California 2023-2024 Regular Session

California Assembly Bill AB1791 Compare Versions

OldNewDifferences
1-Amended IN Senate June 20, 2024 Amended IN Senate June 03, 2024 Amended IN Assembly May 02, 2024 Amended IN Assembly April 25, 2024 Amended IN Assembly March 19, 2024 CALIFORNIA LEGISLATURE 20232024 REGULAR SESSION Assembly Bill No. 1791Introduced by Assembly Member WeberJanuary 04, 2024An act to add Chapter 11.1 (commencing with Section 21760) to Division 8 of the Business and Professions Code, relating to social media platforms.LEGISLATIVE COUNSEL'S DIGESTAB 1791, as amended, Weber. Digital content provenance.Existing law requires the Secretary of Government Operations to develop a coordinated plan to, among other things, investigate the feasibility of, and obstacles to, developing standards and technologies for state departments to determine digital content provenance. For the purpose of informing that coordinated plan, existing law requires the secretary to evaluate, among other things, the legal implications associated with the use of digital content forgery technologies, deepfakes, and technologies allowing public verification of digital content provenance.This bill would would, on and after January 1, 2028, require a social media platform, as defined, to redact personal provenance data, as defined, from content uploaded to the social media platform by a user user, except as prescribed, and would prohibit a social media platform from redacting system provenance data, as defined, from content uploaded to the social media platform by a user, except as prescribed.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. Chapter 11.1 (commencing with Section 21760) is added to Division 8 of the Business and Professions Code, to read: CHAPTER 11.1. Digital Content Provenance21760. As used in this chapter:(a) Copyright management information has the same meaning as defined in Section 1202 of Title 17 of the United States Code.(b) Dark pattern means a user interface designed or manipulated with the substantial effect of subverting or impairing user autonomy, decisionmaking, or choice.(c) Express consent means a users affirmative authorization, that is not inferred from inaction, to grant permission in response to a clear, meaningful, and prominent notice that meets all of the following criteria:(1) The affirmative authorization is in response to a notice that is not contained within a more general notice, agreement, or set of terms and conditions. (2) The affirmative authorization is in response to a notice conveyed in such a manner that an ordinary consumer would notice and understand it. (3) The affirmative authorization is not obtained through the use of dark patterns.(a)(d) Personal provenance data means provenance data that contains any either of the following:(1) Personal information, as defined by Section 1798.140 of the Civil Code.(2) Unique device, system, or service information that is reasonably capable of being associated with a particular user.(3)Time-of-day information.(b)(e) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification.(c)(f) Social media platform has the same meaning as defined in Section 22589.(d)(g) System provenance data means provenance data that is not reasonably capable of being associated with a particular user and that contains either of the following:(1) Information regarding the type of device, system, or service that was used to generate a piece of digital content.(2) Information that provides proof of content authenticity.21761. (a) A (1) Subject to paragraph (2), a social media platform shall redact personal provenance data from content uploaded to the social media platform by a user.(2) (A) A social media platform may refrain from redacting personal provenance data from content uploaded by a user if either of the following conditions are met:(i) The social media platform obtains the users express consent to forgo redacting personal provenance data in a specific piece of content or batch of content.(ii) The social media platform obtains the users express consent to forgo redacting personal provenance data in all content uploaded by the user.(B) A social media platform shall not redact personal provenance data that is copyright management information from content uploaded to the social media platform by a user.(3) (A) A social media platform that obtains a users express consent to forgo redacting personal provenance data in content shall allow the user to revoke the users express consent at any time through a readily accessible mechanism.(B) A social media platform shall not be required to redact personal provenance data from content previously uploaded by a user in response to the user revoking the users express consent pursuant to this paragraph.(b) (1) Except as provided in subdivision (c), paragraph (2), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.(c)If a(2) A social media platform that is unable to redact personal provenance data required to be redacted by subdivision (a) from content without also redacting system provenance data from the content, a social media platform content shall redact the personal provenance data that is not copyright management information and the system provenance data from the content and shall append a label to the content that meets all of the following criteria:(1)(A) The label prominently discloses any system provenance data that was redacted by the social media platform.(2)(B) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.(3)(C) The label does not disclose any personal provenance data. data that was redacted pursuant to subdivision (a).(d)(c) When content to which a social media platform has appended a label pursuant to paragraph (2) of subdivision (c) (b) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the information contained in the label into the distributed content or add it to the contents metadata.(e)(d) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding information into content, or adding information to metadata pursuant to this section.21762. A violation of this chapter shall constitute an unfair business practice punishable pursuant to Chapter 5 (commencing with Section 17200) of Part 2 of Division 7 of the Business and Professions Code.21763. This chapter shall become operative on January 1, 2028.
1+Amended IN Senate June 03, 2024 Amended IN Assembly May 02, 2024 Amended IN Assembly April 25, 2024 Amended IN Assembly March 19, 2024 CALIFORNIA LEGISLATURE 20232024 REGULAR SESSION Assembly Bill No. 1791Introduced by Assembly Member WeberJanuary 04, 2024An act to add Chapter 11.1 (commencing with Section 21760) to Division 8 of the Business and Professions Code, relating to social media platforms.LEGISLATIVE COUNSEL'S DIGESTAB 1791, as amended, Weber. Digital content provenance.Existing law requires the Secretary of Government Operations to develop a coordinated plan to, among other things, investigate the feasibility of, and obstacles to, developing standards and technologies for state departments to determine digital content provenance. For the purpose of informing that coordinated plan, existing law requires the secretary to evaluate, among other things, the legal implications associated with the use of digital content forgery technologies, deepfakes, and technologies allowing public verification of digital content provenance.This bill would require a social media platform, as defined, to redact personal provenance data, as defined, from content uploaded to the social media platform by a user and would prohibit a social media platform from redacting system provenance data, as defined, from content uploaded to the social media platform by a user, except as prescribed. The bill would make a social media platform that violates those provisions liable in a civil action brought by a user of a social media platform for certain relief, including actual damages or statutory damages of $10,000 per violation, whichever is greater.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NOYES Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. Chapter 11.1 (commencing with Section 21760) is added to Division 8 of the Business and Professions Code, to read: CHAPTER 11.1. Digital Content Provenance21760. As used in this chapter:(a) Personal provenance data means provenance data that contains any of the following:(1) Personal information, as defined by Section 1798.140 of the Civil Code.(2) Unique device, system, or service information that is reasonably capable of being associated with a particular user.(3) Time-of-day information.(b) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification.(c) Social media platform has the same meaning as defined in Section 22589.(d) System provenance data means provenance data that is not reasonably capable of being associated with a particular user and that contains either of the following:(1) Information regarding the type of device, system, or service that was used to generate a piece of digital content.(2) Information that provides proof of content authenticity.21761. (a) A social media platform shall redact personal provenance data from content uploaded to the social media platform by a user.(b) Except as provided in subdivision (c), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.(c) If a social media platform is unable to redact personal provenance data from content without also redacting system provenance data from the content, a social media platform shall redact the personal provenance data and the system provenance data from the content and shall append a label to the content that meets all of the following criteria:(1) The label prominently discloses any system provenance data that was redacted by the social media platform.(2) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.(3) The label does not disclose any personal provenance data.(d) When content to which a social media platform has appended a label pursuant to subdivision (c) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the information contained in the label into the distributed content or add it to the contents metadata.(e) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding information into content, or adding information to metadata pursuant to this section.21762.A social media platform that violates this chapter shall be liable in a civil action brought by a user of a social media platform for all of the following:(a)Actual damages or statutory damages of not more than ten thousand dollars ($10,000) per violation, whichever is greater.(b)Injunctive relief.(c)Reasonable attorneys fees and costs.21762. A violation of this chapter shall constitute an unfair business practice punishable pursuant to Chapter 5 (commencing with Section 17200) of Part 2 of Division 7 of the Business and Professions Code.
22
3- Amended IN Senate June 20, 2024 Amended IN Senate June 03, 2024 Amended IN Assembly May 02, 2024 Amended IN Assembly April 25, 2024 Amended IN Assembly March 19, 2024 CALIFORNIA LEGISLATURE 20232024 REGULAR SESSION Assembly Bill No. 1791Introduced by Assembly Member WeberJanuary 04, 2024An act to add Chapter 11.1 (commencing with Section 21760) to Division 8 of the Business and Professions Code, relating to social media platforms.LEGISLATIVE COUNSEL'S DIGESTAB 1791, as amended, Weber. Digital content provenance.Existing law requires the Secretary of Government Operations to develop a coordinated plan to, among other things, investigate the feasibility of, and obstacles to, developing standards and technologies for state departments to determine digital content provenance. For the purpose of informing that coordinated plan, existing law requires the secretary to evaluate, among other things, the legal implications associated with the use of digital content forgery technologies, deepfakes, and technologies allowing public verification of digital content provenance.This bill would would, on and after January 1, 2028, require a social media platform, as defined, to redact personal provenance data, as defined, from content uploaded to the social media platform by a user user, except as prescribed, and would prohibit a social media platform from redacting system provenance data, as defined, from content uploaded to the social media platform by a user, except as prescribed.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: NO
3+ Amended IN Senate June 03, 2024 Amended IN Assembly May 02, 2024 Amended IN Assembly April 25, 2024 Amended IN Assembly March 19, 2024 CALIFORNIA LEGISLATURE 20232024 REGULAR SESSION Assembly Bill No. 1791Introduced by Assembly Member WeberJanuary 04, 2024An act to add Chapter 11.1 (commencing with Section 21760) to Division 8 of the Business and Professions Code, relating to social media platforms.LEGISLATIVE COUNSEL'S DIGESTAB 1791, as amended, Weber. Digital content provenance.Existing law requires the Secretary of Government Operations to develop a coordinated plan to, among other things, investigate the feasibility of, and obstacles to, developing standards and technologies for state departments to determine digital content provenance. For the purpose of informing that coordinated plan, existing law requires the secretary to evaluate, among other things, the legal implications associated with the use of digital content forgery technologies, deepfakes, and technologies allowing public verification of digital content provenance.This bill would require a social media platform, as defined, to redact personal provenance data, as defined, from content uploaded to the social media platform by a user and would prohibit a social media platform from redacting system provenance data, as defined, from content uploaded to the social media platform by a user, except as prescribed. The bill would make a social media platform that violates those provisions liable in a civil action brought by a user of a social media platform for certain relief, including actual damages or statutory damages of $10,000 per violation, whichever is greater.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NOYES Local Program: NO
44
5- Amended IN Senate June 20, 2024 Amended IN Senate June 03, 2024 Amended IN Assembly May 02, 2024 Amended IN Assembly April 25, 2024 Amended IN Assembly March 19, 2024
5+ Amended IN Senate June 03, 2024 Amended IN Assembly May 02, 2024 Amended IN Assembly April 25, 2024 Amended IN Assembly March 19, 2024
66
7-Amended IN Senate June 20, 2024
87 Amended IN Senate June 03, 2024
98 Amended IN Assembly May 02, 2024
109 Amended IN Assembly April 25, 2024
1110 Amended IN Assembly March 19, 2024
1211
1312 CALIFORNIA LEGISLATURE 20232024 REGULAR SESSION
1413
1514 Assembly Bill
1615
1716 No. 1791
1817
1918 Introduced by Assembly Member WeberJanuary 04, 2024
2019
2120 Introduced by Assembly Member Weber
2221 January 04, 2024
2322
2423 An act to add Chapter 11.1 (commencing with Section 21760) to Division 8 of the Business and Professions Code, relating to social media platforms.
2524
2625 LEGISLATIVE COUNSEL'S DIGEST
2726
2827 ## LEGISLATIVE COUNSEL'S DIGEST
2928
3029 AB 1791, as amended, Weber. Digital content provenance.
3130
32-Existing law requires the Secretary of Government Operations to develop a coordinated plan to, among other things, investigate the feasibility of, and obstacles to, developing standards and technologies for state departments to determine digital content provenance. For the purpose of informing that coordinated plan, existing law requires the secretary to evaluate, among other things, the legal implications associated with the use of digital content forgery technologies, deepfakes, and technologies allowing public verification of digital content provenance.This bill would would, on and after January 1, 2028, require a social media platform, as defined, to redact personal provenance data, as defined, from content uploaded to the social media platform by a user user, except as prescribed, and would prohibit a social media platform from redacting system provenance data, as defined, from content uploaded to the social media platform by a user, except as prescribed.
31+Existing law requires the Secretary of Government Operations to develop a coordinated plan to, among other things, investigate the feasibility of, and obstacles to, developing standards and technologies for state departments to determine digital content provenance. For the purpose of informing that coordinated plan, existing law requires the secretary to evaluate, among other things, the legal implications associated with the use of digital content forgery technologies, deepfakes, and technologies allowing public verification of digital content provenance.This bill would require a social media platform, as defined, to redact personal provenance data, as defined, from content uploaded to the social media platform by a user and would prohibit a social media platform from redacting system provenance data, as defined, from content uploaded to the social media platform by a user, except as prescribed. The bill would make a social media platform that violates those provisions liable in a civil action brought by a user of a social media platform for certain relief, including actual damages or statutory damages of $10,000 per violation, whichever is greater.
3332
3433 Existing law requires the Secretary of Government Operations to develop a coordinated plan to, among other things, investigate the feasibility of, and obstacles to, developing standards and technologies for state departments to determine digital content provenance. For the purpose of informing that coordinated plan, existing law requires the secretary to evaluate, among other things, the legal implications associated with the use of digital content forgery technologies, deepfakes, and technologies allowing public verification of digital content provenance.
3534
36-This bill would would, on and after January 1, 2028, require a social media platform, as defined, to redact personal provenance data, as defined, from content uploaded to the social media platform by a user user, except as prescribed, and would prohibit a social media platform from redacting system provenance data, as defined, from content uploaded to the social media platform by a user, except as prescribed.
35+This bill would require a social media platform, as defined, to redact personal provenance data, as defined, from content uploaded to the social media platform by a user and would prohibit a social media platform from redacting system provenance data, as defined, from content uploaded to the social media platform by a user, except as prescribed. The bill would make a social media platform that violates those provisions liable in a civil action brought by a user of a social media platform for certain relief, including actual damages or statutory damages of $10,000 per violation, whichever is greater.
3736
3837 ## Digest Key
3938
4039 ## Bill Text
4140
42-The people of the State of California do enact as follows:SECTION 1. Chapter 11.1 (commencing with Section 21760) is added to Division 8 of the Business and Professions Code, to read: CHAPTER 11.1. Digital Content Provenance21760. As used in this chapter:(a) Copyright management information has the same meaning as defined in Section 1202 of Title 17 of the United States Code.(b) Dark pattern means a user interface designed or manipulated with the substantial effect of subverting or impairing user autonomy, decisionmaking, or choice.(c) Express consent means a users affirmative authorization, that is not inferred from inaction, to grant permission in response to a clear, meaningful, and prominent notice that meets all of the following criteria:(1) The affirmative authorization is in response to a notice that is not contained within a more general notice, agreement, or set of terms and conditions. (2) The affirmative authorization is in response to a notice conveyed in such a manner that an ordinary consumer would notice and understand it. (3) The affirmative authorization is not obtained through the use of dark patterns.(a)(d) Personal provenance data means provenance data that contains any either of the following:(1) Personal information, as defined by Section 1798.140 of the Civil Code.(2) Unique device, system, or service information that is reasonably capable of being associated with a particular user.(3)Time-of-day information.(b)(e) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification.(c)(f) Social media platform has the same meaning as defined in Section 22589.(d)(g) System provenance data means provenance data that is not reasonably capable of being associated with a particular user and that contains either of the following:(1) Information regarding the type of device, system, or service that was used to generate a piece of digital content.(2) Information that provides proof of content authenticity.21761. (a) A (1) Subject to paragraph (2), a social media platform shall redact personal provenance data from content uploaded to the social media platform by a user.(2) (A) A social media platform may refrain from redacting personal provenance data from content uploaded by a user if either of the following conditions are met:(i) The social media platform obtains the users express consent to forgo redacting personal provenance data in a specific piece of content or batch of content.(ii) The social media platform obtains the users express consent to forgo redacting personal provenance data in all content uploaded by the user.(B) A social media platform shall not redact personal provenance data that is copyright management information from content uploaded to the social media platform by a user.(3) (A) A social media platform that obtains a users express consent to forgo redacting personal provenance data in content shall allow the user to revoke the users express consent at any time through a readily accessible mechanism.(B) A social media platform shall not be required to redact personal provenance data from content previously uploaded by a user in response to the user revoking the users express consent pursuant to this paragraph.(b) (1) Except as provided in subdivision (c), paragraph (2), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.(c)If a(2) A social media platform that is unable to redact personal provenance data required to be redacted by subdivision (a) from content without also redacting system provenance data from the content, a social media platform content shall redact the personal provenance data that is not copyright management information and the system provenance data from the content and shall append a label to the content that meets all of the following criteria:(1)(A) The label prominently discloses any system provenance data that was redacted by the social media platform.(2)(B) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.(3)(C) The label does not disclose any personal provenance data. data that was redacted pursuant to subdivision (a).(d)(c) When content to which a social media platform has appended a label pursuant to paragraph (2) of subdivision (c) (b) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the information contained in the label into the distributed content or add it to the contents metadata.(e)(d) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding information into content, or adding information to metadata pursuant to this section.21762. A violation of this chapter shall constitute an unfair business practice punishable pursuant to Chapter 5 (commencing with Section 17200) of Part 2 of Division 7 of the Business and Professions Code.21763. This chapter shall become operative on January 1, 2028.
41+The people of the State of California do enact as follows:SECTION 1. Chapter 11.1 (commencing with Section 21760) is added to Division 8 of the Business and Professions Code, to read: CHAPTER 11.1. Digital Content Provenance21760. As used in this chapter:(a) Personal provenance data means provenance data that contains any of the following:(1) Personal information, as defined by Section 1798.140 of the Civil Code.(2) Unique device, system, or service information that is reasonably capable of being associated with a particular user.(3) Time-of-day information.(b) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification.(c) Social media platform has the same meaning as defined in Section 22589.(d) System provenance data means provenance data that is not reasonably capable of being associated with a particular user and that contains either of the following:(1) Information regarding the type of device, system, or service that was used to generate a piece of digital content.(2) Information that provides proof of content authenticity.21761. (a) A social media platform shall redact personal provenance data from content uploaded to the social media platform by a user.(b) Except as provided in subdivision (c), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.(c) If a social media platform is unable to redact personal provenance data from content without also redacting system provenance data from the content, a social media platform shall redact the personal provenance data and the system provenance data from the content and shall append a label to the content that meets all of the following criteria:(1) The label prominently discloses any system provenance data that was redacted by the social media platform.(2) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.(3) The label does not disclose any personal provenance data.(d) When content to which a social media platform has appended a label pursuant to subdivision (c) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the information contained in the label into the distributed content or add it to the contents metadata.(e) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding information into content, or adding information to metadata pursuant to this section.21762.A social media platform that violates this chapter shall be liable in a civil action brought by a user of a social media platform for all of the following:(a)Actual damages or statutory damages of not more than ten thousand dollars ($10,000) per violation, whichever is greater.(b)Injunctive relief.(c)Reasonable attorneys fees and costs.21762. A violation of this chapter shall constitute an unfair business practice punishable pursuant to Chapter 5 (commencing with Section 17200) of Part 2 of Division 7 of the Business and Professions Code.
4342
4443 The people of the State of California do enact as follows:
4544
4645 ## The people of the State of California do enact as follows:
4746
48-SECTION 1. Chapter 11.1 (commencing with Section 21760) is added to Division 8 of the Business and Professions Code, to read: CHAPTER 11.1. Digital Content Provenance21760. As used in this chapter:(a) Copyright management information has the same meaning as defined in Section 1202 of Title 17 of the United States Code.(b) Dark pattern means a user interface designed or manipulated with the substantial effect of subverting or impairing user autonomy, decisionmaking, or choice.(c) Express consent means a users affirmative authorization, that is not inferred from inaction, to grant permission in response to a clear, meaningful, and prominent notice that meets all of the following criteria:(1) The affirmative authorization is in response to a notice that is not contained within a more general notice, agreement, or set of terms and conditions. (2) The affirmative authorization is in response to a notice conveyed in such a manner that an ordinary consumer would notice and understand it. (3) The affirmative authorization is not obtained through the use of dark patterns.(a)(d) Personal provenance data means provenance data that contains any either of the following:(1) Personal information, as defined by Section 1798.140 of the Civil Code.(2) Unique device, system, or service information that is reasonably capable of being associated with a particular user.(3)Time-of-day information.(b)(e) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification.(c)(f) Social media platform has the same meaning as defined in Section 22589.(d)(g) System provenance data means provenance data that is not reasonably capable of being associated with a particular user and that contains either of the following:(1) Information regarding the type of device, system, or service that was used to generate a piece of digital content.(2) Information that provides proof of content authenticity.21761. (a) A (1) Subject to paragraph (2), a social media platform shall redact personal provenance data from content uploaded to the social media platform by a user.(2) (A) A social media platform may refrain from redacting personal provenance data from content uploaded by a user if either of the following conditions are met:(i) The social media platform obtains the users express consent to forgo redacting personal provenance data in a specific piece of content or batch of content.(ii) The social media platform obtains the users express consent to forgo redacting personal provenance data in all content uploaded by the user.(B) A social media platform shall not redact personal provenance data that is copyright management information from content uploaded to the social media platform by a user.(3) (A) A social media platform that obtains a users express consent to forgo redacting personal provenance data in content shall allow the user to revoke the users express consent at any time through a readily accessible mechanism.(B) A social media platform shall not be required to redact personal provenance data from content previously uploaded by a user in response to the user revoking the users express consent pursuant to this paragraph.(b) (1) Except as provided in subdivision (c), paragraph (2), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.(c)If a(2) A social media platform that is unable to redact personal provenance data required to be redacted by subdivision (a) from content without also redacting system provenance data from the content, a social media platform content shall redact the personal provenance data that is not copyright management information and the system provenance data from the content and shall append a label to the content that meets all of the following criteria:(1)(A) The label prominently discloses any system provenance data that was redacted by the social media platform.(2)(B) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.(3)(C) The label does not disclose any personal provenance data. data that was redacted pursuant to subdivision (a).(d)(c) When content to which a social media platform has appended a label pursuant to paragraph (2) of subdivision (c) (b) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the information contained in the label into the distributed content or add it to the contents metadata.(e)(d) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding information into content, or adding information to metadata pursuant to this section.21762. A violation of this chapter shall constitute an unfair business practice punishable pursuant to Chapter 5 (commencing with Section 17200) of Part 2 of Division 7 of the Business and Professions Code.21763. This chapter shall become operative on January 1, 2028.
47+SECTION 1. Chapter 11.1 (commencing with Section 21760) is added to Division 8 of the Business and Professions Code, to read: CHAPTER 11.1. Digital Content Provenance21760. As used in this chapter:(a) Personal provenance data means provenance data that contains any of the following:(1) Personal information, as defined by Section 1798.140 of the Civil Code.(2) Unique device, system, or service information that is reasonably capable of being associated with a particular user.(3) Time-of-day information.(b) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification.(c) Social media platform has the same meaning as defined in Section 22589.(d) System provenance data means provenance data that is not reasonably capable of being associated with a particular user and that contains either of the following:(1) Information regarding the type of device, system, or service that was used to generate a piece of digital content.(2) Information that provides proof of content authenticity.21761. (a) A social media platform shall redact personal provenance data from content uploaded to the social media platform by a user.(b) Except as provided in subdivision (c), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.(c) If a social media platform is unable to redact personal provenance data from content without also redacting system provenance data from the content, a social media platform shall redact the personal provenance data and the system provenance data from the content and shall append a label to the content that meets all of the following criteria:(1) The label prominently discloses any system provenance data that was redacted by the social media platform.(2) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.(3) The label does not disclose any personal provenance data.(d) When content to which a social media platform has appended a label pursuant to subdivision (c) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the information contained in the label into the distributed content or add it to the contents metadata.(e) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding information into content, or adding information to metadata pursuant to this section.21762.A social media platform that violates this chapter shall be liable in a civil action brought by a user of a social media platform for all of the following:(a)Actual damages or statutory damages of not more than ten thousand dollars ($10,000) per violation, whichever is greater.(b)Injunctive relief.(c)Reasonable attorneys fees and costs.21762. A violation of this chapter shall constitute an unfair business practice punishable pursuant to Chapter 5 (commencing with Section 17200) of Part 2 of Division 7 of the Business and Professions Code.
4948
5049 SECTION 1. Chapter 11.1 (commencing with Section 21760) is added to Division 8 of the Business and Professions Code, to read:
5150
5251 ### SECTION 1.
5352
54- CHAPTER 11.1. Digital Content Provenance21760. As used in this chapter:(a) Copyright management information has the same meaning as defined in Section 1202 of Title 17 of the United States Code.(b) Dark pattern means a user interface designed or manipulated with the substantial effect of subverting or impairing user autonomy, decisionmaking, or choice.(c) Express consent means a users affirmative authorization, that is not inferred from inaction, to grant permission in response to a clear, meaningful, and prominent notice that meets all of the following criteria:(1) The affirmative authorization is in response to a notice that is not contained within a more general notice, agreement, or set of terms and conditions. (2) The affirmative authorization is in response to a notice conveyed in such a manner that an ordinary consumer would notice and understand it. (3) The affirmative authorization is not obtained through the use of dark patterns.(a)(d) Personal provenance data means provenance data that contains any either of the following:(1) Personal information, as defined by Section 1798.140 of the Civil Code.(2) Unique device, system, or service information that is reasonably capable of being associated with a particular user.(3)Time-of-day information.(b)(e) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification.(c)(f) Social media platform has the same meaning as defined in Section 22589.(d)(g) System provenance data means provenance data that is not reasonably capable of being associated with a particular user and that contains either of the following:(1) Information regarding the type of device, system, or service that was used to generate a piece of digital content.(2) Information that provides proof of content authenticity.21761. (a) A (1) Subject to paragraph (2), a social media platform shall redact personal provenance data from content uploaded to the social media platform by a user.(2) (A) A social media platform may refrain from redacting personal provenance data from content uploaded by a user if either of the following conditions are met:(i) The social media platform obtains the users express consent to forgo redacting personal provenance data in a specific piece of content or batch of content.(ii) The social media platform obtains the users express consent to forgo redacting personal provenance data in all content uploaded by the user.(B) A social media platform shall not redact personal provenance data that is copyright management information from content uploaded to the social media platform by a user.(3) (A) A social media platform that obtains a users express consent to forgo redacting personal provenance data in content shall allow the user to revoke the users express consent at any time through a readily accessible mechanism.(B) A social media platform shall not be required to redact personal provenance data from content previously uploaded by a user in response to the user revoking the users express consent pursuant to this paragraph.(b) (1) Except as provided in subdivision (c), paragraph (2), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.(c)If a(2) A social media platform that is unable to redact personal provenance data required to be redacted by subdivision (a) from content without also redacting system provenance data from the content, a social media platform content shall redact the personal provenance data that is not copyright management information and the system provenance data from the content and shall append a label to the content that meets all of the following criteria:(1)(A) The label prominently discloses any system provenance data that was redacted by the social media platform.(2)(B) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.(3)(C) The label does not disclose any personal provenance data. data that was redacted pursuant to subdivision (a).(d)(c) When content to which a social media platform has appended a label pursuant to paragraph (2) of subdivision (c) (b) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the information contained in the label into the distributed content or add it to the contents metadata.(e)(d) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding information into content, or adding information to metadata pursuant to this section.21762. A violation of this chapter shall constitute an unfair business practice punishable pursuant to Chapter 5 (commencing with Section 17200) of Part 2 of Division 7 of the Business and Professions Code.21763. This chapter shall become operative on January 1, 2028.
53+ CHAPTER 11.1. Digital Content Provenance21760. As used in this chapter:(a) Personal provenance data means provenance data that contains any of the following:(1) Personal information, as defined by Section 1798.140 of the Civil Code.(2) Unique device, system, or service information that is reasonably capable of being associated with a particular user.(3) Time-of-day information.(b) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification.(c) Social media platform has the same meaning as defined in Section 22589.(d) System provenance data means provenance data that is not reasonably capable of being associated with a particular user and that contains either of the following:(1) Information regarding the type of device, system, or service that was used to generate a piece of digital content.(2) Information that provides proof of content authenticity.21761. (a) A social media platform shall redact personal provenance data from content uploaded to the social media platform by a user.(b) Except as provided in subdivision (c), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.(c) If a social media platform is unable to redact personal provenance data from content without also redacting system provenance data from the content, a social media platform shall redact the personal provenance data and the system provenance data from the content and shall append a label to the content that meets all of the following criteria:(1) The label prominently discloses any system provenance data that was redacted by the social media platform.(2) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.(3) The label does not disclose any personal provenance data.(d) When content to which a social media platform has appended a label pursuant to subdivision (c) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the information contained in the label into the distributed content or add it to the contents metadata.(e) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding information into content, or adding information to metadata pursuant to this section.21762.A social media platform that violates this chapter shall be liable in a civil action brought by a user of a social media platform for all of the following:(a)Actual damages or statutory damages of not more than ten thousand dollars ($10,000) per violation, whichever is greater.(b)Injunctive relief.(c)Reasonable attorneys fees and costs.21762. A violation of this chapter shall constitute an unfair business practice punishable pursuant to Chapter 5 (commencing with Section 17200) of Part 2 of Division 7 of the Business and Professions Code.
5554
56- CHAPTER 11.1. Digital Content Provenance21760. As used in this chapter:(a) Copyright management information has the same meaning as defined in Section 1202 of Title 17 of the United States Code.(b) Dark pattern means a user interface designed or manipulated with the substantial effect of subverting or impairing user autonomy, decisionmaking, or choice.(c) Express consent means a users affirmative authorization, that is not inferred from inaction, to grant permission in response to a clear, meaningful, and prominent notice that meets all of the following criteria:(1) The affirmative authorization is in response to a notice that is not contained within a more general notice, agreement, or set of terms and conditions. (2) The affirmative authorization is in response to a notice conveyed in such a manner that an ordinary consumer would notice and understand it. (3) The affirmative authorization is not obtained through the use of dark patterns.(a)(d) Personal provenance data means provenance data that contains any either of the following:(1) Personal information, as defined by Section 1798.140 of the Civil Code.(2) Unique device, system, or service information that is reasonably capable of being associated with a particular user.(3)Time-of-day information.(b)(e) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification.(c)(f) Social media platform has the same meaning as defined in Section 22589.(d)(g) System provenance data means provenance data that is not reasonably capable of being associated with a particular user and that contains either of the following:(1) Information regarding the type of device, system, or service that was used to generate a piece of digital content.(2) Information that provides proof of content authenticity.21761. (a) A (1) Subject to paragraph (2), a social media platform shall redact personal provenance data from content uploaded to the social media platform by a user.(2) (A) A social media platform may refrain from redacting personal provenance data from content uploaded by a user if either of the following conditions are met:(i) The social media platform obtains the users express consent to forgo redacting personal provenance data in a specific piece of content or batch of content.(ii) The social media platform obtains the users express consent to forgo redacting personal provenance data in all content uploaded by the user.(B) A social media platform shall not redact personal provenance data that is copyright management information from content uploaded to the social media platform by a user.(3) (A) A social media platform that obtains a users express consent to forgo redacting personal provenance data in content shall allow the user to revoke the users express consent at any time through a readily accessible mechanism.(B) A social media platform shall not be required to redact personal provenance data from content previously uploaded by a user in response to the user revoking the users express consent pursuant to this paragraph.(b) (1) Except as provided in subdivision (c), paragraph (2), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.(c)If a(2) A social media platform that is unable to redact personal provenance data required to be redacted by subdivision (a) from content without also redacting system provenance data from the content, a social media platform content shall redact the personal provenance data that is not copyright management information and the system provenance data from the content and shall append a label to the content that meets all of the following criteria:(1)(A) The label prominently discloses any system provenance data that was redacted by the social media platform.(2)(B) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.(3)(C) The label does not disclose any personal provenance data. data that was redacted pursuant to subdivision (a).(d)(c) When content to which a social media platform has appended a label pursuant to paragraph (2) of subdivision (c) (b) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the information contained in the label into the distributed content or add it to the contents metadata.(e)(d) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding information into content, or adding information to metadata pursuant to this section.21762. A violation of this chapter shall constitute an unfair business practice punishable pursuant to Chapter 5 (commencing with Section 17200) of Part 2 of Division 7 of the Business and Professions Code.21763. This chapter shall become operative on January 1, 2028.
55+ CHAPTER 11.1. Digital Content Provenance21760. As used in this chapter:(a) Personal provenance data means provenance data that contains any of the following:(1) Personal information, as defined by Section 1798.140 of the Civil Code.(2) Unique device, system, or service information that is reasonably capable of being associated with a particular user.(3) Time-of-day information.(b) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification.(c) Social media platform has the same meaning as defined in Section 22589.(d) System provenance data means provenance data that is not reasonably capable of being associated with a particular user and that contains either of the following:(1) Information regarding the type of device, system, or service that was used to generate a piece of digital content.(2) Information that provides proof of content authenticity.21761. (a) A social media platform shall redact personal provenance data from content uploaded to the social media platform by a user.(b) Except as provided in subdivision (c), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.(c) If a social media platform is unable to redact personal provenance data from content without also redacting system provenance data from the content, a social media platform shall redact the personal provenance data and the system provenance data from the content and shall append a label to the content that meets all of the following criteria:(1) The label prominently discloses any system provenance data that was redacted by the social media platform.(2) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.(3) The label does not disclose any personal provenance data.(d) When content to which a social media platform has appended a label pursuant to subdivision (c) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the information contained in the label into the distributed content or add it to the contents metadata.(e) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding information into content, or adding information to metadata pursuant to this section.21762.A social media platform that violates this chapter shall be liable in a civil action brought by a user of a social media platform for all of the following:(a)Actual damages or statutory damages of not more than ten thousand dollars ($10,000) per violation, whichever is greater.(b)Injunctive relief.(c)Reasonable attorneys fees and costs.21762. A violation of this chapter shall constitute an unfair business practice punishable pursuant to Chapter 5 (commencing with Section 17200) of Part 2 of Division 7 of the Business and Professions Code.
5756
5857 CHAPTER 11.1. Digital Content Provenance
5958
6059 CHAPTER 11.1. Digital Content Provenance
6160
62-21760. As used in this chapter:(a) Copyright management information has the same meaning as defined in Section 1202 of Title 17 of the United States Code.(b) Dark pattern means a user interface designed or manipulated with the substantial effect of subverting or impairing user autonomy, decisionmaking, or choice.(c) Express consent means a users affirmative authorization, that is not inferred from inaction, to grant permission in response to a clear, meaningful, and prominent notice that meets all of the following criteria:(1) The affirmative authorization is in response to a notice that is not contained within a more general notice, agreement, or set of terms and conditions. (2) The affirmative authorization is in response to a notice conveyed in such a manner that an ordinary consumer would notice and understand it. (3) The affirmative authorization is not obtained through the use of dark patterns.(a)(d) Personal provenance data means provenance data that contains any either of the following:(1) Personal information, as defined by Section 1798.140 of the Civil Code.(2) Unique device, system, or service information that is reasonably capable of being associated with a particular user.(3)Time-of-day information.(b)(e) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification.(c)(f) Social media platform has the same meaning as defined in Section 22589.(d)(g) System provenance data means provenance data that is not reasonably capable of being associated with a particular user and that contains either of the following:(1) Information regarding the type of device, system, or service that was used to generate a piece of digital content.(2) Information that provides proof of content authenticity.
61+21760. As used in this chapter:(a) Personal provenance data means provenance data that contains any of the following:(1) Personal information, as defined by Section 1798.140 of the Civil Code.(2) Unique device, system, or service information that is reasonably capable of being associated with a particular user.(3) Time-of-day information.(b) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification.(c) Social media platform has the same meaning as defined in Section 22589.(d) System provenance data means provenance data that is not reasonably capable of being associated with a particular user and that contains either of the following:(1) Information regarding the type of device, system, or service that was used to generate a piece of digital content.(2) Information that provides proof of content authenticity.
6362
6463
6564
6665 21760. As used in this chapter:
6766
68-(a) Copyright management information has the same meaning as defined in Section 1202 of Title 17 of the United States Code.
69-
70-(b) Dark pattern means a user interface designed or manipulated with the substantial effect of subverting or impairing user autonomy, decisionmaking, or choice.
71-
72-(c) Express consent means a users affirmative authorization, that is not inferred from inaction, to grant permission in response to a clear, meaningful, and prominent notice that meets all of the following criteria:
73-
74-(1) The affirmative authorization is in response to a notice that is not contained within a more general notice, agreement, or set of terms and conditions.
75-
76- (2) The affirmative authorization is in response to a notice conveyed in such a manner that an ordinary consumer would notice and understand it.
77-
78- (3) The affirmative authorization is not obtained through the use of dark patterns.
79-
80-(a)
81-
82-
83-
84-(d) Personal provenance data means provenance data that contains any either of the following:
67+(a) Personal provenance data means provenance data that contains any of the following:
8568
8669 (1) Personal information, as defined by Section 1798.140 of the Civil Code.
8770
8871 (2) Unique device, system, or service information that is reasonably capable of being associated with a particular user.
8972
9073 (3) Time-of-day information.
9174
75+(b) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification.
9276
77+(c) Social media platform has the same meaning as defined in Section 22589.
9378
94-(b)
95-
96-
97-
98-(e) Provenance data means data that is embedded into digital content, or that is included in the digital contents metadata, for the purpose of verifying the digital contents authenticity, origin, or history of modification.
99-
100-(c)
101-
102-
103-
104-(f) Social media platform has the same meaning as defined in Section 22589.
105-
106-(d)
107-
108-
109-
110-(g) System provenance data means provenance data that is not reasonably capable of being associated with a particular user and that contains either of the following:
79+(d) System provenance data means provenance data that is not reasonably capable of being associated with a particular user and that contains either of the following:
11180
11281 (1) Information regarding the type of device, system, or service that was used to generate a piece of digital content.
11382
11483 (2) Information that provides proof of content authenticity.
11584
116-21761. (a) A (1) Subject to paragraph (2), a social media platform shall redact personal provenance data from content uploaded to the social media platform by a user.(2) (A) A social media platform may refrain from redacting personal provenance data from content uploaded by a user if either of the following conditions are met:(i) The social media platform obtains the users express consent to forgo redacting personal provenance data in a specific piece of content or batch of content.(ii) The social media platform obtains the users express consent to forgo redacting personal provenance data in all content uploaded by the user.(B) A social media platform shall not redact personal provenance data that is copyright management information from content uploaded to the social media platform by a user.(3) (A) A social media platform that obtains a users express consent to forgo redacting personal provenance data in content shall allow the user to revoke the users express consent at any time through a readily accessible mechanism.(B) A social media platform shall not be required to redact personal provenance data from content previously uploaded by a user in response to the user revoking the users express consent pursuant to this paragraph.(b) (1) Except as provided in subdivision (c), paragraph (2), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.(c)If a(2) A social media platform that is unable to redact personal provenance data required to be redacted by subdivision (a) from content without also redacting system provenance data from the content, a social media platform content shall redact the personal provenance data that is not copyright management information and the system provenance data from the content and shall append a label to the content that meets all of the following criteria:(1)(A) The label prominently discloses any system provenance data that was redacted by the social media platform.(2)(B) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.(3)(C) The label does not disclose any personal provenance data. data that was redacted pursuant to subdivision (a).(d)(c) When content to which a social media platform has appended a label pursuant to paragraph (2) of subdivision (c) (b) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the information contained in the label into the distributed content or add it to the contents metadata.(e)(d) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding information into content, or adding information to metadata pursuant to this section.
85+21761. (a) A social media platform shall redact personal provenance data from content uploaded to the social media platform by a user.(b) Except as provided in subdivision (c), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.(c) If a social media platform is unable to redact personal provenance data from content without also redacting system provenance data from the content, a social media platform shall redact the personal provenance data and the system provenance data from the content and shall append a label to the content that meets all of the following criteria:(1) The label prominently discloses any system provenance data that was redacted by the social media platform.(2) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.(3) The label does not disclose any personal provenance data.(d) When content to which a social media platform has appended a label pursuant to subdivision (c) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the information contained in the label into the distributed content or add it to the contents metadata.(e) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding information into content, or adding information to metadata pursuant to this section.
11786
11887
11988
120-21761. (a) A (1) Subject to paragraph (2), a social media platform shall redact personal provenance data from content uploaded to the social media platform by a user.
89+21761. (a) A social media platform shall redact personal provenance data from content uploaded to the social media platform by a user.
12190
122-(2) (A) A social media platform may refrain from redacting personal provenance data from content uploaded by a user if either of the following conditions are met:
91+(b) Except as provided in subdivision (c), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.
12392
124-(i) The social media platform obtains the users express consent to forgo redacting personal provenance data in a specific piece of content or batch of content.
93+(c) If a social media platform is unable to redact personal provenance data from content without also redacting system provenance data from the content, a social media platform shall redact the personal provenance data and the system provenance data from the content and shall append a label to the content that meets all of the following criteria:
12594
126-(ii) The social media platform obtains the users express consent to forgo redacting personal provenance data in all content uploaded by the user.
95+(1) The label prominently discloses any system provenance data that was redacted by the social media platform.
12796
128-(B) A social media platform shall not redact personal provenance data that is copyright management information from content uploaded to the social media platform by a user.
97+(2) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.
12998
130-(3) (A) A social media platform that obtains a users express consent to forgo redacting personal provenance data in content shall allow the user to revoke the users express consent at any time through a readily accessible mechanism.
99+(3) The label does not disclose any personal provenance data.
131100
132-(B) A social media platform shall not be required to redact personal provenance data from content previously uploaded by a user in response to the user revoking the users express consent pursuant to this paragraph.
101+(d) When content to which a social media platform has appended a label pursuant to subdivision (c) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the information contained in the label into the distributed content or add it to the contents metadata.
133102
134-(b) (1) Except as provided in subdivision (c), paragraph (2), a social media platform shall not redact system provenance data from content uploaded to the social media platform by a user.
135-
136-(c)If a
103+(e) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding information into content, or adding information to metadata pursuant to this section.
137104
138105
139106
140-(2) A social media platform that is unable to redact personal provenance data required to be redacted by subdivision (a) from content without also redacting system provenance data from the content, a social media platform content shall redact the personal provenance data that is not copyright management information and the system provenance data from the content and shall append a label to the content that meets all of the following criteria:
141-
142-(1)
107+A social media platform that violates this chapter shall be liable in a civil action brought by a user of a social media platform for all of the following:
143108
144109
145110
146-(A) The label prominently discloses any system provenance data that was redacted by the social media platform.
147-
148-(2)
111+(a)Actual damages or statutory damages of not more than ten thousand dollars ($10,000) per violation, whichever is greater.
149112
150113
151114
152-(B) The label remains appended to the content even if the content is shared, reposted, or otherwise replicated within the social media platform.
153-
154-(3)
115+(b)Injunctive relief.
155116
156117
157118
158-(C) The label does not disclose any personal provenance data. data that was redacted pursuant to subdivision (a).
159-
160-(d)
119+(c)Reasonable attorneys fees and costs.
161120
162121
163-
164-(c) When content to which a social media platform has appended a label pursuant to paragraph (2) of subdivision (c) (b) is downloaded, shared to an external internet website, or otherwise distributed in a manner that does not permit the social media platform to control how the content is displayed, the social media platform shall embed the information contained in the label into the distributed content or add it to the contents metadata.
165-
166-(e)
167-
168-
169-
170-(d) A social media platform shall abide by relevant industry standards to the greatest extent possible when redacting provenance data, labeling content, embedding information into content, or adding information to metadata pursuant to this section.
171122
172123 21762. A violation of this chapter shall constitute an unfair business practice punishable pursuant to Chapter 5 (commencing with Section 17200) of Part 2 of Division 7 of the Business and Professions Code.
173124
174125
175126
176127 21762. A violation of this chapter shall constitute an unfair business practice punishable pursuant to Chapter 5 (commencing with Section 17200) of Part 2 of Division 7 of the Business and Professions Code.
177-
178-21763. This chapter shall become operative on January 1, 2028.
179-
180-
181-
182-21763. This chapter shall become operative on January 1, 2028.