1. Short title This Act may be cited as the You Own the Data Act or YODA . 2. Findings Congress finds the following: (1) Governments exist to protect individual rights to life, liberty, and property. (2) The protection of civil liberties, including the rights to private property and privacy from unwarranted searches and seizures, is one of the hallmarks of a free society. (3) It is appropriate for Congress to enact laws to protect individuals from data collection by third parties. (4) Data is the property of the user, as the user creates the data. (5) A user maintains ownership of the data of such user, even when such data is sold or leased with the consent of such user. (6) Technology should empower the individual and the productivity of the individual. (7) Individuals should have reasonable access to and use of popularly available consumer technologies without abdicating the rights of such individuals to privacy and anonymity. 3. Prohibition on sharing user contacts without written consent and clarifying user access to data (a) Prohibition on access to user contacts It shall be unlawful for a covered entity to ask a user to share the contacts or information about the contacts of the user unless the user and the contacts of the user consent to such use in writing. (b) Access to, and correction, deletion, and portability of, covered data (1) In general Subject to paragraphs (2) and (3), a covered entity shall provide a user, immediately or as quickly as possible and in no case later than 90 days after receiving a verified request from the user, with the ability to reasonably— (A) access— (i) if applicable, a list of each third party and service provider to whom the covered entity has transferred or shared the covered data of the user; (ii) the covered data of the user, or an accurate representation of the covered data of the user, including data aggregation that is a readable summary, that is held or has been processed by the covered entity or any service provider of the covered entity