North Carolina 2025 2025-2026 Regular Session

North Carolina Senate Bill S722 Amended / Bill

Filed 03/26/2025

                    GENERAL ASSEMBLY OF NORTH CAROLINA 
SESSION 2025 
S 	1 
SENATE BILL 722 
 
 
Short Title: Children's Online Safety Act/Funds. 	(Public) 
Sponsors: Senators Garrett, Batch, and Everitt (Primary Sponsors). 
Referred to: Rules and Operations of the Senate 
March 26, 2025 
*S722 -v-1* 
A BILL TO BE ENTITLED 1 
AN ACT ENACTING SAFE GUARDS TO PROTECT CH ILDREN ONLINE, 2 
ESTABLISHING THE ONL INE SAFETY DIVISION AT THE DEPARTMENT OF 3 
JUSTICE AND THE CYBE RBULLYING UNIT AT TH E STATE BUREAU OF 4 
INVESTIGATION, CREATING THE ONLINE CHILD SAFETY COMMISSION, AND 5 
APPROPRIATING FUNDS FOR THOSE PURPOSES. 6 
The General Assembly of North Carolina enacts: 7 
SECTION 1.(a) Chapter 114 of the General Statutes is amended by adding a new 8 
Article to read: 9 
"Article 11. 10 
"Online Safety Division. 11 
"§ 114-75.  Division established; duties. 12 
(a) There is hereby established in the Office of the Attorney General of North Carolina, 13 
the  Online Safety Division (Division). The attorneys assigned to this Division shall function as 14 
an independent regulatory office within the Department of Justice focusing on online safety, with 15 
an emphasis on the protection of children online. The Division shall have the following duties: 16 
(1) Investigation of complaints made under the Chapter 114B of the General 17 
Statute (Children's Online Safety Act). 18 
(2) Educating of law enforcement agencies and the general public about the online 19 
safety of all North Carolinians, with an emphasis targeting harmful activities 20 
and dark patterns. 21 
(3) Issuance of online safety standards and guidelines, and review of relevant 22 
industry codes pertaining to internet safety, age-appropriate design, and 23 
compliance with the Children's Online Safety Act.  24 
(4) Facilitating advisory panels on internet safety, including child development 25 
experts, technology specialists, parent representatives, community 26 
stakeholders, and industry representatives." 27 
SECTION 1.(b) Effective July 1, 2025, there is appropriated from the General Fund 28 
to the Department of Justice the sum of five million dollars ($5,000,000) for the 2025-2026 fiscal 29 
year and the sum of four million five hundred thousand dollars ($4,500,000) for the 2026-2027 30 
fiscal year to establish the Child Safety Division as enacted by this section. 31 
SECTION 2.(a) The General Statutes are amended to add new Chapter to read: 32 
"Chapter 114B. 33 
"Children's Online Safety Act. 34 
"§ 114B-1.  Definitions. 35 
The following definitions apply in this Article:  36  General Assembly Of North Carolina 	Session 2025 
Page 2  Senate Bill 722-First Edition 
(1) Age-appropriate design. – Design focused on developmental needs of 1 
children. 2 
(2) Child or minor. – An individual under eighteen (18) years of age 3 
(4) Covered platform. – An internet platform providing online services having 4 
more than five million (5,000,000) users in North Carolina and revenues 5 
exceeding twenty-five million dollars ($25,000,000) annually. 6 
(5) Dark patterns. – Manipulative design elements in online environments. 7 
(6) Division. – The Online Safety Division of the North Carolina Department of 8 
Justice. 9 
(7) Harmful content. – Content that includes cyberbullying, self-harm promotion, 10 
sexually explicit material, violent content, discrimination, and other physical 11 
or psychological harms. 12 
(8) Online service. – Social media, gaming platforms, messaging services, 13 
content-sharing platforms, and other user-interactive services provided by a 14 
covered platform. 15 
"§ 114B-2.  Duty of care established; mandated protections for children; requirements for 16 
covered platforms.  17 
(a) It is the public policy of this State that its children are owed a duty of care with regard 18 
to their online activities in order to limit foreseeable harm and their exposure to dark patterns and 19 
harmful content on covered platforms. Further, the General Assembly endorses age-appropriate 20 
design and strong parental controls as central to protecting children in online service 21 
environments. 22 
(b) Covered platforms shall require parental notification for accounts created by children 23 
and must offer robust, easy-to-use parental supervision tools such as filtering options, contact 24 
management, time limits and scheduling, purchase controls, and activity reporting.  25 
(c) It is unlawful for covered platforms to use dark patterns or deploy features known to 26 
be addictive or manipulative. 27 
(d) Covered platforms shall establish clear definitions of what constitutes cyberbullying 28 
and include provisions for direct reporting to the Division,  as well as provide intervention and 29 
support services for affected children, including mediation options where appropriate. 30 
(e) Each covered platform shall submit to the Online Safety Division an annual Child 31 
Impact Assessment for new an existing services on the platform. The assessment shall include 32 
documentation of potential risks to children and assessment of addiction and compulsive usage 33 
risks. The documentation supporting each annual assessment shall be retained for at least a 34 
three-year period 35 
(f) Covered platforms shall utilize the highest privacy settings by default for all users 36 
reasonably likely to be children and shall establish strict data minimization principles to include 37 
the following: 38 
(1) Limiting collection of personal data to what is necessary for the service. 39 
(2) Requiring deletion when no longer needed. 40 
(3) Prohibiting data use for commercial purposes unless strictly necessary. 41 
(4)  Including "Right to be Forgotten" provisions empowering minors to request 42 
deletion of their data and content. 43 
(5) Prohibiting profiling and behavioral advertising targeting children. 44 
(6) Requiring child-friendly privacy information and controls. 45 
(7) Mandating transparency about personal data use. 46 
(8) Establishing clear restrictions on geolocation data collection and use. 47 
(9) Data broker restrictions for children's information. 48 
"§ 114B-3.  Enforcement; construction; severability. 49 
(a) The Attorney General shall bring civil actions to enforce this Article. In any suit 50 
instituted by the Attorney General, in which the defendant is found to have violated this Chapter 51  General Assembly Of North Carolina 	Session 2025 
Senate Bill 722-First Edition  	Page 3 
and the acts or practices which constituted the violation were, when committed, knowingly 1 
violative of a statute, the court may, in its discretion, impose a civil penalty against the defendant 2 
of up to five hundred thousand dollars ($500,000) for each violation. Civil penalties may be 3 
imposed in a new action or by motion in an earlier action, whether or not such earlier action has 4 
been concluded. In determining the amount of the civil penalty, the court shall consider all 5 
relevant circumstances, including, but not limited to, the extent of the harm caused by the conduct 6 
constituting a violation, the nature and persistence of such conduct, the length of time over which 7 
the conduct occurred, the assets, liabilities, and net worth of the defendant, and any corrective 8 
action taken by the defendant. The clear proceeds of penalties so assessed shall be remitted to the 9 
Civil Penalty and Forfeiture Fund in accordance with G.S. 115C 457.2. 10 
(b) This Article shall be liberally construed for the protection of minors and the general 11 
public. Noting in this Article shall be construed to infringe on any rights protected by the North 12 
Carolina or U.S. Constitutions.  13 
(c) If any provision of this Article is held by a court of competent jurisdiction to be 14 
invalid, void, or unenforceable, in whole or in part, the decision shall not affect the validity, 15 
enforceability, or applicability of the remaining provisions, which shall remain in full force and 16 
effect as if the provision held invalid, void, or unenforceable had not been included." 17 
SECTION 2.(c) Except as otherwise provided, this section becomes effective 18 
December 1, 2025, and applies to acts or omissions occurring on or after that date. 19 
SECTION 3.(a) Effective July 1, 2025, Article 13A of Chapter 143B of the General 20 
Statutes is amended by adding a new section to read: 21 
"§ 143B-1209.  Cyberbullying Unit established. 22 
(a) There is established in the State Bureau of Investigation the Cyberbullying Unit (Unit) 23 
dedicated to the protection of children online and to aid in the enforcement of Article 11 of 24 
Chapter 114 of the General Statutes. 25 
(b) In addition to any other duties assigned by law, the Unit shall operate a toll-free 26 
number and website on online child safety and cyberbullying jointly with the Department of 27 
Justice." 28 
SECTION 3.(b) Effective July 1, 2025, there is appropriated from the General Fund 29 
to the State Bureau of Investigation (SBI) the sum of two million dollars ($2,000,000) for the 30 
2025-2026 fiscal year and the sum of one million dollars ($1,000,000) for the 2026-2027 fiscal 31 
year to create the Cyberbullying Unit at the SBI. 32 
SECTION 4.(a) There is hereby established the North Carolina Online Child Safety 33 
Commission as an independent regulatory body with oversight authority on matters relating to 34 
the safety and wellbeing of minors in digital environments. The Commission's primary mission 35 
shall be to protect North Carolina's children from online harms through research, education, 36 
regulation, enforcement, and ongoing adaptation to the evolving digital landscape. The 37 
Commission shall serve as the state's foremost authority on online child safety, advancing the 38 
digital wellbeing of minors while respecting fundamental rights. The Commission shall be guided 39 
by the best interests of the child, the recognition that digital safety is fundamental to childhood 40 
development, the understanding that technology must adapt to children's needs rather than the 41 
reverse, and the principle that powerful digital platforms must be held accountable for the safety 42 
of young users. The Commission shall consist of nine (9) members with demonstrated expertise 43 
and commitment to child welfare, digital technology, mental health, education, or related fields 44 
relevant to children's online safety. Members shall be appointed as follows: 45 
(1) Three (5) members appointed by the Governor 46 
(2) Two (1) members appointed by the President Pro Tempore of the Senate 47 
(3) Two (1) members appointed by the Speaker of the House of Representatives 48 
(4) One (1) member appointed by the Attorney General 49 
(5) One (1) member appointed by the Superintendent of Public Instruction. 50 
The Commission membership shall include, at minimum: 51  General Assembly Of North Carolina 	Session 2025 
Page 4  Senate Bill 722-First Edition 
(1) One (1) member with expertise in child development and psychology 1 
(2) One (1) member with expertise in digital technology and data ethics 2 
(3) One (1) member representing parents or guardians 3 
(4) One (1) member with expertise in cybersecurity and privacy 4 
(5) One (1) member with expertise in education 5 
(6) One (1) member with legal expertise in child protection 6 
(7) One (1) youth advocate between the ages of 18-25" 7 
Commission members shall serve four-year staggered terms, with initial appointments 8 
varying in length to ensure continuity. The Commission shall elect a Chair and Vice-Chair from 9 
among its members, serving two-year terms. No member shall serve more than two consecutive 10 
terms. 11 
SECTION 4.(b) (a) The Commission with the assistance and input of the 12 
Department of Justice may do all of the following: 13 
(1) Issue binding regulations implementing the provisions of this act. 14 
(2) Establish safety standards for covered platforms. 15 
(3) Review and approve industry codes of practice. 16 
(4) Initiate investigations into potential violations. 17 
(5) Issue orders requiring compliance with the act. 18 
(6) Impose penalties for violations as provided in this act. 19 
(7) Seek injunctive relief through the courts when necessary to prevent harm to 20 
children. 21 
(b) The Commission shall provide expert guidance to: 22 
(1) The Governor and General Assembly on matters relating to online child 23 
safety. 24 
(2) State agencies on implementation of digital safety programs. 25 
(3) Educational institutions on digital literacy and safety curricula. 26 
(4) Parents and caregivers on tools and strategies to protect children online. 27 
(5) Technology platforms on best practices for age-appropriate design. 28 
(c) Research and data collection. – The Commission shall: 29 
(1) Conduct or commission research on emerging online risks to children. 30 
(2) Collect and analyze data on the prevalence and impact of online harms. 31 
(3) Monitor global developments in online safety regulation. 32 
(4) Evaluate the effectiveness of interventions and regulations. 33 
(5) Maintain a database of safety incidents, platform responses, and outcomes. 34 
(d) Educational Initiatives. – The Commission shall develop and oversee: 35 
(1) Public awareness campaigns on online child safety. 36 
(2) Resource development for schools, parents, and children. 37 
(3) Training programs for educators and other professionals. 38 
(4) Digital literacy standards for K-12 education. 39 
(e) Complaint handling. – The Commission shall: 40 
(1) Establish accessible mechanisms for receiving complaints about online harms 41 
to children. 42 
(2) Create specialized response protocols for different categories of harm. 43 
(3) Oversee platform compliance with complaint response requirements. 44 
(4) Intervene directly in serious cases where platforms fail to act appropriately. 45 
(5) Provide support resources for affected children and families. 46 
(f) Coordination and collaboration. – The Commission shall: 47 
(1) Coordinate with relevant state agencies including the Department of Justice, 48 
Department of Health and Human Services, and Department of Public 49 
Instruction. 50  General Assembly Of North Carolina 	Session 2025 
Senate Bill 722-First Edition  	Page 5 
(2) Collaborate with federal authorities including the Federal Trade Commission 1 
and Department of Justice. 2 
(3) Engage with international counterparts to develop consistent approaches to 3 
digital safety. 4 
(4) Partner with academic institutions, non-profit organizations, and other 5 
stakeholders dedicated to child safety. 6 
SECTION 4.(c) Annual duties and reporting requirements. – Key language 7 
elements: 8 
(a) State of Children's Online Safety Assessment. – The Commission shall prepare and 9 
publish an annual "State of Children's Online Safety in North Carolina" report that: 10 
(1) Assesses current online risks facing North Carolina's children. 11 
(2) Analyzes trends in online harms and platform responses. 12 
(3) Evaluates platform compliance with this act and related regulations. 13 
(4) Identifies emerging threats and technologies of concern. 14 
(5) Measures progress in addressing previously identified issues. 15 
(6) Provides data-driven insights on the digital experiences of children by age 16 
group. 17 
(b) Platform Compliance Review. – The Commission shall conduct annual compliance 18 
reviews of covered platforms that: 19 
(1) Evaluate implementation of required safety measures. 20 
(2) Assess the effectiveness of age verification systems. 21 
(3) Review Child Impact Assessments and safety documentation. 22 
(4) Analyze complaint handling and response times. 23 
(5) Examine algorithmic systems for compliance with safety standards. 24 
(6) Identify best practices and areas requiring improvement. 25 
(7) Result in public compliance ratings for each major platform. 26 
(c) Legislative Recommendations. – The Commission shall submit annual 27 
recommendations to the General Assembly that: 28 
(1) Identify necessary amendments to this act based on technological 29 
developments. 30 
(2) Propose new legislative measures to address emerging concerns. 31 
(3) Suggest improvements to enforcement mechanisms. 32 
(4) Recommend funding priorities for child online safety initiatives. 33 
(5) Identify areas where federal action or coordination is needed. 34 
(d) Public Hearings and Testimony. – The Commission shall: 35 
(1) Hold at least four public hearings annually across different regions of the 36 
State. 37 
(2) Receive testimony from children, parents, educators, platforms, and experts. 38 
(3) Conduct specialized hearings on emerging issues of concern. 39 
(4) Ensure diverse perspectives are represented in deliberations. 40 
(5) Make hearing records publicly available. 41 
(e) Industry Engagement. – The Commission shall: 42 
(1) Convene an annual Industry Safety Summit with platform representatives. 43 
(2) Facilitate regular working groups on specific safety challenges. 44 
(3) Review and approve updates to industry codes of practice. 45 
(4) Evaluate voluntary safety initiatives. 46 
(5) Promote adoption of safety innovations across the industry. 47 
(f) Transparency Reporting. – The Commission shall publish annual transparency reports 48 
detailing: 49 
(1) Enforcement actions taken and their outcomes. 50 
(2) Complaints received and resolved. 51  General Assembly Of North Carolina 	Session 2025 
Page 6  Senate Bill 722-First Edition 
(3) Penalties assessed and collected. 1 
(4) Allocation and impact of Children's Online Safety Fund expenditures. 2 
(5) Commission activities, investigations, and initiatives. 3 
(6) Metrics for measuring the effectiveness of the Act's implementation. 4 
(g) Audit of Educational Programs. – The Commission shall annually audit and evaluate: 5 
(1) Digital literacy programs in North Carolina schools. 6 
(2) Parent education initiatives. 7 
(3) Professional development for educators and youth workers. 8 
(4) Public awareness campaign effectiveness. 9 
(5) Resource allocation and accessibility across communities. 10 
(h) Research Agenda Development. – The Commission shall: 11 
(1) Establish annual research priorities based on identified gaps. 12 
(2) Commission or conduct studies on priority areas. 13 
(3) Award research grants from the Children's Online Safety Fund. 14 
(4) Publish findings and recommendations based on research. 15 
(5) Ensure research informs regulatory and educational approaches. 16 
SECTION 4.(d) Operational Framework:  Key Language Elements – 17 
(a) Staffing and Structure. – The Commission shall: 18 
(1) Be supported by a professional staff led by an Executive Director. 19 
(2) Maintain specialized divisions for enforcement, education, research, and 20 
policy. 21 
(3) Employ technologists, child development experts, data analysts, and legal 22 
specialists. 23 
(4) Establish advisory committees on specific issue areas as needed. 24 
(b) Funding Mechanisms. – The Commission shall: 25 
(1) Receive an annual appropriation from the General Assembly. 26 
(2) Administer the Children's Online Safety Fund. 27 
(3) Allocate penalties collected to prevention, education, and enforcement 28 
activities. 29 
(4) Report annually on budget allocation and performance metrics. 30 
(c) Technological Capabilities. – The Commission shall: 31 
(1) Maintain technical testing facilities to evaluate platform compliance. 32 
(2) Develop data analysis capabilities to identify patterns of harm. 33 
(3) Employ experts capable of evaluating platform algorithms and safety systems. 34 
(4) Keep pace with emerging technologies that may pose risks to children. 35 
(d) Ethical Frameworks. – The Commission shall: 36 
(1) Establish clear ethical guidelines for its work. 37 
(2) Ensure privacy protection in research and investigations. 38 
(3) Develop age-appropriate methods for involving children in policy 39 
development. 40 
(4) Balance safety imperatives with other rights and considerations. 41 
(e) Accountability Mechanisms. – The Commission shall: 42 
(1) Be subject to oversight by the General Assembly. 43 
(2) Maintain transparent decision-making processes. 44 
(3) Publish the basis for regulatory determinations. 45 
(4) Establish clear metrics for measuring its own effectiveness. 46 
(5) Undergo periodic independent evaluation." 47 
SECTION 4.(e) Implementation timeline. Key Language Elements – 48 
(a) Within 90 days of this act's effective date, initial appointments to the Commission 49 
shall be made and the Commission shall convene its first meeting. 50 
(b) Initial Responsibilities. – Within the first year of operation, the Commission shall: 51  General Assembly Of North Carolina 	Session 2025 
Senate Bill 722-First Edition  	Page 7 
(1) Hire key staff and establish organizational structure. 1 
(2) Develop initial regulations implementing this act. 2 
(3) Create complaint handling systems. 3 
(4) Establish public education programs. 4 
(5) Develop platform compliance guidelines. 5 
(6) Submit its first annual report to the General Assembly. 6 
(c) Phased Implementation. – The Commission shall develop a phased implementation 7 
plan that: 8 
(1) Prioritizes addressing the most serious harms. 9 
(2) Accommodates different compliance timelines based on platform size. 10 
(3) Allows for industry adjustment to new requirements. 11 
(4) Includes benchmarks for measuring progress. 12 
(d) Review and Adaptation. –Every three years, the Commission shall: 13 
(1) Conduct a comprehensive review of its activities and impact. 14 
(2) Assess changing technological landscape and emerging challenges. 15 
(3) Revise strategic priorities and approaches as needed. 16 
(4) Recommend statutory amendments to maintain effectiveness. 17 
SECTION 5. Except as otherwise provided, this act is effective when it becomes 18 
law. 19