No federal law requires data brokers to register, disclose their practices, or honor deletion requests. This analysis covers the FCRA and GLBA coverage gaps, the CFPB's withdrawn rulemaking, California's Delete Act DROP platform, and the DELETE Act's stalled path through the 119th Congress.