California 2023 2023-2024 Regular Session

California Assembly Bill AB1791 Amended / Bill

Filed 04/25/2024

                    Amended IN  Assembly  April 25, 2024 Amended IN  Assembly  March 19, 2024 CALIFORNIA LEGISLATURE 20232024 REGULAR SESSION Assembly Bill No. 1791Introduced by Assembly Member WeberJanuary 04, 2024An act to add Chapter 11.1 (commencing with Section 21760) to Division 8 of the Business and Professions Code, relating to social media platforms.LEGISLATIVE COUNSEL'S DIGESTAB 1791, as amended, Weber. Digital content provenance.Existing law requires the Secretary of Government Operations to develop a coordinated plan to, among other things, investigate the feasibility of, and obstacles to, developing standards and technologies for state departments to determine digital content provenance. For the purpose of informing that coordinated plan, existing law requires the secretary to evaluate, among other things, the legal implications associated with the use of digital content forgery technologies, deepfakes, and technologies allowing public verification of digital content provenance.This bill would prohibit require a social media platform, as defined, from removing digital content to redact personal provenance verification data, as defined, from content uploaded to the social media platform by a user. user and would prohibit a social media platform from redacting system provenance data, as defined, from content uploaded to the social media platform by a user, except as prescribed. The bill would authorize a user of a social media platform to bring a civil action against a social media platform that fails to comply with the bill with regard to content uploaded by that user for certain relief, including actual damages or $10,000 per violation, whichever is greater.Digest Key Vote: MAJORITY  Appropriation: NO  Fiscal Committee: NO  Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. Chapter 11.1 (commencing with Section 21760) is added to Division 8 of the Business and Professions Code, to read: CHAPTER 11.1. Digital Content Provenance21760. As used in this chapter:(a)Digital content provenance means the verifiable chronology of the original piece of digital content.(a) Personal provenance data means provenance data that contains personal information, as defined in Section 1798.140 of the Civil Code.(b) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification, including, but not limited to, personal provenance data and system provenance data.(b)(c) Social media platform has the same meaning as defined in Section 22589.(d) System provenance data means provenance data that does either of the following: (1) Identifies the device, system, or service that was used to generate a piece of digital content.(2) Authenticates the digital content.21761. (a) A social media platform shall not remove digital content redact personal provenance verification data from content uploaded to the social media platform by a user.(b) Except as provided in subdivision (c), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.(c) (1) If a social media platform is unable to redact personal provenance data from content without also redacting system provenance data from the content, a social media platform shall redact the personal provenance data and the system provenance data from the content and append a label to the content that meets both of the following criteria:(A) The label prominently discloses any system provenance data that was redacted by the social media platform and does not contain personal provenance data.(B) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.(d) When content to which a social media platform has appended a label pursuant to subdivision (c) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the system provenance data into the distributed content or add it to the contents metadata.(e) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding system provenance data into content, or adding system provenance data to content metadata pursuant to this section.21762. (a) A user of a social media platform may bring a civil action against a social media platform that fails to comply with this chapter with regard to content uploaded by that user for either of the following relief:(1) Actual damages or ten thousand dollars ($10,000) per violation, whichever is greater.(2) Injunctive relief.(b) In an action pursuant to this section, the court shall award reasonable attorneys fees and costs to a prevailing plaintiff.

 Amended IN  Assembly  April 25, 2024 Amended IN  Assembly  March 19, 2024 CALIFORNIA LEGISLATURE 20232024 REGULAR SESSION Assembly Bill No. 1791Introduced by Assembly Member WeberJanuary 04, 2024An act to add Chapter 11.1 (commencing with Section 21760) to Division 8 of the Business and Professions Code, relating to social media platforms.LEGISLATIVE COUNSEL'S DIGESTAB 1791, as amended, Weber. Digital content provenance.Existing law requires the Secretary of Government Operations to develop a coordinated plan to, among other things, investigate the feasibility of, and obstacles to, developing standards and technologies for state departments to determine digital content provenance. For the purpose of informing that coordinated plan, existing law requires the secretary to evaluate, among other things, the legal implications associated with the use of digital content forgery technologies, deepfakes, and technologies allowing public verification of digital content provenance.This bill would prohibit require a social media platform, as defined, from removing digital content to redact personal provenance verification data, as defined, from content uploaded to the social media platform by a user. user and would prohibit a social media platform from redacting system provenance data, as defined, from content uploaded to the social media platform by a user, except as prescribed. The bill would authorize a user of a social media platform to bring a civil action against a social media platform that fails to comply with the bill with regard to content uploaded by that user for certain relief, including actual damages or $10,000 per violation, whichever is greater.Digest Key Vote: MAJORITY  Appropriation: NO  Fiscal Committee: NO  Local Program: NO 

 Amended IN  Assembly  April 25, 2024 Amended IN  Assembly  March 19, 2024

Amended IN  Assembly  April 25, 2024
Amended IN  Assembly  March 19, 2024

 CALIFORNIA LEGISLATURE 20232024 REGULAR SESSION

 Assembly Bill 

No. 1791

Introduced by Assembly Member WeberJanuary 04, 2024

Introduced by Assembly Member Weber
January 04, 2024

An act to add Chapter 11.1 (commencing with Section 21760) to Division 8 of the Business and Professions Code, relating to social media platforms.

LEGISLATIVE COUNSEL'S DIGEST

## LEGISLATIVE COUNSEL'S DIGEST

AB 1791, as amended, Weber. Digital content provenance.

Existing law requires the Secretary of Government Operations to develop a coordinated plan to, among other things, investigate the feasibility of, and obstacles to, developing standards and technologies for state departments to determine digital content provenance. For the purpose of informing that coordinated plan, existing law requires the secretary to evaluate, among other things, the legal implications associated with the use of digital content forgery technologies, deepfakes, and technologies allowing public verification of digital content provenance.This bill would prohibit require a social media platform, as defined, from removing digital content to redact personal provenance verification data, as defined, from content uploaded to the social media platform by a user. user and would prohibit a social media platform from redacting system provenance data, as defined, from content uploaded to the social media platform by a user, except as prescribed. The bill would authorize a user of a social media platform to bring a civil action against a social media platform that fails to comply with the bill with regard to content uploaded by that user for certain relief, including actual damages or $10,000 per violation, whichever is greater.

Existing law requires the Secretary of Government Operations to develop a coordinated plan to, among other things, investigate the feasibility of, and obstacles to, developing standards and technologies for state departments to determine digital content provenance. For the purpose of informing that coordinated plan, existing law requires the secretary to evaluate, among other things, the legal implications associated with the use of digital content forgery technologies, deepfakes, and technologies allowing public verification of digital content provenance.

This bill would prohibit require a social media platform, as defined, from removing digital content to redact personal provenance verification data, as defined, from content uploaded to the social media platform by a user. user and would prohibit a social media platform from redacting system provenance data, as defined, from content uploaded to the social media platform by a user, except as prescribed. The bill would authorize a user of a social media platform to bring a civil action against a social media platform that fails to comply with the bill with regard to content uploaded by that user for certain relief, including actual damages or $10,000 per violation, whichever is greater.

## Digest Key

## Bill Text

The people of the State of California do enact as follows:SECTION 1. Chapter 11.1 (commencing with Section 21760) is added to Division 8 of the Business and Professions Code, to read: CHAPTER 11.1. Digital Content Provenance21760. As used in this chapter:(a)Digital content provenance means the verifiable chronology of the original piece of digital content.(a) Personal provenance data means provenance data that contains personal information, as defined in Section 1798.140 of the Civil Code.(b) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification, including, but not limited to, personal provenance data and system provenance data.(b)(c) Social media platform has the same meaning as defined in Section 22589.(d) System provenance data means provenance data that does either of the following: (1) Identifies the device, system, or service that was used to generate a piece of digital content.(2) Authenticates the digital content.21761. (a) A social media platform shall not remove digital content redact personal provenance verification data from content uploaded to the social media platform by a user.(b) Except as provided in subdivision (c), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.(c) (1) If a social media platform is unable to redact personal provenance data from content without also redacting system provenance data from the content, a social media platform shall redact the personal provenance data and the system provenance data from the content and append a label to the content that meets both of the following criteria:(A) The label prominently discloses any system provenance data that was redacted by the social media platform and does not contain personal provenance data.(B) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.(d) When content to which a social media platform has appended a label pursuant to subdivision (c) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the system provenance data into the distributed content or add it to the contents metadata.(e) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding system provenance data into content, or adding system provenance data to content metadata pursuant to this section.21762. (a) A user of a social media platform may bring a civil action against a social media platform that fails to comply with this chapter with regard to content uploaded by that user for either of the following relief:(1) Actual damages or ten thousand dollars ($10,000) per violation, whichever is greater.(2) Injunctive relief.(b) In an action pursuant to this section, the court shall award reasonable attorneys fees and costs to a prevailing plaintiff.

The people of the State of California do enact as follows:

## The people of the State of California do enact as follows:

SECTION 1. Chapter 11.1 (commencing with Section 21760) is added to Division 8 of the Business and Professions Code, to read: CHAPTER 11.1. Digital Content Provenance21760. As used in this chapter:(a)Digital content provenance means the verifiable chronology of the original piece of digital content.(a) Personal provenance data means provenance data that contains personal information, as defined in Section 1798.140 of the Civil Code.(b) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification, including, but not limited to, personal provenance data and system provenance data.(b)(c) Social media platform has the same meaning as defined in Section 22589.(d) System provenance data means provenance data that does either of the following: (1) Identifies the device, system, or service that was used to generate a piece of digital content.(2) Authenticates the digital content.21761. (a) A social media platform shall not remove digital content redact personal provenance verification data from content uploaded to the social media platform by a user.(b) Except as provided in subdivision (c), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.(c) (1) If a social media platform is unable to redact personal provenance data from content without also redacting system provenance data from the content, a social media platform shall redact the personal provenance data and the system provenance data from the content and append a label to the content that meets both of the following criteria:(A) The label prominently discloses any system provenance data that was redacted by the social media platform and does not contain personal provenance data.(B) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.(d) When content to which a social media platform has appended a label pursuant to subdivision (c) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the system provenance data into the distributed content or add it to the contents metadata.(e) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding system provenance data into content, or adding system provenance data to content metadata pursuant to this section.21762. (a) A user of a social media platform may bring a civil action against a social media platform that fails to comply with this chapter with regard to content uploaded by that user for either of the following relief:(1) Actual damages or ten thousand dollars ($10,000) per violation, whichever is greater.(2) Injunctive relief.(b) In an action pursuant to this section, the court shall award reasonable attorneys fees and costs to a prevailing plaintiff.

SECTION 1. Chapter 11.1 (commencing with Section 21760) is added to Division 8 of the Business and Professions Code, to read:

### SECTION 1.

 CHAPTER 11.1. Digital Content Provenance21760. As used in this chapter:(a)Digital content provenance means the verifiable chronology of the original piece of digital content.(a) Personal provenance data means provenance data that contains personal information, as defined in Section 1798.140 of the Civil Code.(b) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification, including, but not limited to, personal provenance data and system provenance data.(b)(c) Social media platform has the same meaning as defined in Section 22589.(d) System provenance data means provenance data that does either of the following: (1) Identifies the device, system, or service that was used to generate a piece of digital content.(2) Authenticates the digital content.21761. (a) A social media platform shall not remove digital content redact personal provenance verification data from content uploaded to the social media platform by a user.(b) Except as provided in subdivision (c), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.(c) (1) If a social media platform is unable to redact personal provenance data from content without also redacting system provenance data from the content, a social media platform shall redact the personal provenance data and the system provenance data from the content and append a label to the content that meets both of the following criteria:(A) The label prominently discloses any system provenance data that was redacted by the social media platform and does not contain personal provenance data.(B) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.(d) When content to which a social media platform has appended a label pursuant to subdivision (c) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the system provenance data into the distributed content or add it to the contents metadata.(e) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding system provenance data into content, or adding system provenance data to content metadata pursuant to this section.21762. (a) A user of a social media platform may bring a civil action against a social media platform that fails to comply with this chapter with regard to content uploaded by that user for either of the following relief:(1) Actual damages or ten thousand dollars ($10,000) per violation, whichever is greater.(2) Injunctive relief.(b) In an action pursuant to this section, the court shall award reasonable attorneys fees and costs to a prevailing plaintiff.

 CHAPTER 11.1. Digital Content Provenance21760. As used in this chapter:(a)Digital content provenance means the verifiable chronology of the original piece of digital content.(a) Personal provenance data means provenance data that contains personal information, as defined in Section 1798.140 of the Civil Code.(b) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification, including, but not limited to, personal provenance data and system provenance data.(b)(c) Social media platform has the same meaning as defined in Section 22589.(d) System provenance data means provenance data that does either of the following: (1) Identifies the device, system, or service that was used to generate a piece of digital content.(2) Authenticates the digital content.21761. (a) A social media platform shall not remove digital content redact personal provenance verification data from content uploaded to the social media platform by a user.(b) Except as provided in subdivision (c), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.(c) (1) If a social media platform is unable to redact personal provenance data from content without also redacting system provenance data from the content, a social media platform shall redact the personal provenance data and the system provenance data from the content and append a label to the content that meets both of the following criteria:(A) The label prominently discloses any system provenance data that was redacted by the social media platform and does not contain personal provenance data.(B) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.(d) When content to which a social media platform has appended a label pursuant to subdivision (c) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the system provenance data into the distributed content or add it to the contents metadata.(e) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding system provenance data into content, or adding system provenance data to content metadata pursuant to this section.21762. (a) A user of a social media platform may bring a civil action against a social media platform that fails to comply with this chapter with regard to content uploaded by that user for either of the following relief:(1) Actual damages or ten thousand dollars ($10,000) per violation, whichever is greater.(2) Injunctive relief.(b) In an action pursuant to this section, the court shall award reasonable attorneys fees and costs to a prevailing plaintiff.

 CHAPTER 11.1. Digital Content Provenance

 CHAPTER 11.1. Digital Content Provenance

21760. As used in this chapter:(a)Digital content provenance means the verifiable chronology of the original piece of digital content.(a) Personal provenance data means provenance data that contains personal information, as defined in Section 1798.140 of the Civil Code.(b) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification, including, but not limited to, personal provenance data and system provenance data.(b)(c) Social media platform has the same meaning as defined in Section 22589.(d) System provenance data means provenance data that does either of the following: (1) Identifies the device, system, or service that was used to generate a piece of digital content.(2) Authenticates the digital content.



21760. As used in this chapter:

(a)Digital content provenance means the verifiable chronology of the original piece of digital content.



(a) Personal provenance data means provenance data that contains personal information, as defined in Section 1798.140 of the Civil Code.

(b) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification, including, but not limited to, personal provenance data and system provenance data.

(b)



(c) Social media platform has the same meaning as defined in Section 22589.

(d) System provenance data means provenance data that does either of the following:

 (1) Identifies the device, system, or service that was used to generate a piece of digital content.

(2) Authenticates the digital content.

21761. (a) A social media platform shall not remove digital content redact personal provenance verification data from content uploaded to the social media platform by a user.(b) Except as provided in subdivision (c), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.(c) (1) If a social media platform is unable to redact personal provenance data from content without also redacting system provenance data from the content, a social media platform shall redact the personal provenance data and the system provenance data from the content and append a label to the content that meets both of the following criteria:(A) The label prominently discloses any system provenance data that was redacted by the social media platform and does not contain personal provenance data.(B) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.(d) When content to which a social media platform has appended a label pursuant to subdivision (c) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the system provenance data into the distributed content or add it to the contents metadata.(e) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding system provenance data into content, or adding system provenance data to content metadata pursuant to this section.



21761. (a) A social media platform shall not remove digital content redact personal provenance verification data from content uploaded to the social media platform by a user.

(b) Except as provided in subdivision (c), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.

(c) (1) If a social media platform is unable to redact personal provenance data from content without also redacting system provenance data from the content, a social media platform shall redact the personal provenance data and the system provenance data from the content and append a label to the content that meets both of the following criteria:

(A) The label prominently discloses any system provenance data that was redacted by the social media platform and does not contain personal provenance data.

(B) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.

(d) When content to which a social media platform has appended a label pursuant to subdivision (c) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the system provenance data into the distributed content or add it to the contents metadata.

(e) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding system provenance data into content, or adding system provenance data to content metadata pursuant to this section.

21762. (a) A user of a social media platform may bring a civil action against a social media platform that fails to comply with this chapter with regard to content uploaded by that user for either of the following relief:(1) Actual damages or ten thousand dollars ($10,000) per violation, whichever is greater.(2) Injunctive relief.(b) In an action pursuant to this section, the court shall award reasonable attorneys fees and costs to a prevailing plaintiff.



21762. (a) A user of a social media platform may bring a civil action against a social media platform that fails to comply with this chapter with regard to content uploaded by that user for either of the following relief:

(1) Actual damages or ten thousand dollars ($10,000) per violation, whichever is greater.

(2) Injunctive relief.

(b) In an action pursuant to this section, the court shall award reasonable attorneys fees and costs to a prevailing plaintiff.