1]Congress.gov — H.R. 2612 — DELETE Act (bill text)[2]Congress.gov — H.R. 2612 — All Info (status, related bills)
• State comparators: CPPA Delete Act implementation timeline and registries; CPPA fee notice. [6]California Privacy Protection Agency — CPPA announcement: California Delete Act…[19]Web search · turn 3 #0[10]California Privacy Protection Agency — CPPA: 2025 broker registration fee ($6,6…
• Market scale signals: Multi‑state registry consolidation (Privacy Rights Clearinghouse). [9]Privacy Rights Clearinghouse — Privacy Rights Clearinghouse consolidated broker…
• Enforcement evidence: FTC actions vs. X‑Mode/Outlogic; InMarket; Kochava case status. [3]Federal Trade Commission — FTC final order: X‑Mode/Outlogic banned from selling…[4]Federal Trade Commission — FTC final order: InMarket prohibited from selling/sh…[20]Federal Trade Commission — FTC v. Kochava (case page; status, filings)
• Hashing risk and identifier persistence: FTC Tech at FTC blog; BetterHelp blog post. [17]Federal Trade Commission — FTC Tech blog: No, hashing still doesn’t make your d…[21]Web search · turn 7 #3
• Economic analogs: GDPR and ATT research on performance and concentration. [11]SAGE Journals — Journal of Marketing article: Early impact of GDPR on display a…[12]arXiv — Working paper: Impact of privacy laws (GDPR) on user behavior and conce…[13]Robert H. Smith School of Business — Research summary: Small businesses and App…
• Macroelectricity context: IEA and U.S. DOE/LBNL assessments of data‑center electricity demand growth. [15]International Energy Agency — IEA news: AI set to drive surging electricity dem…[16]U.S. Department of Energy — DOE press release summarizing LBNL 2024 report on U…
• Policy backdrop: CFPB withdrawal of proposed data‑broker rule (Federal Register). [5]govinfo.gov / Federal Register — Federal Register: CFPB withdraws proposed Data…
• Consumer burden under status quo: Consumer Reports authorized‑agent project. [7]Consumer Reports — Consumer Reports Innovation Lab: Helping 104 consumers exerc…