Protecting Human Thriving by Establishing Data Privacy and Consent Rights

EXECUTIVE ORDER

PROTECTING HUMAN THRIVING BY ESTABLISHING DATA PRIVACY AND CONSENT RIGHTS

By the authority vested in me as President by the Constitution and the laws of the United States of America, including the Federal Trade Commission Act (15 U.S.C. 41 et seq.), the Administrative Procedure Act (5 U.S.C. 551 et seq.), and section 301 of title 3, United States Code, it is hereby ordered as follows:

Preamble.
Human beings are not commodities. Our thoughts, movements, communications, and identities are not assets to be harvested and sold. Yet today, corporations, data brokers, and even government agencies treat personal information as a resource to be extracted, packaged, and traded without meaningful consent.

It is the policy of my Administration that:
• No entity—public or private—shall invade a person’s privacy without explicit, informed, written consent.
• Such consent shall expire automatically every 30 days, requiring renewal.
• No entity shall sell, license, or otherwise transfer personal data to any third party for any purpose.
• Every person has the right to know what data is held about them, to correct it, and to have it deleted.

Section 1. Definitions.
Defines personal data, entity, consent, sale, and natural person.

Sec. 2. Prohibition on Data Collection Without Renewable Consent.
(a) No entity shall collect, process, retain, or use personal data without written consent.
(b) Consent expires automatically after 30 days.
(c) Consent must be purpose-specific and not bundled.
(d) Consent must be withdrawable without penalty, subject to technical necessity.

Sec. 3. Prohibition on Sale of Personal Data.
(a) No entity shall sell, license, transfer, or disclose personal data for consideration.
(b) Includes data broker sales, targeted advertising transfers, and AI-training licensing.
(c) Limited exceptions apply for verified individual requests, narrowly tailored service provision, and valid warrants.

Sec. 4. Individual Rights Regarding Personal Data.
(a) Right to Access within 15 days.
(b) Right to Correction.
(c) Right to Deletion.
(d) Right to Know disclosure recipients and purposes.

Sec. 5. Enforcement.
(a) Federal Trade Commission primary enforcement authority.
(b) Private right of action with damages, injunctive relief, and attorneys’ fees.
(c) Enforcement by U.S. and State Attorneys General.
(d) License or authorization suspension/revocation for knowing or pattern violations.

Sec. 6. Application to Government Entities and Corporations.
Applies protections across federal, state, local, and tribal government entities and private organizations; requires warrants based on probable cause for law enforcement and intelligence access.

Sec. 7. Relationship to Existing Law.
This order shall be interpreted to provide the highest level of privacy protection available under law.

Sec. 8. Implementation and Guidance.
(a) AG and FTC Chair shall issue guidance within 90 days.
(b) OMB shall issue federal compliance standards within 180 days.

Sec. 9. General Provisions.
Implemented consistent with applicable law and appropriations.

Sec. 10. Effective Date.
This order shall take effect 180 days after the date of this order.

IN WITNESS WHEREOF, I have hereunto set my hand this 20th day of January 2029.

Signed,
Vincent Cordova
President of the United States, 2028