| 43 | | - | [ social media - age verification - minor users - |
|---|
| 44 | | - | supervisory tools - parental consent – appeal - |
|---|
| 45 | | - | determination - Attorney General - codification - |
|---|
| 46 | | - | effective date ] |
|---|
| 62 | + | |
|---|
| 63 | + | AS INTRODUCED |
|---|
| 64 | + | |
|---|
| 65 | + | An Act relating to social media; defining terms; |
|---|
| 66 | + | requiring certain age verification; requiring |
|---|
| 67 | + | segregation of certain data; requiring socia l media |
|---|
| 68 | + | platforms to take certain actions for minor users; |
|---|
| 69 | + | providing certain criteria; requiring social media |
|---|
| 70 | + | platforms to offer certain supervisory tools; |
|---|
| 71 | + | prohibiting certain action; requiring certain |
|---|
| 72 | + | parental consent; stating certain presumption; |
|---|
| 73 | + | stating certain exceptions; authorizing certain |
|---|
| 74 | + | appeal; establishing time frame for c ertain |
|---|
| 75 | + | determination; construing provision; authorizing |
|---|
| 76 | + | Attorney General to bring civil action and seek |
|---|
| 77 | + | certain relief; providing for codification; and |
|---|
| 78 | + | providing an effective dat e. |
|---|
| 47 | 79 | | |
|---|
| 48 | 80 | | |
|---|
| 49 | 81 | | |
|---|
| 50 | 82 | | |
|---|
| 51 | 83 | | BE IT ENACTED BY THE PEOPLE OF THE STATE OF OKLAHOMA: |
|---|
| 52 | 84 | | SECTION 1. NEW LAW A new section of law to be codified |
|---|
| 53 | 85 | | in the Oklahoma Statutes as Section 204 of Title 75A, unless there |
|---|
| 54 | 86 | | is created a duplication in numbering, re ads as follows: |
|---|
| 55 | 87 | | A. As used in this section: |
|---|
| 56 | 88 | | 1. “Account” means a digital profile on a social media platform |
|---|
| 57 | 89 | | that is created by a user; |
|---|
| 58 | 90 | | 2. “Connected account” means an account on the social media |
|---|
| 59 | 91 | | platform that is directly connected to: |
|---|
| 90 | 146 | | 3. “Content” means any information, visual depictions, tools, |
|---|
| 91 | 147 | | features, links, software, or other materials that appear on or are |
|---|
| 92 | 148 | | available or enabled through a social media platform; |
|---|
| 93 | 149 | | 4. “Directly connected” means an account on the social media |
|---|
| 94 | 150 | | platform that is connected to another account by: |
|---|
| 95 | 151 | | a. sending a request to connect to another account holder |
|---|
| 96 | 152 | | and having the request to connect accepted by the |
|---|
| 97 | 153 | | other account holder , or |
|---|
| 98 | 154 | | b. receiving a request to connect from another account |
|---|
| 99 | 155 | | holder and accepting the request to connect; |
|---|
| 100 | 156 | | 5. “Minor” means an individual under eighteen (18) years of |
|---|
| 101 | 157 | | age; |
|---|
| 102 | 158 | | 6. “Personal information ” means information that is linked or |
|---|
| 103 | 159 | | can be reasonably linked to an individual , including, but not |
|---|
| 104 | 160 | | limited to: |
|---|
| 105 | 161 | | a. first and last name, |
|---|
| 106 | 162 | | b. date of birth, |
|---|
| 107 | 163 | | c. home or physical address, including street name and |
|---|
| 108 | 164 | | city, |
|---|
| 109 | 165 | | d. screen name or username that reveals an individual ’s |
|---|
| 110 | 166 | | email address, first name, or last name, |
|---|
| 140 | 220 | | g. photograph, video, or audio file containing a person ’s |
|---|
| 141 | 221 | | image or voice, |
|---|
| 142 | 222 | | h. geolocation information sufficient to identify street |
|---|
| 143 | 223 | | name and city, and |
|---|
| 144 | 224 | | i. any other identifier that a person may use to contact |
|---|
| 145 | 225 | | a specific individual ; |
|---|
| 146 | 226 | | 7. “Push notification” means an automatic electronic message |
|---|
| 147 | 227 | | displayed on an account holder’s device, when the user interface for |
|---|
| 148 | 228 | | the social media service is not actively open or visible on the |
|---|
| 149 | 229 | | device, that prompts the account holder to check or engage with the |
|---|
| 150 | 230 | | social media platform; |
|---|
| 151 | 231 | | 8. “Social media platform ” means a website or internet medium |
|---|
| 152 | 232 | | that: |
|---|
| 153 | 233 | | a. permits a person to become a registered user, |
|---|
| 154 | 234 | | establish an account, or create a profile for the |
|---|
| 155 | 235 | | purpose of allowing users to create, share, and view |
|---|
| 156 | 236 | | user-generated content through such an a ccount or |
|---|
| 157 | 237 | | profile, |
|---|
| 158 | 238 | | b. enables one or more users to generate content that can |
|---|
| 159 | 239 | | be viewed by other users of the medium, and |
|---|
| 190 | 294 | | 9. “User” means an individual who accesses or uses a social |
|---|
| 191 | 295 | | media platform. |
|---|
| 192 | 296 | | B. 1. A social media platform shall perform reasonable age |
|---|
| 193 | 297 | | verification methods to determine whether a user who is a resident |
|---|
| 194 | 298 | | of this state is a minor. A social media company shall segregate |
|---|
| 195 | 299 | | any personal information gathered specifically for reasonable age |
|---|
| 196 | 300 | | verification purposes and shall not use the personal information for |
|---|
| 197 | 301 | | any other purpose except those provided in subparagr aphs a through f |
|---|
| 198 | 302 | | of paragraph 2 of subsection D of this section. |
|---|
| 199 | 303 | | 2. If a user is determined to be a minor, a social media |
|---|
| 200 | 304 | | platform shall: |
|---|
| 201 | 305 | | a. set default privacy settings to prioritize maximum |
|---|
| 202 | 306 | | privacy of such minor user ’s account, including |
|---|
| 203 | 307 | | settings that: |
|---|
| 204 | 308 | | (1) restrict the visibility of the minor user ’s |
|---|
| 205 | 309 | | account to only connected acco unts, |
|---|
| 206 | 310 | | (2) limit the minor user ’s ability to share content |
|---|
| 207 | 311 | | to only connected accounts, |
|---|
| 208 | 312 | | (3) restrict any data collection and sale of data |
|---|
| 209 | 313 | | from a minor user’s account that is not ot herwise |
|---|
| 241 | 369 | | (5) restrict a minor user ’s direct messaging |
|---|
| 242 | 370 | | capabilities to only allow for direct messaging |
|---|
| 243 | 371 | | to connected accounts, and |
|---|
| 244 | 372 | | (6) allow a minor user to download a file with all |
|---|
| 245 | 373 | | information associated with hi s or her account, |
|---|
| 246 | 374 | | b. implement and maintain reasonable security measures, |
|---|
| 247 | 375 | | including data encryption, to protect the |
|---|
| 248 | 376 | | confidentiality, security, and integrity of personal |
|---|
| 249 | 377 | | information collected from a minor user who is a |
|---|
| 250 | 378 | | resident of this state, |
|---|
| 251 | 379 | | c. provide an easily accessible and understandable notice |
|---|
| 252 | 380 | | that: |
|---|
| 253 | 381 | | (1) describes any information the social media |
|---|
| 254 | 382 | | platform collects from a minor user, and |
|---|
| 255 | 383 | | (2) explains how the information may be used or |
|---|
| 256 | 384 | | disclosed, and |
|---|
| 257 | 385 | | d. disable the following features that prolong engageme nt |
|---|
| 258 | 386 | | on a social media platform by a minor user: |
|---|
| 259 | 387 | | (1) autoplay functions that continuously play content |
|---|
| 260 | 388 | | without user interaction, |
|---|
| 291 | 443 | | (3) push notifications prompting repeated user |
|---|
| 292 | 444 | | engagement. |
|---|
| 293 | 445 | | 3. Upon request of a minor user, a social media platform shall: |
|---|
| 294 | 446 | | a. delete the personal information of the minor user, |
|---|
| 295 | 447 | | unless the information is required to be retained |
|---|
| 296 | 448 | | pursuant to state or federal law , and |
|---|
| 297 | 449 | | b. remove any information or material the minor user made |
|---|
| 298 | 450 | | publicly available through the social media platform. |
|---|
| 299 | 451 | | C. A social media company shall offer supervisory tools for a |
|---|
| 300 | 452 | | minor user that the mi nor user may decide to activate. Such |
|---|
| 301 | 453 | | supervisory tools shall include capabilities for a parent or legal |
|---|
| 302 | 454 | | guardian of the minor user to : |
|---|
| 303 | 455 | | 1. Set time limits for the minor user’s daily social media |
|---|
| 304 | 456 | | service usage across devices; |
|---|
| 305 | 457 | | 2. Schedule mandatory breaks for the minor user during selected |
|---|
| 306 | 458 | | days and times across devices ; |
|---|
| 307 | 459 | | 3. View: |
|---|
| 308 | 460 | | a. data detailing the minor user’s total and average |
|---|
| 309 | 461 | | daily time spent on the social media platform across |
|---|
| 310 | 462 | | devices, |
|---|
| 311 | 463 | | b. a list of connected accounts , |
|---|
| 342 | 518 | | (2) content sensitivity settings , and |
|---|
| 343 | 519 | | (3) direct messaging settings and permissions ; and |
|---|
| 344 | 520 | | 4. Receive notifications when the minor user changes an account |
|---|
| 345 | 521 | | setting described in this subsection. |
|---|
| 346 | 522 | | D. 1. A social media platform shall not allow a minor user who |
|---|
| 347 | 523 | | is a resident of this state to change the default data privacy |
|---|
| 348 | 524 | | setting provided for in subparagraph a of paragraph 2 of subsection |
|---|
| 349 | 525 | | B of this section without first obtaining verifiable written consent |
|---|
| 350 | 526 | | from a minor user’s parent or legal guardian . The social media |
|---|
| 351 | 527 | | platform shall verify the identity of the person consenting and the |
|---|
| 352 | 528 | | relationship of the person consenting to the minor. |
|---|
| 353 | 529 | | 2. A social media platform ’s terms of service related to a |
|---|
| 354 | 530 | | minor user who is a resident of this state shall be presumed to |
|---|
| 355 | 531 | | include an assurance of confidentiality for the minor user ’s |
|---|
| 356 | 532 | | personal information. The presumption of confidentiality may be |
|---|
| 357 | 533 | | overcome if the social media platform obtains verifiable written |
|---|
| 358 | 534 | | consent from a parent or legal guard of the minor user . The |
|---|
| 359 | 535 | | presumption of confidentiality does not apply to a social media |
|---|
| 360 | 536 | | platform’s internal use or external sharing of a minor user ’s |
|---|
| 361 | 537 | | personal information if the use or sharing is necessary to: |
|---|
| 392 | 592 | | c. personalize the user ’s experience based on the user ’s |
|---|
| 393 | 593 | | age and location, |
|---|
| 394 | 594 | | d. display a username chosen by the minor user, |
|---|
| 395 | 595 | | e. obtain reasonable age verification information as |
|---|
| 396 | 596 | | required by paragraph 1 of subsection B of this |
|---|
| 397 | 597 | | section, or |
|---|
| 398 | 598 | | f. comply with the requirements of this act or any other |
|---|
| 399 | 599 | | federal or state law. |
|---|
| 400 | 600 | | E. A social media platform shall: |
|---|
| 401 | 601 | | 1. Implement a review process allowing a user to appeal his or |
|---|
| 402 | 602 | | her age designation by submitting documentary evidence to establish |
|---|
| 403 | 603 | | the user’s age range; and |
|---|
| 404 | 604 | | 2. Review evidence submitted by the user and make a |
|---|
| 405 | 605 | | determination within thirty (30) days of submission of the evidence. |
|---|
| 406 | 606 | | F. The provisions of this section shall not apply t o a text |
|---|
| 407 | 607 | | messaging platform or a platform for which the primary purpose is |
|---|
| 408 | 608 | | related to education or health care. |
|---|
| 409 | 609 | | G. The Attorney General is authorized to bring a civil action |
|---|
| 410 | 610 | | against a social media platform for a violation of the provisions of |
|---|
| 411 | 611 | | this section and to seek injunctive relief or other appropriate |
|---|
| 412 | 612 | | relief as determined by th e court. |
|---|