The Federal Trade Commission finalized rules requiring data brokers to register, publish categories of data collected, and honor consumer deletion requests within 30 days.

Noncompliance can draw civil penalties of up to $50,000 per record.