| 1 | 1 | | I |
|---|
| 2 | 2 | | 119THCONGRESS |
|---|
| 3 | 3 | | 1 |
|---|
| 4 | 4 | | STSESSION H. R. 2657 |
|---|
| 5 | 5 | | To require large social media platform providers to create, maintain, and |
|---|
| 6 | 6 | | make available to third-party safety software providers a set of real- |
|---|
| 7 | 7 | | time application programming interfaces, through which a child or a |
|---|
| 8 | 8 | | parent or legal guardian of a child may delegate permission to a third- |
|---|
| 9 | 9 | | party safety software provider to manage the online interactions, content, |
|---|
| 10 | 10 | | and account settings of such child on the large social media platform |
|---|
| 11 | 11 | | on the same terms as such child, and for other purposes. |
|---|
| 12 | 12 | | IN THE HOUSE OF REPRESENTATIVES |
|---|
| 13 | 13 | | APRIL3, 2025 |
|---|
| 14 | 14 | | Ms. W |
|---|
| 15 | 15 | | ASSERMANSCHULTZ(for herself, Mr. CARTERof Georgia, Ms. |
|---|
| 16 | 16 | | S |
|---|
| 17 | 17 | | CHRIER, Mrs. MILLER-MEEKS, Mr. SUOZZI, and Mr. FITZPATRICK) in- |
|---|
| 18 | 18 | | troduced the following bill; which was referred to the Committee on En- |
|---|
| 19 | 19 | | ergy and Commerce |
|---|
| 20 | 20 | | A BILL |
|---|
| 21 | 21 | | To require large social media platform providers to create, |
|---|
| 22 | 22 | | maintain, and make available to third-party safety soft- |
|---|
| 23 | 23 | | ware providers a set of real-time application program- |
|---|
| 24 | 24 | | ming interfaces, through which a child or a parent or |
|---|
| 25 | 25 | | legal guardian of a child may delegate permission to |
|---|
| 26 | 26 | | a third-party safety software provider to manage the |
|---|
| 27 | 27 | | online interactions, content, and account settings of such |
|---|
| 28 | 28 | | child on the large social media platform on the same |
|---|
| 29 | 29 | | terms as such child, and for other purposes. |
|---|
| 30 | 30 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6652 E:\BILLS\H2657.IH H2657 |
|---|
| 31 | 31 | | ssavage on LAPJG3WLY3PROD with BILLS 2 |
|---|
| 32 | 32 | | •HR 2657 IH |
|---|
| 33 | 33 | | Be it enacted by the Senate and House of Representa-1 |
|---|
| 34 | 34 | | tives of the United States of America in Congress assembled, 2 |
|---|
| 35 | 35 | | SECTION 1. SHORT TITLE. 3 |
|---|
| 36 | 36 | | This Act may be cited as the ‘‘Sammy’s Law’’. 4 |
|---|
| 37 | 37 | | SEC. 2. SENSE OF CONGRESS. 5 |
|---|
| 38 | 38 | | It is the sense of Congress that— 6 |
|---|
| 39 | 39 | | (1) parents and legal guardians should be em-7 |
|---|
| 40 | 40 | | powered to use the services of third-party safety 8 |
|---|
| 41 | 41 | | software providers to protect the children of such 9 |
|---|
| 42 | 42 | | parents and legal guardians from certain harms on 10 |
|---|
| 43 | 43 | | large social media platforms; and 11 |
|---|
| 44 | 44 | | (2) dangers like cyberbullying, human traf-12 |
|---|
| 45 | 45 | | ficking, illegal drug distribution, sexual harassment, 13 |
|---|
| 46 | 46 | | and violence perpetrated, facilitated, or exacerbated 14 |
|---|
| 47 | 47 | | through the use of certain large social media plat-15 |
|---|
| 48 | 48 | | forms have harmed children on such platforms. 16 |
|---|
| 49 | 49 | | SEC. 3. DEFINITIONS. 17 |
|---|
| 50 | 50 | | In this Act: 18 |
|---|
| 51 | 51 | | (1) C |
|---|
| 52 | 52 | | HILD.—The term ‘‘child’’ means any indi-19 |
|---|
| 53 | 53 | | vidual under the age of 17 years who has registered 20 |
|---|
| 54 | 54 | | an account with a large social media platform. 21 |
|---|
| 55 | 55 | | (2) C |
|---|
| 56 | 56 | | OMMERCE.—The term ‘‘commerce’’ has 22 |
|---|
| 57 | 57 | | the meaning given such term in section 4 of the 23 |
|---|
| 58 | 58 | | Federal Trade Commission Act (15 U.S.C. 44). 24 |
|---|
| 59 | 59 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 60 | 60 | | ssavage on LAPJG3WLY3PROD with BILLS 3 |
|---|
| 61 | 61 | | •HR 2657 IH |
|---|
| 62 | 62 | | (3) COMMISSION.—The term ‘‘Commission’’ 1 |
|---|
| 63 | 63 | | means the Federal Trade Commission. 2 |
|---|
| 64 | 64 | | (4) L |
|---|
| 65 | 65 | | ARGE SOCIAL MEDIA PLATFORM .—The 3 |
|---|
| 66 | 66 | | term ‘‘large social media platform’’— 4 |
|---|
| 67 | 67 | | (A) means a service— 5 |
|---|
| 68 | 68 | | (i) provided through an internet 6 |
|---|
| 69 | 69 | | website or a mobile application (or both); 7 |
|---|
| 70 | 70 | | (ii) the terms of service of which do 8 |
|---|
| 71 | 71 | | not prohibit the use of the service by a 9 |
|---|
| 72 | 72 | | child; 10 |
|---|
| 73 | 73 | | (iii) with any feature or features that 11 |
|---|
| 74 | 74 | | enable a child to share images, text, or 12 |
|---|
| 75 | 75 | | video through the internet with other users 13 |
|---|
| 76 | 76 | | of the service whom such child has met, 14 |
|---|
| 77 | 77 | | identified, or become aware of solely 15 |
|---|
| 78 | 78 | | through the use of the service; and 16 |
|---|
| 79 | 79 | | (iv) that has more than 100,000,000 17 |
|---|
| 80 | 80 | | monthly global active users or generates 18 |
|---|
| 81 | 81 | | more than $1,000,000,000 in gross rev-19 |
|---|
| 82 | 82 | | enue per year, adjusted yearly for inflation; 20 |
|---|
| 83 | 83 | | and 21 |
|---|
| 84 | 84 | | (B) does not include— 22 |
|---|
| 85 | 85 | | (i) a service that primarily serves— 23 |
|---|
| 86 | 86 | | (I) to facilitate— 24 |
|---|
| 87 | 87 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 88 | 88 | | ssavage on LAPJG3WLY3PROD with BILLS 4 |
|---|
| 89 | 89 | | •HR 2657 IH |
|---|
| 90 | 90 | | (aa) the sale or provision of 1 |
|---|
| 91 | 91 | | professional services; or 2 |
|---|
| 92 | 92 | | (bb) the sale of commercial 3 |
|---|
| 93 | 93 | | products; or 4 |
|---|
| 94 | 94 | | (II) to provide news or informa-5 |
|---|
| 95 | 95 | | tion, where the service does not offer 6 |
|---|
| 96 | 96 | | the ability for content to be sent by a 7 |
|---|
| 97 | 97 | | user directly to a child; or 8 |
|---|
| 98 | 98 | | (ii) a service that— 9 |
|---|
| 99 | 99 | | (I) has a feature that enables a 10 |
|---|
| 100 | 100 | | user who communicates directly with 11 |
|---|
| 101 | 101 | | a child through a message (including 12 |
|---|
| 102 | 102 | | a text, audio, or video message) not 13 |
|---|
| 103 | 103 | | otherwise available to other users of 14 |
|---|
| 104 | 104 | | the service to add other users to that 15 |
|---|
| 105 | 105 | | message that such child may not have 16 |
|---|
| 106 | 106 | | otherwise met, identified, or become 17 |
|---|
| 107 | 107 | | aware of solely through the use of the 18 |
|---|
| 108 | 108 | | service; and 19 |
|---|
| 109 | 109 | | (II) does not have any feature or 20 |
|---|
| 110 | 110 | | features described in subparagraph 21 |
|---|
| 111 | 111 | | (A)(iii). 22 |
|---|
| 112 | 112 | | (5) L |
|---|
| 113 | 113 | | ARGE SOCIAL MEDIA PLATFORM PRO -23 |
|---|
| 114 | 114 | | VIDER.—The term ‘‘large social media platform pro-24 |
|---|
| 115 | 115 | | vider’’ means any person who, for commercial pur-25 |
|---|
| 116 | 116 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00004 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 117 | 117 | | ssavage on LAPJG3WLY3PROD with BILLS 5 |
|---|
| 118 | 118 | | •HR 2657 IH |
|---|
| 119 | 119 | | poses in or affecting commerce, provides, manages, 1 |
|---|
| 120 | 120 | | operates, or controls a large social media platform. 2 |
|---|
| 121 | 121 | | (6) S |
|---|
| 122 | 122 | | TATE.—The term ‘‘State’’ means each 3 |
|---|
| 123 | 123 | | State of the United States, the District of Columbia, 4 |
|---|
| 124 | 124 | | each commonwealth, territory, or possession of the 5 |
|---|
| 125 | 125 | | United States, and each federally recognized Indian 6 |
|---|
| 126 | 126 | | Tribe. 7 |
|---|
| 127 | 127 | | (7) T |
|---|
| 128 | 128 | | HIRD-PARTY SAFETY SOFTWARE PRO -8 |
|---|
| 129 | 129 | | VIDER.—The term ‘‘third-party safety software pro-9 |
|---|
| 130 | 130 | | vider’’ means any person who, for commercial pur-10 |
|---|
| 131 | 131 | | poses in or affecting commerce, is authorized by a 11 |
|---|
| 132 | 132 | | child (if the child is 13 years of age or older) or a 12 |
|---|
| 133 | 133 | | parent or legal guardian of a child to interact with 13 |
|---|
| 134 | 134 | | a large social media platform to manage the online 14 |
|---|
| 135 | 135 | | interactions, content, or account settings of such 15 |
|---|
| 136 | 136 | | child for the sole purpose of protecting such child 16 |
|---|
| 137 | 137 | | from harm, including physical or emotional harm. 17 |
|---|
| 138 | 138 | | (8) U |
|---|
| 139 | 139 | | SER DATA.—The term ‘‘user data’’ means 18 |
|---|
| 140 | 140 | | any information needed to have a profile on a large 19 |
|---|
| 141 | 141 | | social media platform or content on a large social 20 |
|---|
| 142 | 142 | | media platform, including images, video, audio, or 21 |
|---|
| 143 | 143 | | text, that is created by or sent to a child on or 22 |
|---|
| 144 | 144 | | through the account of such child with such plat-23 |
|---|
| 145 | 145 | | form, but only— 24 |
|---|
| 146 | 146 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00005 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 147 | 147 | | ssavage on LAPJG3WLY3PROD with BILLS 6 |
|---|
| 148 | 148 | | •HR 2657 IH |
|---|
| 149 | 149 | | (A) if the information or content is created 1 |
|---|
| 150 | 150 | | by or sent to such child while a delegation 2 |
|---|
| 151 | 151 | | under section 4(a) is in effect with respect to 3 |
|---|
| 152 | 152 | | the account; and 4 |
|---|
| 153 | 153 | | (B) during a 30-day period beginning on 5 |
|---|
| 154 | 154 | | the date on which the information or content is 6 |
|---|
| 155 | 155 | | created by or sent to such child. 7 |
|---|
| 156 | 156 | | SEC. 4. PROVIDING ACCESS TO THIRD-PARTY SAFETY SOFT-8 |
|---|
| 157 | 157 | | WARE. 9 |
|---|
| 158 | 158 | | (a) D |
|---|
| 159 | 159 | | UTY OFLARGESOCIALMEDIAPLATFORMPRO-10 |
|---|
| 160 | 160 | | VIDERS.— 11 |
|---|
| 161 | 161 | | (1) I |
|---|
| 162 | 162 | | N GENERAL.—Not later than 30 days after 12 |
|---|
| 163 | 163 | | the effective date of this Act (in the case of a service 13 |
|---|
| 164 | 164 | | that is a large social media platform on such effec-14 |
|---|
| 165 | 165 | | tive date) or not later than 30 days after a service 15 |
|---|
| 166 | 166 | | becomes a large social media platform (in the case 16 |
|---|
| 167 | 167 | | of a service that becomes a large social media plat-17 |
|---|
| 168 | 168 | | form after such effective date), the large social 18 |
|---|
| 169 | 169 | | media platform provider shall create, maintain, and 19 |
|---|
| 170 | 170 | | make available to any third-party safety software 20 |
|---|
| 171 | 171 | | provider registered with the Commission under sub-21 |
|---|
| 172 | 172 | | section (b)(1) a set of third-party-accessible real- 22 |
|---|
| 173 | 173 | | time application programming interfaces, including 23 |
|---|
| 174 | 174 | | any information necessary to use such interfaces, by 24 |
|---|
| 175 | 175 | | which a child (if the child is 13 years of age or 25 |
|---|
| 176 | 176 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00006 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 177 | 177 | | ssavage on LAPJG3WLY3PROD with BILLS 7 |
|---|
| 178 | 178 | | •HR 2657 IH |
|---|
| 179 | 179 | | older) or a parent or legal guardian of a child may 1 |
|---|
| 180 | 180 | | delegate permission to the third-party safety soft-2 |
|---|
| 181 | 181 | | ware provider to— 3 |
|---|
| 182 | 182 | | (A) manage the online interactions, con-4 |
|---|
| 183 | 183 | | tent, and account settings of such child on the 5 |
|---|
| 184 | 184 | | large social media platform on the same terms 6 |
|---|
| 185 | 185 | | as such child; and 7 |
|---|
| 186 | 186 | | (B) initiate secure transfers of user data 8 |
|---|
| 187 | 187 | | from the large social media platform in a com-9 |
|---|
| 188 | 188 | | monly-used and machine-readable format to the 10 |
|---|
| 189 | 189 | | third-party safety software provider, where the 11 |
|---|
| 190 | 190 | | frequency of such transfers may not be limited 12 |
|---|
| 191 | 191 | | by the large social media platform provider to 13 |
|---|
| 192 | 192 | | less than once per hour. 14 |
|---|
| 193 | 193 | | (2) R |
|---|
| 194 | 194 | | EVOCATION.—Once a child or a parent or 15 |
|---|
| 195 | 195 | | legal guardian of a child makes a delegation under 16 |
|---|
| 196 | 196 | | paragraph (1), the large social media platform pro-17 |
|---|
| 197 | 197 | | vider shall make the application programming inter-18 |
|---|
| 198 | 198 | | faces and information described in such paragraph 19 |
|---|
| 199 | 199 | | available to the third-party safety software provider 20 |
|---|
| 200 | 200 | | on an ongoing basis until— 21 |
|---|
| 201 | 201 | | (A) the child (if the child made the delega-22 |
|---|
| 202 | 202 | | tion) or the parent or legal guardian of such 23 |
|---|
| 203 | 203 | | child revokes the delegation; 24 |
|---|
| 204 | 204 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00007 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 205 | 205 | | ssavage on LAPJG3WLY3PROD with BILLS 8 |
|---|
| 206 | 206 | | •HR 2657 IH |
|---|
| 207 | 207 | | (B) the child or a parent or legal guardian 1 |
|---|
| 208 | 208 | | of such child revokes or disables the registra-2 |
|---|
| 209 | 209 | | tion of the account of such child with the large 3 |
|---|
| 210 | 210 | | social media platform; 4 |
|---|
| 211 | 211 | | (C) the third-party safety software pro-5 |
|---|
| 212 | 212 | | vider rejects the delegation; or 6 |
|---|
| 213 | 213 | | (D) one or more of the affirmations made 7 |
|---|
| 214 | 214 | | by the third-party safety software provider 8 |
|---|
| 215 | 215 | | under subsection (b)(1)(A) is no longer true. 9 |
|---|
| 216 | 216 | | (3) S |
|---|
| 217 | 217 | | ECURE TRANSFER OF USER DATA .—A 10 |
|---|
| 218 | 218 | | large social media platform provider shall establish 11 |
|---|
| 219 | 219 | | and implement reasonable policies, practices, and 12 |
|---|
| 220 | 220 | | procedures regarding the secure transfer of user 13 |
|---|
| 221 | 221 | | data pursuant to a delegation under paragraph (1) 14 |
|---|
| 222 | 222 | | from the large social media platform to a third-party 15 |
|---|
| 223 | 223 | | safety software provider in order to mitigate any 16 |
|---|
| 224 | 224 | | risks related to user data. 17 |
|---|
| 225 | 225 | | (4) D |
|---|
| 226 | 226 | | ISCLOSURE.—In the case of a delegation 18 |
|---|
| 227 | 227 | | made by a child or a parent or legal guardian of a 19 |
|---|
| 228 | 228 | | child under paragraph (1) with respect to the ac-20 |
|---|
| 229 | 229 | | count of such child with a large social media plat-21 |
|---|
| 230 | 230 | | form, the large social media platform provider 22 |
|---|
| 231 | 231 | | shall— 23 |
|---|
| 232 | 232 | | (A) disclose to such child and (if the par-24 |
|---|
| 233 | 233 | | ent or legal guardian made the delegation) the 25 |
|---|
| 234 | 234 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00008 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 235 | 235 | | ssavage on LAPJG3WLY3PROD with BILLS 9 |
|---|
| 236 | 236 | | •HR 2657 IH |
|---|
| 237 | 237 | | parent or legal guardian the fact that the dele-1 |
|---|
| 238 | 238 | | gation has been made; 2 |
|---|
| 239 | 239 | | (B) provide to such child and (if such par-3 |
|---|
| 240 | 240 | | ent or legal guardian made the delegation) such 4 |
|---|
| 241 | 241 | | parent or legal guardian a summary of the user 5 |
|---|
| 242 | 242 | | data that is transferred to the third-party safe-6 |
|---|
| 243 | 243 | | ty software provider; and 7 |
|---|
| 244 | 244 | | (C) update the summary provided under 8 |
|---|
| 245 | 245 | | subparagraph (B) as necessary to reflect any 9 |
|---|
| 246 | 246 | | change to the user data that is transferred to 10 |
|---|
| 247 | 247 | | the third-party safety software provider. 11 |
|---|
| 248 | 248 | | (5) L |
|---|
| 249 | 249 | | IMITATION.—Any management by a third- 12 |
|---|
| 250 | 250 | | party safety software provider of online interactions, 13 |
|---|
| 251 | 251 | | content, and account settings of a child under this 14 |
|---|
| 252 | 252 | | subsection shall be limited to such management that 15 |
|---|
| 253 | 253 | | protects such child from harm, including the optimi-16 |
|---|
| 254 | 254 | | zation of the privacy settings of the account, stated 17 |
|---|
| 255 | 255 | | user age, and marketing settings of the child. 18 |
|---|
| 256 | 256 | | (b) T |
|---|
| 257 | 257 | | HIRD-PARTYSAFETYSOFTWAREPROVIDERS.— 19 |
|---|
| 258 | 258 | | (1) R |
|---|
| 259 | 259 | | EGISTRATION WITH COMMISSION .—A 20 |
|---|
| 260 | 260 | | third-party safety software provider shall register 21 |
|---|
| 261 | 261 | | with the Commission as a condition of accessing an 22 |
|---|
| 262 | 262 | | application programming interface and any informa-23 |
|---|
| 263 | 263 | | tion under subsection (a). As a condition of such 24 |
|---|
| 264 | 264 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00009 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 265 | 265 | | ssavage on LAPJG3WLY3PROD with BILLS 10 |
|---|
| 266 | 266 | | •HR 2657 IH |
|---|
| 267 | 267 | | registration, the third-party safety software provider 1 |
|---|
| 268 | 268 | | shall— 2 |
|---|
| 269 | 269 | | (A) satisfactorily demonstrate to the Com-3 |
|---|
| 270 | 270 | | mission that the third-party safety software 4 |
|---|
| 271 | 271 | | provider— 5 |
|---|
| 272 | 272 | | (i) is a company based in the United 6 |
|---|
| 273 | 273 | | States; 7 |
|---|
| 274 | 274 | | (ii) is not a subsidiary of any foreign- 8 |
|---|
| 275 | 275 | | owned company or otherwise controlled by 9 |
|---|
| 276 | 276 | | a foreign person or persons; 10 |
|---|
| 277 | 277 | | (iii) will solely use any user data ob-11 |
|---|
| 278 | 278 | | tained under subsection (a) for the purpose 12 |
|---|
| 279 | 279 | | of protecting a child from harm in accord-13 |
|---|
| 280 | 280 | | ance with any applicable terms of service 14 |
|---|
| 281 | 281 | | and the provisions of this Act; 15 |
|---|
| 282 | 282 | | (iv) will only disclose user data ob-16 |
|---|
| 283 | 283 | | tained under subsection (a) as permitted 17 |
|---|
| 284 | 284 | | by subsection (f); 18 |
|---|
| 285 | 285 | | (v) will process and maintain all user 19 |
|---|
| 286 | 286 | | data obtained under subsection (a) and 20 |
|---|
| 287 | 287 | | copies of any communications generated in 21 |
|---|
| 288 | 288 | | relation thereto exclusively on hardware 22 |
|---|
| 289 | 289 | | and devices located within the territorial 23 |
|---|
| 290 | 290 | | boundaries of the United States; 24 |
|---|
| 291 | 291 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00010 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 292 | 292 | | ssavage on LAPJG3WLY3PROD with BILLS 11 |
|---|
| 293 | 293 | | •HR 2657 IH |
|---|
| 294 | 294 | | (vi)(I) will delete any user data ob-1 |
|---|
| 295 | 295 | | tained under this section as soon as pos-2 |
|---|
| 296 | 296 | | sible but not later than 14 days after re-3 |
|---|
| 297 | 297 | | ceiving such data from the large social 4 |
|---|
| 298 | 298 | | media platform, not including any data the 5 |
|---|
| 299 | 299 | | third-party safety software provider dis-6 |
|---|
| 300 | 300 | | closes under subsection (f); 7 |
|---|
| 301 | 301 | | (II) for any data disclosed under sub-8 |
|---|
| 302 | 302 | | section (f)(1)(C), will maintain such data 9 |
|---|
| 303 | 303 | | until the child or a parent or legal guard-10 |
|---|
| 304 | 304 | | ian of the child who made a delegation 11 |
|---|
| 305 | 305 | | under subsection (a) and whose data is at 12 |
|---|
| 306 | 306 | | issue requests that the third-party safety 13 |
|---|
| 307 | 307 | | software provider delete such data; and 14 |
|---|
| 308 | 308 | | (III) in the event that the child or a 15 |
|---|
| 309 | 309 | | parent or legal guardian of the child who 16 |
|---|
| 310 | 310 | | made a delegation under subsection (a) 17 |
|---|
| 311 | 311 | | cancels their account with the third-party 18 |
|---|
| 312 | 312 | | safety software provider, will delete all ap-19 |
|---|
| 313 | 313 | | plicable user data no later than 30 days 20 |
|---|
| 314 | 314 | | after the request for account cancellation 21 |
|---|
| 315 | 315 | | has been made; and 22 |
|---|
| 316 | 316 | | (vii) will disclose, in an easy-to-under-23 |
|---|
| 317 | 317 | | stand, human-readable format, to each 24 |
|---|
| 318 | 318 | | child with respect to whose account with a 25 |
|---|
| 319 | 319 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00011 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 320 | 320 | | ssavage on LAPJG3WLY3PROD with BILLS 12 |
|---|
| 321 | 321 | | •HR 2657 IH |
|---|
| 322 | 322 | | large social media platform the service of 1 |
|---|
| 323 | 323 | | the third-party safety software provider is 2 |
|---|
| 324 | 324 | | operating and (if a parent or legal guard-3 |
|---|
| 325 | 325 | | ian of the child made the delegation under 4 |
|---|
| 326 | 326 | | subsection (a) with respect to the account) 5 |
|---|
| 327 | 327 | | to the parent or legal guardian, sufficient 6 |
|---|
| 328 | 328 | | information detailing the operation of the 7 |
|---|
| 329 | 329 | | service and what information the third- 8 |
|---|
| 330 | 330 | | party safety software provider is collecting 9 |
|---|
| 331 | 331 | | to enable such child and (if applicable) 10 |
|---|
| 332 | 332 | | such parent or legal guardian to make in-11 |
|---|
| 333 | 333 | | formed decisions regarding the use of the 12 |
|---|
| 334 | 334 | | service; and 13 |
|---|
| 335 | 335 | | (B) as part of the registration process, un-14 |
|---|
| 336 | 336 | | dergo a security review in such form as the 15 |
|---|
| 337 | 337 | | Commission may proscribe but which may in-16 |
|---|
| 338 | 338 | | clude requiring that a qualified independent au-17 |
|---|
| 339 | 339 | | diting firm conduct such a review to independ-18 |
|---|
| 340 | 340 | | ently verify and confirm via a written report 19 |
|---|
| 341 | 341 | | (which shall be exempt from disclosure under 20 |
|---|
| 342 | 342 | | section 552(b)(3) of title 5, United States 21 |
|---|
| 343 | 343 | | Code) that the third-party safety software pro-22 |
|---|
| 344 | 344 | | vider— 23 |
|---|
| 345 | 345 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00012 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 346 | 346 | | ssavage on LAPJG3WLY3PROD with BILLS 13 |
|---|
| 347 | 347 | | •HR 2657 IH |
|---|
| 348 | 348 | | (i) is in compliance, or has the ability 1 |
|---|
| 349 | 349 | | to comply, with the requirements of sub-2 |
|---|
| 350 | 350 | | paragraph (A); 3 |
|---|
| 351 | 351 | | (ii) is able to provide services in ac-4 |
|---|
| 352 | 352 | | cordance with any applicable terms of serv-5 |
|---|
| 353 | 353 | | ice and any relevant disclosures made to 6 |
|---|
| 354 | 354 | | any consumer, including whether such 7 |
|---|
| 355 | 355 | | terms and disclosures are clear and con-8 |
|---|
| 356 | 356 | | spicuous and are written in plain and easy- 9 |
|---|
| 357 | 357 | | to-understand English; 10 |
|---|
| 358 | 358 | | (iii) has taken appropriate steps to as-11 |
|---|
| 359 | 359 | | sess potential risks and to protect the con-12 |
|---|
| 360 | 360 | | fidentiality, integrity, and security of any 13 |
|---|
| 361 | 361 | | user data, including a determination of the 14 |
|---|
| 362 | 362 | | adequacy of business and technology-re-15 |
|---|
| 363 | 363 | | lated controls, policies, procedures, and 16 |
|---|
| 364 | 364 | | other safeguards employed by the third- 17 |
|---|
| 365 | 365 | | party safety software provider based on 18 |
|---|
| 366 | 366 | | guidance issued by the Commission and 19 |
|---|
| 367 | 367 | | other industry standards and best prac-20 |
|---|
| 368 | 368 | | tices; and 21 |
|---|
| 369 | 369 | | (iv) assesses compliance with applica-22 |
|---|
| 370 | 370 | | ble Federal law, including the requirements 23 |
|---|
| 371 | 371 | | of this Act. 24 |
|---|
| 372 | 372 | | (2) A |
|---|
| 373 | 373 | | NNUAL AUDIT.— 25 |
|---|
| 374 | 374 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00013 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 375 | 375 | | ssavage on LAPJG3WLY3PROD with BILLS 14 |
|---|
| 376 | 376 | | •HR 2657 IH |
|---|
| 377 | 377 | | (A) AUDIT PROCESS; AUDIT REPORT.—For 1 |
|---|
| 378 | 378 | | each year or partial year during which a third- 2 |
|---|
| 379 | 379 | | party safety software provider is registered with 3 |
|---|
| 380 | 380 | | the Commission under paragraph (1), the third- 4 |
|---|
| 381 | 381 | | party safety software provider shall retain the 5 |
|---|
| 382 | 382 | | services of a qualified independent auditing firm 6 |
|---|
| 383 | 383 | | to complete an annual audit and write an audit 7 |
|---|
| 384 | 384 | | report (which shall be exempt from disclosure 8 |
|---|
| 385 | 385 | | under section 552(b)(3) of title 5, United 9 |
|---|
| 386 | 386 | | States Code), and such audit report shall— 10 |
|---|
| 387 | 387 | | (i) include a review and assessment of 11 |
|---|
| 388 | 388 | | the third-party safety software provider’s 12 |
|---|
| 389 | 389 | | initial security review and any subsequent 13 |
|---|
| 390 | 390 | | written reports, including whether the 14 |
|---|
| 391 | 391 | | third-party safety software provider has re-15 |
|---|
| 392 | 392 | | mained in compliance with the require-16 |
|---|
| 393 | 393 | | ments described in paragraph (1)(B); and 17 |
|---|
| 394 | 394 | | (ii) identify whether the third-party 18 |
|---|
| 395 | 395 | | safety software provider has made any ma-19 |
|---|
| 396 | 396 | | terial changes in how the third-party safety 20 |
|---|
| 397 | 397 | | software provider provides services, and in 21 |
|---|
| 398 | 398 | | the event of any such material changes, 22 |
|---|
| 399 | 399 | | provide an explanation as to how such 23 |
|---|
| 400 | 400 | | changes have impacted users. 24 |
|---|
| 401 | 401 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00014 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 402 | 402 | | ssavage on LAPJG3WLY3PROD with BILLS 15 |
|---|
| 403 | 403 | | •HR 2657 IH |
|---|
| 404 | 404 | | (B) SUBMISSION TO COMMISSION .—Not 1 |
|---|
| 405 | 405 | | later than 30 days after the date on which an 2 |
|---|
| 406 | 406 | | audit report is written under subparagraph (A), 3 |
|---|
| 407 | 407 | | a third-party safety software provider shall sub-4 |
|---|
| 408 | 408 | | mit to the Commission— 5 |
|---|
| 409 | 409 | | (i) a full copy of such audit report; 6 |
|---|
| 410 | 410 | | and 7 |
|---|
| 411 | 411 | | (ii) a summary of such audit report 8 |
|---|
| 412 | 412 | | that may contain redactions to protect the 9 |
|---|
| 413 | 413 | | proprietary information and trade secrets 10 |
|---|
| 414 | 414 | | of the third-party safety software provider. 11 |
|---|
| 415 | 415 | | (C) A |
|---|
| 416 | 416 | | UDIT REVIEW BY COMMISSION .—The 12 |
|---|
| 417 | 417 | | Commission shall— 13 |
|---|
| 418 | 418 | | (i) review each audit report submitted 14 |
|---|
| 419 | 419 | | by a third-party safety software provider 15 |
|---|
| 420 | 420 | | under subparagraph (B)(i) to verify com-16 |
|---|
| 421 | 421 | | pliance; 17 |
|---|
| 422 | 422 | | (ii) make a copy of the summary of 18 |
|---|
| 423 | 423 | | such audit report submitted by a third- 19 |
|---|
| 424 | 424 | | party safety software provider under sub-20 |
|---|
| 425 | 425 | | paragraph (B)(ii) available to the public; 21 |
|---|
| 426 | 426 | | and 22 |
|---|
| 427 | 427 | | (iii) in the event an audit required 23 |
|---|
| 428 | 428 | | under subparagraph (A) detects an un-24 |
|---|
| 429 | 429 | | usual finding, direct a third-party safety 25 |
|---|
| 430 | 430 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00015 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 431 | 431 | | ssavage on LAPJG3WLY3PROD with BILLS 16 |
|---|
| 432 | 432 | | •HR 2657 IH |
|---|
| 433 | 433 | | software provider to promptly investigate 1 |
|---|
| 434 | 434 | | and resolve the matter. 2 |
|---|
| 435 | 435 | | (3) A |
|---|
| 436 | 436 | | DDITIONAL AUTHORITY OF COMMISSION .— 3 |
|---|
| 437 | 437 | | In addition to the jurisdiction, powers, and duties of 4 |
|---|
| 438 | 438 | | the Commission otherwise provided under this Act 5 |
|---|
| 439 | 439 | | and any other provision of law, the Commission may 6 |
|---|
| 440 | 440 | | take an adverse action against a third-party safety 7 |
|---|
| 441 | 441 | | software provider, including by— 8 |
|---|
| 442 | 442 | | (A) denying an initial registration for the 9 |
|---|
| 443 | 443 | | third-party safety software provider under para-10 |
|---|
| 444 | 444 | | graph (1); 11 |
|---|
| 445 | 445 | | (B) permanently de-registering the third- 12 |
|---|
| 446 | 446 | | party safety software provider; and 13 |
|---|
| 447 | 447 | | (C) suspending the registration of the 14 |
|---|
| 448 | 448 | | third-party safety software provider due to an 15 |
|---|
| 449 | 449 | | audit finding of a material risk to the security 16 |
|---|
| 450 | 450 | | of the data or safety of the public, including 17 |
|---|
| 451 | 451 | | for— 18 |
|---|
| 452 | 452 | | (i) willful misconduct or gross neg-19 |
|---|
| 453 | 453 | | ligence by the third-party safety software 20 |
|---|
| 454 | 454 | | provider; 21 |
|---|
| 455 | 455 | | (ii) a material misrepresentation made 22 |
|---|
| 456 | 456 | | by a third-party safety software provider to 23 |
|---|
| 457 | 457 | | the Commission or to any consumer; 24 |
|---|
| 458 | 458 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00016 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 459 | 459 | | ssavage on LAPJG3WLY3PROD with BILLS 17 |
|---|
| 460 | 460 | | •HR 2657 IH |
|---|
| 461 | 461 | | (iii) failure by the third-party safety 1 |
|---|
| 462 | 462 | | software provider to comply with any re-2 |
|---|
| 463 | 463 | | quirements of this Act or failure to operate 3 |
|---|
| 464 | 464 | | in accordance with the affirmations, asser-4 |
|---|
| 465 | 465 | | tions, representations, or terms of any se-5 |
|---|
| 466 | 466 | | curity review, audit, terms of services, or 6 |
|---|
| 467 | 467 | | consumer disclosures; 7 |
|---|
| 468 | 468 | | (iv) failure by the third-party safety 8 |
|---|
| 469 | 469 | | software provider to respond to an unusual 9 |
|---|
| 470 | 470 | | finding in an annual audit completed 10 |
|---|
| 471 | 471 | | under paragraph (2)(A); and 11 |
|---|
| 472 | 472 | | (v) failure by the third-party safety 12 |
|---|
| 473 | 473 | | software provider to adhere to or imple-13 |
|---|
| 474 | 474 | | ment guidance issued by the Commission. 14 |
|---|
| 475 | 475 | | (4) R |
|---|
| 476 | 476 | | IGHTS OF THIRD-PARTY SAFETY SOFT -15 |
|---|
| 477 | 477 | | WARE PROVIDERS.— 16 |
|---|
| 478 | 478 | | (A) I |
|---|
| 479 | 479 | | N GENERAL.—In the event the Com-17 |
|---|
| 480 | 480 | | mission takes an adverse action against a third- 18 |
|---|
| 481 | 481 | | party safety software provider under paragraph 19 |
|---|
| 482 | 482 | | (3), the Commission shall give the third-party 20 |
|---|
| 483 | 483 | | safety software provider— 21 |
|---|
| 484 | 484 | | (i) the opportunity to appeal the find-22 |
|---|
| 485 | 485 | | ings of the auditor or such action of the 23 |
|---|
| 486 | 486 | | Commission; and 24 |
|---|
| 487 | 487 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00017 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 488 | 488 | | ssavage on LAPJG3WLY3PROD with BILLS 18 |
|---|
| 489 | 489 | | •HR 2657 IH |
|---|
| 490 | 490 | | (ii) the opportunity to remediate any 1 |
|---|
| 491 | 491 | | deficiencies, except in the case of a finding 2 |
|---|
| 492 | 492 | | of— 3 |
|---|
| 493 | 493 | | (I) willful misconduct; 4 |
|---|
| 494 | 494 | | (II) gross negligence; or 5 |
|---|
| 495 | 495 | | (III) a demonstrated history of 6 |
|---|
| 496 | 496 | | multiple failures in relation to the 7 |
|---|
| 497 | 497 | | types of material risk described in 8 |
|---|
| 498 | 498 | | paragraph (3)(C)(ii) through 9 |
|---|
| 499 | 499 | | (3)(C)(v). 10 |
|---|
| 500 | 500 | | (B) E |
|---|
| 501 | 501 | | XCEPTION.—The rights described in 11 |
|---|
| 502 | 502 | | subparagraph (A) shall not prevent the Com-12 |
|---|
| 503 | 503 | | mission from suspending the registration of a 13 |
|---|
| 504 | 504 | | third-party safety software provider to protect 14 |
|---|
| 505 | 505 | | the public from ongoing material risk for the 15 |
|---|
| 506 | 506 | | period during which the third-party safety soft-16 |
|---|
| 507 | 507 | | ware provider is in the process of exercising the 17 |
|---|
| 508 | 508 | | rights described in paragraph (4). 18 |
|---|
| 509 | 509 | | (c) A |
|---|
| 510 | 510 | | UTHENTICATION.—Not later than 180 days 19 |
|---|
| 511 | 511 | | after the date of the enactment of this Act, the Commis-20 |
|---|
| 512 | 512 | | sion shall issue guidance to facilitate the ability of a third- 21 |
|---|
| 513 | 513 | | party safety software provider to obtain user data or ac-22 |
|---|
| 514 | 514 | | cess under subsection (a) in a manner that ensures that 23 |
|---|
| 515 | 515 | | a request for user data or access on behalf of a child is 24 |
|---|
| 516 | 516 | | a verifiable request. 25 |
|---|
| 517 | 517 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00018 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 518 | 518 | | ssavage on LAPJG3WLY3PROD with BILLS 19 |
|---|
| 519 | 519 | | •HR 2657 IH |
|---|
| 520 | 520 | | (d) GUIDANCE AND CONSUMEREDUCATION.—The 1 |
|---|
| 521 | 521 | | Commission shall— 2 |
|---|
| 522 | 522 | | (1) not later than 180 days after the date of 3 |
|---|
| 523 | 523 | | the enactment of this Act, issue guidance for large 4 |
|---|
| 524 | 524 | | social media platform providers and third-party safe-5 |
|---|
| 525 | 525 | | ty software providers regarding the maintenance of 6 |
|---|
| 526 | 526 | | reasonable safety standards to protect user data; 7 |
|---|
| 527 | 527 | | and 8 |
|---|
| 528 | 528 | | (2) educate consumers regarding the rights of 9 |
|---|
| 529 | 529 | | consumers under this Act. 10 |
|---|
| 530 | 530 | | (e) I |
|---|
| 531 | 531 | | NDEMNIFICATION.—In any civil action in Fed-11 |
|---|
| 532 | 532 | | eral or State court (other than an action brought by the 12 |
|---|
| 533 | 533 | | Commission), a large social media platform provider may 13 |
|---|
| 534 | 534 | | not be held liable for damages arising out of the transfer 14 |
|---|
| 535 | 535 | | of user data to a third-party safety software provider 15 |
|---|
| 536 | 536 | | under subsection (a), if the large social media platform 16 |
|---|
| 537 | 537 | | provider has in good faith complied with the requirements 17 |
|---|
| 538 | 538 | | of this Act and the guidance issued by the Commission 18 |
|---|
| 539 | 539 | | under this Act. 19 |
|---|
| 540 | 540 | | (f) U |
|---|
| 541 | 541 | | SERDATADISCLOSURE.— 20 |
|---|
| 542 | 542 | | (1) P |
|---|
| 543 | 543 | | ERMITTED DISCLOSURES .—A third-party 21 |
|---|
| 544 | 544 | | safety software provider may not disclose any user 22 |
|---|
| 545 | 545 | | data obtained under subsection (a) to any other per-23 |
|---|
| 546 | 546 | | son except— 24 |
|---|
| 547 | 547 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00019 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 548 | 548 | | ssavage on LAPJG3WLY3PROD with BILLS 20 |
|---|
| 549 | 549 | | •HR 2657 IH |
|---|
| 550 | 550 | | (A) pursuant to a lawful request from a 1 |
|---|
| 551 | 551 | | government body, including for law enforcement 2 |
|---|
| 552 | 552 | | purposes or for judicial or administrative pro-3 |
|---|
| 553 | 553 | | ceedings by means of a court order or a court- 4 |
|---|
| 554 | 554 | | ordered warrant, a subpoena or summons 5 |
|---|
| 555 | 555 | | issued by a judicial officer, or a grand jury sub-6 |
|---|
| 556 | 556 | | poena; 7 |
|---|
| 557 | 557 | | (B) to the extent that such disclosure is re-8 |
|---|
| 558 | 558 | | quired by law and such disclosure complies with 9 |
|---|
| 559 | 559 | | and is limited to the relevant requirements of 10 |
|---|
| 560 | 560 | | such law; 11 |
|---|
| 561 | 561 | | (C) to the child or a parent or legal guard-12 |
|---|
| 562 | 562 | | ian of the child who made a delegation under 13 |
|---|
| 563 | 563 | | such subsection and whose data is at issue, with 14 |
|---|
| 564 | 564 | | such third-party safety software provider mak-15 |
|---|
| 565 | 565 | | ing a good faith effort to ensure that such dis-16 |
|---|
| 566 | 566 | | closure includes only the user data necessary 17 |
|---|
| 567 | 567 | | for a reasonable parent or caregiver to under-18 |
|---|
| 568 | 568 | | stand that such child is experiencing (or is at 19 |
|---|
| 569 | 569 | | foreseeable risk to experience) the following 20 |
|---|
| 570 | 570 | | harms— 21 |
|---|
| 571 | 571 | | (i) suicide; 22 |
|---|
| 572 | 572 | | (ii) anxiety; 23 |
|---|
| 573 | 573 | | (iii) depression; 24 |
|---|
| 574 | 574 | | (iv) eating disorders; 25 |
|---|
| 575 | 575 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00020 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 576 | 576 | | ssavage on LAPJG3WLY3PROD with BILLS 21 |
|---|
| 577 | 577 | | •HR 2657 IH |
|---|
| 578 | 578 | | (v) violence, including being the victim 1 |
|---|
| 579 | 579 | | of or planning to commit or facilitate as-2 |
|---|
| 580 | 580 | | sault; 3 |
|---|
| 581 | 581 | | (vi) substance abuse; 4 |
|---|
| 582 | 582 | | (vii) fraud; 5 |
|---|
| 583 | 583 | | (viii) severe forms of trafficking in 6 |
|---|
| 584 | 584 | | persons (as defined in section 103 of the 7 |
|---|
| 585 | 585 | | Trafficking Victims Protection Act of 2000 8 |
|---|
| 586 | 586 | | (22 U.S.C. 7102)); 9 |
|---|
| 587 | 587 | | (ix) sexual abuse; 10 |
|---|
| 588 | 588 | | (x) physical injury; 11 |
|---|
| 589 | 589 | | (xi) harassment; 12 |
|---|
| 590 | 590 | | (xii) sexually explicit conduct or child 13 |
|---|
| 591 | 591 | | pornography (as defined in section 2256 of 14 |
|---|
| 592 | 592 | | title 18, United States Code); 15 |
|---|
| 593 | 593 | | (xiii) terrorism (as defined in section 16 |
|---|
| 594 | 594 | | 140(d) of the Foreign Relations Authoriza-17 |
|---|
| 595 | 595 | | tion Act, Fiscal Years 1988 and 1989 (22 18 |
|---|
| 596 | 596 | | U.S.C. 2656f(d))), including communica-19 |
|---|
| 597 | 597 | | tions with or in support of a foreign ter-20 |
|---|
| 598 | 598 | | rorist organization (as designated by the 21 |
|---|
| 599 | 599 | | Secretary of State under section 219(a) of 22 |
|---|
| 600 | 600 | | the Immigration and Nationality Act (8 23 |
|---|
| 601 | 601 | | U.S.C. 1189(a))); 24 |
|---|
| 602 | 602 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00021 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 603 | 603 | | ssavage on LAPJG3WLY3PROD with BILLS 22 |
|---|
| 604 | 604 | | •HR 2657 IH |
|---|
| 605 | 605 | | (xiv) academic dishonesty, including 1 |
|---|
| 606 | 606 | | cheating, plagiarism, and other forms of 2 |
|---|
| 607 | 607 | | academic dishonesty that are intended to 3 |
|---|
| 608 | 608 | | gain an unfair academic advantage; and 4 |
|---|
| 609 | 609 | | (xv) sharing personal information, 5 |
|---|
| 610 | 610 | | limited to— 6 |
|---|
| 611 | 611 | | (I) home address; 7 |
|---|
| 612 | 612 | | (II) phone number; 8 |
|---|
| 613 | 613 | | (III) social security number; and 9 |
|---|
| 614 | 614 | | (IV) personal banking informa-10 |
|---|
| 615 | 615 | | tion; 11 |
|---|
| 616 | 616 | | (D) in the case of a reasonably foreseeable 12 |
|---|
| 617 | 617 | | serious and imminent threat to the health or 13 |
|---|
| 618 | 618 | | safety of any individual, if the disclosure is 14 |
|---|
| 619 | 619 | | made to a person or persons reasonably able to 15 |
|---|
| 620 | 620 | | prevent or lessen the threat; or 16 |
|---|
| 621 | 621 | | (E) to a public health authority or other 17 |
|---|
| 622 | 622 | | appropriate government authority authorized by 18 |
|---|
| 623 | 623 | | law to receive reports of child abuse or neglect. 19 |
|---|
| 624 | 624 | | (2) D |
|---|
| 625 | 625 | | ISCLOSURE REPORTING .—A third-party 20 |
|---|
| 626 | 626 | | safety software provider that makes a disclosure per-21 |
|---|
| 627 | 627 | | mitted by paragraph (1)(A), (1)(B), (1)(D), or 22 |
|---|
| 628 | 628 | | (1)(E) shall promptly inform the child with respect 23 |
|---|
| 629 | 629 | | to whose account with a large social media platform 24 |
|---|
| 630 | 630 | | the delegation was made under subsection (a) and 25 |
|---|
| 631 | 631 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00022 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 632 | 632 | | ssavage on LAPJG3WLY3PROD with BILLS 23 |
|---|
| 633 | 633 | | •HR 2657 IH |
|---|
| 634 | 634 | | (if a parent or legal guardian of the child made the 1 |
|---|
| 635 | 635 | | delegation) the parent or legal guardian that such a 2 |
|---|
| 636 | 636 | | disclosure has been or will be made, except if— 3 |
|---|
| 637 | 637 | | (A) the third-party safety software pro-4 |
|---|
| 638 | 638 | | vider, in the exercise of professional judgment, 5 |
|---|
| 639 | 639 | | believes informing such child or parent or legal 6 |
|---|
| 640 | 640 | | guardian would place such child at risk of seri-7 |
|---|
| 641 | 641 | | ous harm; or 8 |
|---|
| 642 | 642 | | (B) the third-party safety software pro-9 |
|---|
| 643 | 643 | | vider is prohibited by law (including a valid 10 |
|---|
| 644 | 644 | | order by a court or administrative body) from 11 |
|---|
| 645 | 645 | | informing such child or parent or legal guard-12 |
|---|
| 646 | 646 | | ian. 13 |
|---|
| 647 | 647 | | SEC. 5. IMPLEMENTATION AND ENFORCEMENT. 14 |
|---|
| 648 | 648 | | (a) E |
|---|
| 649 | 649 | | NFORCEMENT.— 15 |
|---|
| 650 | 650 | | (1) U |
|---|
| 651 | 651 | | NFAIR OR DECEPTIVE ACTS OR PRAC -16 |
|---|
| 652 | 652 | | TICES.—A violation of this Act shall be treated as 17 |
|---|
| 653 | 653 | | a violation of a rule defining an unfair or deceptive 18 |
|---|
| 654 | 654 | | act or practice prescribed under section 18(a)(1)(B) 19 |
|---|
| 655 | 655 | | of the Federal Trade Commission Act (15 U.S.C. 20 |
|---|
| 656 | 656 | | 57a(a)(1)(B)). 21 |
|---|
| 657 | 657 | | (2) P |
|---|
| 658 | 658 | | OWERS OF COMMISSION .— 22 |
|---|
| 659 | 659 | | (A) I |
|---|
| 660 | 660 | | N GENERAL.—The Commission shall 23 |
|---|
| 661 | 661 | | enforce this Act in the same manner, by the 24 |
|---|
| 662 | 662 | | same means, and with the same jurisdiction, 25 |
|---|
| 663 | 663 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00023 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 664 | 664 | | ssavage on LAPJG3WLY3PROD with BILLS 24 |
|---|
| 665 | 665 | | •HR 2657 IH |
|---|
| 666 | 666 | | powers, and duties as though all applicable 1 |
|---|
| 667 | 667 | | terms and provisions of the Federal Trade 2 |
|---|
| 668 | 668 | | Commission Act (15 U.S.C. 41 et seq.) were in-3 |
|---|
| 669 | 669 | | corporated into and made a part of this Act. 4 |
|---|
| 670 | 670 | | (B) P |
|---|
| 671 | 671 | | RIVILEGES AND IMMUNITIES .—Any 5 |
|---|
| 672 | 672 | | person who violates this Act shall be subject to 6 |
|---|
| 673 | 673 | | the penalties and entitled to the privileges and 7 |
|---|
| 674 | 674 | | immunities provided in the Federal Trade Com-8 |
|---|
| 675 | 675 | | mission Act (15 U.S.C. 41 et seq.). 9 |
|---|
| 676 | 676 | | (3) P |
|---|
| 677 | 677 | | RESERVATION OF AUTHORITY .—Nothing 10 |
|---|
| 678 | 678 | | in this Act may be construed to limit the authority 11 |
|---|
| 679 | 679 | | of the Commission under any other provision of law. 12 |
|---|
| 680 | 680 | | (b) FTC G |
|---|
| 681 | 681 | | UIDANCE.—Not later than 180 days after 13 |
|---|
| 682 | 682 | | the date of the enactment of this Act, the Commission 14 |
|---|
| 683 | 683 | | shall issue guidance to assist large social media platform 15 |
|---|
| 684 | 684 | | providers and third-party safety software providers in 16 |
|---|
| 685 | 685 | | complying with this Act. 17 |
|---|
| 686 | 686 | | (c) C |
|---|
| 687 | 687 | | OMPLIANCEASSESSMENT.—The Commission, 18 |
|---|
| 688 | 688 | | on a biannual basis, shall assess compliance by large social 19 |
|---|
| 689 | 689 | | media platform providers and third-party safety software 20 |
|---|
| 690 | 690 | | providers with the provisions of this Act. 21 |
|---|
| 691 | 691 | | (d) C |
|---|
| 692 | 692 | | OMPLAINTS.—The Commission shall establish 22 |
|---|
| 693 | 693 | | procedures under which a child, or the parent or legal 23 |
|---|
| 694 | 694 | | guardian of such child, a large social media platform pro-24 |
|---|
| 695 | 695 | | vider, or a third-party safety software provider may file 25 |
|---|
| 696 | 696 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00024 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 697 | 697 | | ssavage on LAPJG3WLY3PROD with BILLS 25 |
|---|
| 698 | 698 | | •HR 2657 IH |
|---|
| 699 | 699 | | a complaint alleging that a large social media platform 1 |
|---|
| 700 | 700 | | provider or a third-party safety software provider has vio-2 |
|---|
| 701 | 701 | | lated this Act. 3 |
|---|
| 702 | 702 | | SEC. 6. ONE NATIONAL STANDARD. 4 |
|---|
| 703 | 703 | | (a) I |
|---|
| 704 | 704 | | NGENERAL.—No State or political subdivision 5 |
|---|
| 705 | 705 | | of a State may maintain, enforce, prescribe, or continue 6 |
|---|
| 706 | 706 | | in effect any law, rule, regulation, requirement, standard, 7 |
|---|
| 707 | 707 | | or other provision having the force and effect of law of 8 |
|---|
| 708 | 708 | | the State, or political subdivision of a State, related to 9 |
|---|
| 709 | 709 | | requiring large social media platform providers to create, 10 |
|---|
| 710 | 710 | | maintain, and make available to third-party safety soft-11 |
|---|
| 711 | 711 | | ware providers a set of real-time application programming 12 |
|---|
| 712 | 712 | | interfaces, through which a child or a parent or legal 13 |
|---|
| 713 | 713 | | guardian of a child may delegate permission to a third- 14 |
|---|
| 714 | 714 | | party safety software provider to manage the online inter-15 |
|---|
| 715 | 715 | | actions, content, and account settings of such child on a 16 |
|---|
| 716 | 716 | | large social media platform on the same terms as such 17 |
|---|
| 717 | 717 | | child. 18 |
|---|
| 718 | 718 | | (b) R |
|---|
| 719 | 719 | | ULE OFCONSTRUCTION.—This section may not 19 |
|---|
| 720 | 720 | | be construed to— 20 |
|---|
| 721 | 721 | | (1) limit the enforcement of any consumer pro-21 |
|---|
| 722 | 722 | | tection law of a State or political subdivision of a 22 |
|---|
| 723 | 723 | | State; 23 |
|---|
| 724 | 724 | | (2) preempt the applicability of State trespass, 24 |
|---|
| 725 | 725 | | contract, or tort law; or 25 |
|---|
| 726 | 726 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00025 Fmt 6652 Sfmt 6201 E:\BILLS\H2657.IH H2657 |
|---|
| 727 | 727 | | ssavage on LAPJG3WLY3PROD with BILLS 26 |
|---|
| 728 | 728 | | •HR 2657 IH |
|---|
| 729 | 729 | | (3) preempt the applicability of any State law 1 |
|---|
| 730 | 730 | | to the extent that the law relates to acts of fraud, 2 |
|---|
| 731 | 731 | | unauthorized access to personal information, or noti-3 |
|---|
| 732 | 732 | | fication of unauthorized access to personal informa-4 |
|---|
| 733 | 733 | | tion. 5 |
|---|
| 734 | 734 | | SEC. 7. EFFECTIVE DATE. 6 |
|---|
| 735 | 735 | | This Act shall take effect on the date on which the 7 |
|---|
| 736 | 736 | | Commission issues guidance under section 5(b). 8 |
|---|
| 737 | 737 | | Æ |
|---|
| 738 | 738 | | VerDate Sep 11 2014 02:43 Apr 11, 2025 Jkt 059200 PO 00000 Frm 00026 Fmt 6652 Sfmt 6301 E:\BILLS\H2657.IH H2657 |
|---|
| 739 | 739 | | ssavage on LAPJG3WLY3PROD with BILLS |
|---|