1 of 1 HOUSE DOCKET, NO. 3038 FILED ON: 1/16/2025 HOUSE . . . . . . . . . . . . . . . No. 102 The Commonwealth of Massachusetts _________________ PRESENTED BY: Michael J. Soter _________________ To the Honorable Senate and House of Representatives of the Commonwealth of Massachusetts in General Court assembled: The undersigned legislators and/or citizens respectfully petition for the adoption of the accompanying bill: An Act relative to protecting the residents of the Commonwealth. _______________ PETITION OF: NAME:DISTRICT/ADDRESS :DATE ADDED:Michael J. Soter8th Worcester1/16/2025Steven George Xiarhos5th Barnstable2/4/2025Hannah Kane11th Worcester2/4/2025Carmine Lawrence Gentile13th Middlesex2/18/2025 1 of 5 HOUSE DOCKET, NO. 3038 FILED ON: 1/16/2025 HOUSE . . . . . . . . . . . . . . . No. 102 By Representative Soter of Bellingham, a petition (accompanied by bill, House, No. 102) of Michael J. Soter and others for legislation to protect residents of the Commonwealth from the threat posed by certain foreign adversaries using current or potential future social media companies. Advanced Information Technology, the Internet and Cybersecurity. [SIMILAR MATTER FILED IN PREVIOUS SESSION SEE HOUSE, NO. 82 OF 2023-2024.] The Commonwealth of Massachusetts _______________ In the One Hundred and Ninety-Fourth General Court (2025-2026) _______________ An Act relative to protecting the residents of the Commonwealth. Whereas, The deferred operation of this act would tend to defeat its purpose, which is to protect residents of the Commonwealth from the threat posed by certain foreign adversaries using current or potential future social media companies that those foreign adversaries control to surveil residents of the Commonwealth , therefore it is hereby declared to be an emergency law, necessary for the immediate preservation of the public safety. Be it enacted by the Senate and House of Representatives in General Court assembled, and by the authority of the same, as follows: 1 Chapter 7D of the Massachusetts General Laws is hereby amended to add the following 2new section: 3 Section 12: 4 (a). Definitions: 2 of 5 5 (1) “Social Media Company” - A social media company means any entity that operates, 6directly or indirectly, including through a parent company, subsidiaries, or affiliates, a website, 7desktop application, or mobile application that: 8 (i) permits an individual or entity to create an account or profile for the purpose of 9generating, sharing, and viewing user-generated content through such account or profile; 10 (ii) sells digital advertising space; 11 (iii) has more than 1,000,000 monthly active users for a majority of months during the 12preceding 12 months; 13 (iv) enables one or more users to generate content that can be viewed by other users of 14the website, desktop application, or mobile application; and 15 (v) enables users to view content generated by other users of the website, desktop 16application, or mobile application. 17 This definition does not include an entity if the entity does not operate a website, desktop 18application, or mobile application except for a website, desktop application, or mobile 19application the primary purpose of which is to allow users to post product reviews, business 20reviews, or travel information and reviews, or to provide emergency alert services. 21 A social media company described in this subsection is a social media company that 22meets one or more of the following: 23 (i) The company is domiciled in, headquartered in, has its principal place business in, or 24is organized under the laws of a country of concern. 3 of 5 25 (ii) A country of concern, entity of concern, or some combination thereof, directly or 26indirectly owns, controls with the ability to decide important matters, or holds with power to 27vote, ten percent or more of the outstanding voting stock or shares of the company. 28 (iii) The company employs software or algorithms controlled or whose export is 29restricted by a country of concern or entity of concern. 30 (iv) The company is subject to substantial influence, directly or indirectly, from a country 31of concern or entity of concern owing to which — 32 the company shares or could be compelled to share data on United States citizens with a 33country of concern or entity of concern; or 34 the content moderation practices of the company are subject to substantial influence from 35a country of concern or entity of concern. 36 DEEMED COMPANIES.—The following companies shall be deemed to be social media 37companies described in this subsection as of the date of the enactment of this Act: 38 Bytedance, Ltd, 39 TikTok, 40 WeChat, 41 A subsidiary of or a successor company to a company listed in subparagraph (a),(b), or 42(c). 43 A company owned or controlled directly or indirectly by a company listed in 44subparagraph (a), (b) or (c). 4 of 5 45 (2) “Country of Concern” – A country of concern include the People’s Republic of China 46(including Hong Kong and Macau), Russia, Iran, North Korea, Cuba, and Venezuela. 47 (3) “Entity of Concern” - means — (i) a governmental body at any level in a country of 48concern; (ii) the armed forces of a country of concern; (iii) the leading political party of a 49country of concern;(iv) an individual who is a national of a country of concern and is domiciled 50and living in a country of concern, and who is subject to substantial influence, directly or 51indirectly, from a country of concern; or (v) a private business or a state-owned enterprise 52domiciled in a country of concern or owned or controlled by a private business or state-owned 53enterprise domiciled in a country of concern. 54 (4) “Employee” – means any elected or appointed, officers or employees of any agency, 55department, division, bureau, or any political subdivision of the commonwealth, county, or 56municipality, whether serving full or part-time, temporary or permanent, compensated or 57uncompensated, and officers or soldiers of the military forces of the commonwealth. 58 (5) “Electronic devices” – means any government issued devices, including but not 59limited to commonwealth, county, and municipally issued cell phones, laptops, or other devices 60capable of connecting to the internet except for public safety purposes. 61 (b.) No employee of the commonwealth, county, or municpality shall use or download 62any applications or software from any social media company as described in subsection a. of this 63section on to Commonwealth owned electronic devices. 64 (c.) The Secretary of the Executive Office of Technology Services and Security will: 5 of 5 65 develop and implement a plan to remove any referenced hardware products from the 66commonwealth, county, and municipal networks; 67 remove any referenced software products from the commonwealth, county, and 68municipal network; 69 Implement measures to prevent the installation of referenced hardware and software 70products on commonwealth owned or managed technology assets; 71 Implement network-based restrictions to prevent the use of, or access to prohibited 72services; 73 Include risks associated with these technologies into the Commonwealth’s Cybersecurity 74Awareness Training Program through the Office of the Comptroller. 75 The secretary will continually monitor and update the list in subsection a. of this act. 76 (d.) (1) The secretary will additionally file a report with the Legislature relative to the 77risks of the social media companies described in subsection (a.) no later than 180 days following 78the passage of this act. 79 (2) Annually, no later than December 31, the secretary shall reassess and report on the 80risks of social media companies described in subsection (a) and any policy recommendations to 81the governor, and the clerks of the house of representatives and the senate. 82 (e.) This act will take effect immediately following its passage.