<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="billres.xsl"?>
<!DOCTYPE bill PUBLIC "-//US Congress//DTDs/bill.dtd//EN" "bill.dtd">
<bill bill-stage="Introduced-in-Senate" dms-id="A1" public-private="public" slc-id="S1-LYN23365-3N9-CY-WRS">
<metadata xmlns:dc="http://purl.org/dc/elements/1.1/">
<dublinCore>
<dc:title>118 S1876 IS: Platform Accountability and Transparency Act</dc:title>
<dc:publisher>U.S. Senate</dc:publisher>
<dc:date>2023-06-08</dc:date>
<dc:format>text/xml</dc:format>
<dc:language>EN</dc:language>
<dc:rights>Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.</dc:rights>
</dublinCore>
</metadata>
<form>
<distribution-code display="yes">II</distribution-code>
<congress>118th CONGRESS</congress><session>1st Session</session>
<legis-num>S. 1876</legis-num>
<current-chamber>IN THE SENATE OF THE UNITED STATES</current-chamber>
<action>
<action-date date="20230608">June 8, 2023</action-date>
<action-desc><sponsor name-id="S337">Mr. Coons</sponsor> (for himself, <cosponsor name-id="S373">Mr. Cassidy</cosponsor>, <cosponsor name-id="S311">Ms. Klobuchar</cosponsor>, <cosponsor name-id="S287">Mr. Cornyn</cosponsor>, <cosponsor name-id="S341">Mr. Blumenthal</cosponsor>, and <cosponsor name-id="S401">Mr. Romney</cosponsor>) introduced the following bill; which was read twice and referred to the <committee-name committee-id="SSCM00">Committee on Commerce, Science, and Transportation</committee-name></action-desc>
</action>
<legis-type>A BILL</legis-type>
<official-title>To support research about the impact of digital communication platforms on society by providing privacy-protected, secure pathways for independent research on data held by large internet companies.</official-title>
</form>
<legis-body display-enacting-clause="yes-display-enacting-clause" id="H3368EC82A7D843FC8E9F049226194574">
<section section-type="section-one" id="S1"><enum>1.</enum><header>Short title; table of contents</header>
<subsection id="idAA92BF59B6844C7D84350EBA38CC0707"><enum>(a)</enum><header>Short title</header><text display-inline="yes-display-inline">This Act may be cited as the <quote><short-title>Platform Accountability and Transparency Act</short-title></quote>.</text></subsection> <subsection id="idF68A3775F5014660890D609C6305F94F"><enum>(b)</enum><header>Table of contents</header><text>The table of contents for this Act is as follows:</text>
<toc>
<toc-entry level="section" idref="S1">Sec. 1. Short title; table of contents.</toc-entry>
<toc-entry level="section" idref="id8c78971e509f45cca8710654a65b67e7">Sec. 2. Definitions.</toc-entry>
<toc-entry level="section" idref="ide3bbc9beee014a4f885ed86f6708f637">Sec. 3. Qualified research projects, qualified researchers, and qualified data and information.</toc-entry>
<toc-entry level="section" idref="id3477e045423644d8afb8a7e83e2ab57d">Sec. 4. Obligations and immunity for platforms.</toc-entry>
<toc-entry level="section" idref="id283a4194ec3940f09c7a7e0f1eb3cf5a">Sec. 5. Obligations and immunity for qualified researchers.</toc-entry>
<toc-entry level="section" idref="id1a5d291cfc744403834d82642a78b8f4">Sec. 6. Reporting.</toc-entry>
<toc-entry level="section" idref="id398d1bd101d44625a5aff71be67cbcf2">Sec. 7. Enforcement.</toc-entry>
<toc-entry level="section" idref="idbc20f5f96ae64cfa977972476bd5a270">Sec. 8. Establishing a safe harbor for research on social media platforms.</toc-entry>
<toc-entry level="section" idref="id058DC41D2F27402882F730E0DE93B809">Sec. 9. Rulemaking authority.</toc-entry>
<toc-entry level="section" idref="id5C22A6EDDCC846C89FE37D8BB0400D3C">Sec. 10. Authorization of appropriations.</toc-entry>
<toc-entry level="section" idref="idcbcfc6a6ab4f4b09af0fa256fe55d42a">Sec. 11. Severability.</toc-entry></toc></subsection></section>
<section id="id8c78971e509f45cca8710654a65b67e7"><enum>2.</enum><header>Definitions</header><text display-inline="no-display-inline">In this Act:</text> <paragraph id="id077293d395d24b7695946f94710b6c9c"><enum>(1)</enum><header>Commission</header><text>The term <term>Commission</term> means the Federal Trade Commission.</text></paragraph>
<paragraph id="id40c32082da7a4fe78c84022798d343e0"><enum>(2)</enum><header>Chair</header><text>The term <term>Chair</term> means the Chair of the Federal Trade Commission.</text></paragraph> <paragraph id="id7516bc5b85a944fba2b3d6c3969f28a0"><enum>(3)</enum><header>NSF</header><text>The term <term>NSF</term> means the National Science Foundation.</text></paragraph>
<paragraph id="id86200269FEBF42548132627B5E2815D8"><enum>(4)</enum><header>Personal information</header><text>The term <term>personal information</term> means any information, regardless of how the information is collected, inferred, or obtained that is linked or reasonably linkable to a specific consumer or consumer device.</text></paragraph> <paragraph id="id7d572584f5434f24ba5432d4784e6db2"><enum>(5)</enum><header>Platform</header><text>The term <term>platform</term> means any entity subject to the jurisdiction of the Federal Trade Commission under section 5(a)(2) of the Federal Trade Commission Act (<external-xref legal-doc="usc" parsable-cite="usc/15/45">15 U.S.C. 45(a)(2)</external-xref>) that—</text>
<subparagraph id="id55bfe8b35a3b428c8b9460fe7a416cf3"><enum>(A)</enum><text>operates a website, desktop application, augmented or virtual reality application, or mobile application that—</text> <clause id="idE839FAD605A34AA38E61ECA540B9AB57"><enum>(i)</enum><text>permits a person to become a registered user, establish an account, or create a profile for the purpose of allowing the user to create, share, and view user-generated content through such an account or profile;</text></clause>
<clause id="ide7edbf41bd534a81b75592cfa5207e2d"><enum>(ii)</enum><text>enables one or more users to generate content that can be viewed by other users of the platform; and</text></clause> <clause id="ida5c79ab7e2d74f14bd3dc0d67ec36dba"><enum>(iii)</enum><text>primarily serves as a medium for users to interact with content generated by other users of the platform and for the platform to deliver ads to users; and </text></clause></subparagraph>
<subparagraph id="idd86f138c328f421f8cd1871396ac5b59"><enum>(B)</enum><text>has at least 50,000,000 unique monthly users in the United States for a majority of the months in the most recent 12-month period.</text></subparagraph></paragraph> <paragraph id="id65eb6eb072884410b59d49b333cf0691"><enum>(6)</enum><header>Qualified data and information</header> <subparagraph id="idF020ABE790B542A3848FF393E2B93F58"><enum>(A)</enum><header>In general</header><text>Subject to subparagraph (B), the term <term>qualified data and information</term> means data and information from a platform— </text>
<clause id="id312656A86D154E94A41E0BDFFA2D8056"><enum>(i)</enum><text>that the NSF determines is necessary to allow a qualified researcher to carry out a qualified research project; and</text></clause> <clause id="id13B1D856B7DE4E01A06396C5CAEB2C86"><enum>(ii)</enum><text>that—</text>
<subclause id="idf8cbc529049c42369bb352371102d3ed"><enum>(I)</enum><text>is feasible for the platform to provide;</text></subclause> <subclause id="id0b5b1b93c9024cd586e148e1448fe402"><enum>(II)</enum><text>is proportionate to the needs of the qualified researchers to complete the qualified research project;</text></subclause>
<subclause id="id68aa275a62e14e0fa2e9c40467e75adc"><enum>(III)</enum><text>will not cause the platform undue burden in providing the data and information to the qualified researcher; and</text></subclause> <subclause commented="no" display-inline="no-display-inline" id="id61018dbc20f945fe9d1b5f63500142e3"><enum>(IV)</enum><text>would not be otherwise available to the qualified researcher.</text></subclause></clause></subparagraph>
<subparagraph id="id20AE73014EC8430FB15C4FC5DC1D48F3"><enum>(B)</enum><header>Exclusions</header><text>Such term does not include any of the following:</text> <clause id="id4E029AB5F01D48E8A2B71C36AE2082BB"><enum>(i)</enum><text>Direct and private messages between users.</text></clause>
<clause id="id94AB3A0D18D745579A2148AF4E0312B3"><enum>(ii)</enum><text>Biometric information, such as a fingerprint, voiceprint, eye retinas, irises, or other unique biological patters or characteristics. </text></clause> <clause id="idCF753FEF209E4A1CA57B2869D74BD8DF"><enum>(iii)</enum><text>Precise geospatial information.</text></clause></subparagraph></paragraph>
<paragraph id="idba597238a37a48cf93007d359e99ff26"><enum>(7)</enum><header>Qualified researcher</header>
<subparagraph id="idDFA1DE8F78B24F61B6672B7CC2694497"><enum>(A)</enum><header>In general</header><text>Subject to subparagraph (B), the term <term>qualified researcher</term> means a researcher affiliated with a United States university or a United States nonprofit organization (as described in <external-xref legal-doc="usc" parsable-cite="usc/26/501">section 501(c)</external-xref> of the Internal Revenue Code of 1986) that is specifically identified in a research proposal that is approved as a qualified research project pursuant to section 3.</text></subparagraph> <subparagraph id="id3ECE1449B8D14D4693616AF031053BE2"><enum>(B)</enum><header>Exclusion</header><text>Such term does not include a researcher who is affiliated with a Federal, State, local, or tribal law enforcement or intelligence agency.</text></subparagraph></paragraph>
<paragraph id="idd9e51a2ecf154afea1ed3bedf089fca9"><enum>(8)</enum><header>Qualified research project</header><text>The term <term>qualified research project</term> means a research plan that has been approved pursuant to section 3.</text></paragraph> <paragraph id="ide9c9ad7e1bca40de92c2ecb028c44df7"><enum>(9)</enum><header>State</header><text>The term <term>State</term> means each of the 50 States of the United States, the District of Columbia, Puerto Rico, the Virgin Islands, American Samoa, Guam, and the Northern Mariana Islands.</text></paragraph>
<paragraph id="id79fec6a97053430189559a3ba0baa990"><enum>(10)</enum><header>User</header><text>The term <term>user</term> means a person that uses a platform for any purpose, including advertisers and sellers, regardless of whether that person has an account or is otherwise registered with the platform.</text></paragraph></section> <section id="ide3bbc9beee014a4f885ed86f6708f637"><enum>3.</enum><header>Qualified research projects, qualified researchers, and qualified data and information</header> <subsection id="id6e9f713aa9f04328838c9c1388cadbb8"><enum>(a)</enum><header>Establishment</header><text>Not later than 1 year after the date of enactment of this Act, the NSF shall establish, in consultation with the Commission, a research program to review research applications for approval as qualified research projects.</text></subsection>
<subsection id="idfeaf9693caaf46efae8ab5a271fc017c"><enum>(b)</enum><header>Research program requirements</header><text>The research program established by the NSF and the Commission under this section shall—</text> <paragraph id="id70cf6598a8c549ddab63a16556349819"><enum>(1)</enum><text>provide that the NSF shall—</text>
<subparagraph id="id03d0fa1851114cc998ed5999415c9927"><enum>(A)</enum><text>establish a process to solicit research applications in order to identify qualified research projects;</text></subparagraph> <subparagraph id="id825956c6b1eb4ac9a0e26f5e2d511aa7"><enum>(B)</enum><text>review research applications for scientific merit;</text></subparagraph>
<subparagraph id="id5ee4247d4dad46919f53b0b7bdbe47ae"><enum>(C)</enum><text>ensure research applications identify proposed qualified researchers;</text></subparagraph> <subparagraph id="idaad7cebedcb44fef9c906befb2425d94"><enum>(D)</enum><text>publish guidelines and criteria to be used by the NSF in determining how it will review research applications seeking approval to be a qualified research project;</text></subparagraph>
<subparagraph id="id9857fbfb47124b68aae5e560be3587e5"><enum>(E)</enum><text>identify, in consultation with the Commission, what data and information in a platform’s possession will be qualified data and information for the purposes of carrying out a qualified research project;</text></subparagraph> <subparagraph id="id3c84f7c4819c4bda84a4c2a90f5dfae0"><enum>(F)</enum><text>ensure that approved research applications do not request data described in section 2(6)(B); and</text></subparagraph>
<subparagraph id="id873C8FB74775427A8C4573F46F8E68D7"><enum>(G)</enum><text>prescribe and publish guidelines and criteria, in consultation with the Commission, used to determine how the NSF and Commission will identify qualified data and information necessary to conduct a qualified research project;</text></subparagraph></paragraph> <paragraph id="id6E19EF4DEFFD491A95C095785402916C"><enum>(2)</enum><text>provide that the Commission shall—</text>
<subparagraph id="ida28eb582baec4807adf7fa0e27ff419f"><enum>(A)</enum><text>review research applications for privacy and cybersecurity risks; </text></subparagraph> <subparagraph id="idA3AA3397D5094B71A0053003ED0261DD"><enum>(B)</enum><text>for each qualified research project, establish appropriate privacy and cybersecurity safeguards that a platform must implement in the provision of, and with which qualified researchers must comply to access, qualified data and information that a platform is required to share with qualified researchers pursuant to a qualified research project, and such safeguards—</text>
<clause id="id82D323CFD92F466ABEFE4A4CD12AF5A6"><enum>(i)</enum><text>must account for the relative sensitivity of the qualified data and information involved and be sufficient to protect such data and information; and</text></clause> <clause id="idCE8C870AA44D429AAD4EB29240AF8BC1"><enum>(ii)</enum><text>may include alternative protections, as appropriate and in consideration of the aims of the qualified research project, including—</text>
<subclause id="ideade4ce87bce4f07875d19e8ef54812c"><enum>(I)</enum><text>encryption of the data in transit and when not in use;</text></subclause> <subclause id="idc35d69136d3a47e18756b01b33d951bf"><enum>(II)</enum><text>delivery of the data in a format that employs methods to prevent qualified researchers from identifying individuals in the dataset; </text></subclause>
<subclause id="id49AE4C1CCBF14BD49BC607CCDE752390"><enum>(III)</enum><text>data access logs; and</text></subclause> <subclause id="id314A7B9412BE4B10BAA803792FD58340"><enum>(IV)</enum><text>keystroke logs;</text></subclause></clause></subparagraph>
<subparagraph id="id3335479217934dfaa6a1b719774e613f"><enum>(C)</enum><text>in the case of each qualified research project, consider whether to require the platform to provide a secure physical or virtual environment to facilitate delivery of the qualified data and information;</text></subparagraph> <subparagraph id="id7D998039EE6142F6BDBAE0061E80C310"><enum>(D)</enum><text>establish appropriate privacy and cybersecurity safeguards that a qualified researcher must implement when receiving, storing, or analyzing qualified data and information or generating new data using such qualified data and information, including inferential data based on such qualified data and information, and such safeguards may include a requirement that a qualified researcher delete qualified data and information after completion of a qualified research project, however any such safeguard must provide the qualified researcher the ability to retain enough information about the qualified data and information to allow the researcher or their peers to recreate the qualified research project upon request to, and approval from, the NSF and Commission pursuant to this section;</text></subparagraph>
<subparagraph id="id6AD052CB190D490B9521841F82A7EE07"><enum>(E)</enum><text>publish a list of criteria for determining the privacy and cybersecurity safeguards required for qualified data and information related to a qualified research project;</text></subparagraph> <subparagraph id="ideb5bd6bb0c6c4ce3a8a3d8c4524c725a"><enum>(F)</enum><text>provide a platform that is the subject of a qualified research project with the opportunity to provide comment about the privacy and cybersecurity safeguards required for the qualified research project;</text></subparagraph>
<subparagraph id="id5c56d0872ac24eaeb32c2fbe770a3479"><enum>(G)</enum><text>provide researchers with the opportunity to provide comment about the privacy and cybersecurity safeguards required for a qualified research project; </text></subparagraph> <subparagraph id="id2ef0214a815c4109a1f7bcaafe21d45b"><enum>(H)</enum><text>establish a process to ensure that qualified researchers will be able to comply with any such privacy and cybersecurity safeguards; and</text></subparagraph>
<subparagraph id="id159147ce3e104e8e9907934cd715bf46"><enum>(I)</enum><text>publish a list of criteria for determining whether qualified researchers will be able to comply with any such privacy and cybersecurity safeguards;</text></subparagraph></paragraph> <paragraph id="id75abe6c1e39e4b9db76f0291331c77b3"><enum>(3)</enum><text>provide that a research application may not be denied on grounds of the race, color, age, sex, national origin, political affiliation, or disability of the researcher;</text></paragraph>
<paragraph id="id04b1918dc3804f3c99b2887d30c88a70"><enum>(4)</enum><text>provide that a research application shall not be approved as a qualified research project unless it— </text> <subparagraph id="id35A28CB8AEF64D9688F5D16CD4B3655D"><enum>(A)</enum><text>has been approved by an institutional review board;</text></subparagraph>
<subparagraph id="idF908EADC6DCD4542A3DBAF66E71D5A27"><enum>(B)</enum><text>has been deemed exempt from institutional review board review; or </text></subparagraph> <subparagraph id="id87199D61E5B6456AB4917FB1CB1ED08F"><enum>(C)</enum><text>is excluded from the criteria for institutional review board review;</text></subparagraph></paragraph>
<paragraph id="idf2fdb71b9f5f4b88a1aa3a1a37a4e1be"><enum>(5)</enum><text>provide a platform the opportunity to comment on and appeal to the NSF and the Commission the approval of a qualified research project for which the platform is required to provide qualified data and information to qualified researcher the grounds that—</text> <subparagraph id="id160b499e831448e3a9095b1c37602117"><enum>(A)</enum><text>the platform cannot provide the qualified data and information;</text></subparagraph>
<subparagraph id="id2f45b42c3ec4450bb1511e97b81a002b"><enum>(B)</enum><text>providing access to the qualified data and information would lead to significant vulnerabilities in the security of the platform’s service or user privacy; or</text></subparagraph> <subparagraph id="idb3fe15fc229a4fbc902b457815479825"><enum>(C)</enum><text>the privacy and cybersecurity safeguards established by the Commission are not sufficient to protect the qualified data and information; and</text></subparagraph></paragraph>
<paragraph id="id0fa50f4c1ec243bc9a1828a14c21335a"><enum>(6)</enum><text>require that any analysis by a qualified researcher derived from a qualified research project that the qualified researcher intends to publish undergo prepublication review by the Commission to ensure that the analysis does not expose personal information, or trade secrets.</text></paragraph></subsection> <subsection id="id3aef1b3b7b0540fdb6eed64310c0ae20"><enum>(c)</enum><header>Qualified researcher capacity</header><text>A qualified research project may not proceed unless the proposed qualified researchers can demonstrate that they have the capacity to comply with the privacy and cybersecurity safeguards established for the qualified research project.</text></subsection>
<subsection id="ida2051b816c8d4f589827e5c8373281aa"><enum>(d)</enum><header>Aim of project</header><text>A research application shall not be approved as a qualified research project unless it is in the public interest, aims to study activity on a platform, and is used for noncommercial purposes.</text></subsection> <subsection id="idcc773e7b4aaa4283a566903e2f910868"><enum>(e)</enum><header>No judicial review</header><text>A determination by the Commission or the NSF under this section regarding whether a research application will be deemed a qualified research project shall not be subject to judicial review.</text></subsection>
<subsection id="id02619ac723fb4e818a1fd954a7ab8631"><enum>(f)</enum><header>No government access</header><text>If a platform provides qualified data and information to a qualified researcher, no government entity may seek access to such qualified data and information from the qualified researcher.</text></subsection> <subsection id="id94fea2132fa44daa97f855a2856ba86d"><enum>(g)</enum><header>Researcher consortia</header><text>The Commission and NSF shall establish procedures and necessary safeguards under this section that allow for consortia of researchers to apply to seek data for the purpose of conducting a series of qualified research projects. </text></subsection></section>
<section id="id3477e045423644d8afb8a7e83e2ab57d"><enum>4.</enum><header>Obligations and immunity for platforms</header>
<subsection id="id887d99d0f5ae438295893c9f5b552b02"><enum>(a)</enum><header>Provision of qualified data and information</header><text>A platform shall provide access to qualified data and information relating to a qualified research project to a qualified researcher under the terms and privacy and cybersecurity safeguards dictated by the Commission pursuant to section 3 for the purpose of carrying out the qualified research project.</text></subsection> <subsection id="idb7156a0c70394129b8d81d92d1dbe9c1"><enum>(b)</enum><header>Continued access to qualified data and information</header> <paragraph id="idAD000E47B524465D9FC3B76D71115EC4"><enum>(1)</enum><header>In general</header><text>A platform may not restrict or terminate a qualified researcher’s access to qualified data and information for an ongoing qualified research project unless the platform has a reasonable belief that the qualified researcher is not acting in accordance with the cybersecurity and privacy safeguards required for the qualified research project pursuant to section 3.</text></paragraph>
<paragraph id="id70940AD2D7284B319C173E2DD8D8D48D"><enum>(2)</enum><header>Notice and review of change to access</header><text>If a platform restricts or terminates a qualified researcher's access to qualified data and information for an ongoing qualified research project—</text> <subparagraph id="id9DDFCAFB8F0F4B34B2C266734C700DC8"><enum>(A)</enum><text>the platform shall, within a reasonable time (as established by the Commission, inform the Commission in writing that the platform has restricted or terminated the qualified researcher's access to the qualified data and information; and</text></subparagraph>
<subparagraph id="idC5E7057928A84BD793DC3E85A6A776F2"><enum>(B)</enum><text>the Commission shall promptly review the platform's decision and determine whether the qualified researcher has violated the privacy and cybersecurity safeguards established for the qualified research project.</text></subparagraph></paragraph></subsection> <subsection id="id480d064c42764bbfa2c0d7ecec4a8d94"><enum>(c)</enum><header>Notice to platform users</header><text>The Commission shall issue regulations requiring that platforms, through posting of notices or other appropriate means, keep users informed of their privacy protections and the information that the platform is required to share with qualified researchers under this Act.</text></subsection>
<subsection id="id7b1ee01d60ac442eab1d221112e67d41"><enum>(d)</enum><header>Safe harbor</header><text>No cause of action under State or Federal law arising solely from the release of qualified data and information to qualified researchers in furtherance of a qualified research project may be brought against any platform that complies with the Act.</text></subsection> <subsection id="id4577d4686a8d40e09ad38708d71ab59c"><enum>(e)</enum><header>Right of review</header><text>If a platform fails to provide all of the qualified data and information required under the terms of a qualified research project to the qualified researcher conducting the project, the qualified researcher or the researcher's affiliated university or non-profit organization may bring an action in district court for injunctive relief or petition the Commission to bring an enforcement action against the platform.</text></subsection>
<subsection id="ide8a687afbd234b32a18e25f41c3cc37e"><enum>(f)</enum><header>Security</header><text>Nothing in this Act shall be construed to restrict a platform’s ability to:</text> <paragraph id="id5e258d3718d04137b2fb0783222caa35"><enum>(1)</enum><text>Take immediate steps to protect an interest that is essential for the life or physical safety of a natural person.</text></paragraph>
<paragraph id="id23ebc16cd84545e5911d315a8e03c1fe"><enum>(2)</enum><text>Respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities, or illegal activity, preserve the integrity of security of systems, or investigate or report those responsible for such actions. </text></paragraph></subsection></section> <section id="id283a4194ec3940f09c7a7e0f1eb3cf5a"><enum>5.</enum><header>Obligations and immunity for qualified researchers</header> <subsection id="id95b360ee9bec48fbb51311e7ece03bf9"><enum>(a)</enum><header>Scope of permitted use of qualified data and information</header><text>Each qualified researcher who accesses qualified data and information shall use the qualified data and information— </text>
<paragraph id="id17E665910EA3425B9E8CC10D235E35E2"><enum>(1)</enum><text>only for the purposes of conducting research authorized under the terms of the qualified research project involved; and </text></paragraph> <paragraph id="id9CA9A035940443EEA0CCD36F98539615"><enum>(2)</enum><text>in accordance with the privacy and cybersecurity safeguards prescribed by the Commission for the qualified research project.</text></paragraph></subsection>
<subsection id="id3b356d41010e458d805c298ad8f4bbdb"><enum>(b)</enum><header>Protection of personal information</header><text>A qualified researcher that is provided access to qualified data and information for purposes of a qualified research project may not— </text> <paragraph id="id36327454BBB54B87A3A967DAEC722F9D"><enum>(1)</enum><text>attempt to reidentify, disclose, publish, or use for commercial purpose personal information derived from such qualified data and information; or</text></paragraph>
<paragraph id="id58864E4FBC474BB8825505970A95D8D7"><enum>(2)</enum><text>disclose such qualified data and information to a third party for any reason.</text></paragraph></subsection> <subsection id="id4de01abdd22e4b7585e2779761fc408f"><enum>(c)</enum><header>Effect of violation of information and privacy standards</header><text>Qualified researchers who intentionally, recklessly, or negligently violate the privacy and cybersecurity safeguards prescribed by the Commission for a qualified research project may be subject to both civil and criminal enforcement, under applicable Federal, State, and local laws. The Commission may refer any such violation to the Department of Justice or the appropriate State law enforcement agency.</text></subsection></section>
<section id="id1a5d291cfc744403834d82642a78b8f4"><enum>6.</enum><header>Reporting</header><text display-inline="no-display-inline">Not later than 24 months after the date of enactment of this Act, and annually thereafter, the NSF and the Commission shall submit to the Congress a joint report regarding the operation of this Act, which shall include a detailed statement of all qualified research projects, including with respect to each such project:</text> <paragraph id="id4e9aa885cd8e40469309a3a3b01509d0"><enum>(1)</enum><text>The identity of any authorized qualified researcher and the institution the researcher is affiliated with.</text></paragraph>
<paragraph id="ida4a10290ea824b1a900eab093a5e91b7"><enum>(2)</enum><text>The platforms required to provide qualified data and information to qualified researchers.</text></paragraph> <paragraph id="idd9ddd7dd8457458ea1a467b21d2c5aee"><enum>(3)</enum><text>The categories of qualified data and information each platform was required to provide.</text></paragraph>
<paragraph id="id505eefc4e8e34025915283fa44df3627"><enum>(4)</enum><text>The terms of the privacy and cybersecurity safeguards prescribed by the Commission to ensure the security of the qualified data and information.</text></paragraph> <paragraph id="idb8708db1af9d4e7d91f57f45e684898d"><enum>(5)</enum><text>Any recommendations for improvements to the operation of this Act in order to facilitate its aim of providing enhanced platform transparency.</text></paragraph></section>
<section id="id398d1bd101d44625a5aff71be67cbcf2"><enum>7.</enum><header>Enforcement</header>
<subsection id="ide59324db45c046a683f9dad30fb6a2ff"><enum>(a)</enum><header>Unfair or deceptive act or practice</header>
<paragraph id="id8B8DC2ABB2E5433FBB00DA41A85BD8D0"><enum>(1)</enum><header>In general</header><text>A platform's failure to comply with subsection (a) or (b) of section 4, or a qualified researcher's failure to comply with subsection (a) or (b) of section 5, shall be treated as a violation of a rule defining an unfair or deceptive act or practice prescribed under section 18(a)(1)(B) of the Federal Trade Commission Act (<external-xref legal-doc="usc" parsable-cite="usc/15/57a">15 U.S.C. 57a(a)(1)(B)</external-xref>).</text></paragraph> <paragraph id="idB277FD7D0AAD476699A5FE7E2E2EFBBB"><enum>(2)</enum><header>Powers of the Commission</header> <subparagraph id="id9484b97a0d9f4119ac0eeb0f7af23ad6"><enum>(A)</enum><header>In general</header><text>The Commission shall enforce the provisions of this Act specified in paragraph (1) in the same manner, by the same means, and with the same jurisdiction, powers, and duties as though all applicable terms and provisions of the Federal Trade Commission Act (<external-xref legal-doc="usc" parsable-cite="usc/15/41">15 U.S.C. 41 et seq.</external-xref>) were incorporated into and made a part of this section.</text></subparagraph>
<subparagraph id="id15c75f69e23d40db840e55e37bf2937b"><enum>(B)</enum><header>Privileges and immunities</header><text>Any person that violates the provisions of this Act specified in paragraph (1) shall be subject to the penalties, and entitled to the privileges and immunities, provided in the Federal Trade Commission Act (<external-xref legal-doc="usc" parsable-cite="usc/15/41">15 U.S.C. 41 et seq.</external-xref>).</text></subparagraph> <subparagraph id="idb2d527bcf1c34eadbfc1d39b5ce31b61"><enum>(C)</enum><header>Rule of construction</header><text>Nothing in this Act shall be construed to limit the authority of the Commission under any other provision of law. </text></subparagraph></paragraph></subsection>
<subsection id="ida6e11ed67d8b43e8816f17b859e61472"><enum>(b)</enum><header>Regulations</header><text>The Commission shall have the authority to promulgate, in the manner prescribed by <external-xref legal-doc="usc" parsable-cite="usc/5/553">5 U.S.C. 553</external-xref>, such rules and regulations as it may deem necessary to carry out its responsibilities under this Act.</text></subsection> <subsection id="idae322e91581f45078283ec5c38f19493"><enum>(c)</enum><header>Attorney's fees and other costs</header><text>In the event any enforcement action is appealed, the prevailing party in the action may, in the discretion of the court, recover the costs of the action including reasonable investigative costs and attorneys' fees.</text></subsection></section>
<section id="idbc20f5f96ae64cfa977972476bd5a270"><enum>8.</enum><header>Establishing a safe harbor for research on social media platforms</header>
<subsection id="id762b0cd432604f029f0edcf890cdb91c"><enum>(a)</enum><header>In general</header><text>No civil claim will lie, nor will any criminal liability accrue, against any person for collecting covered information as part of a news-gathering or research project on a platform, so long as—</text> <paragraph id="id3cd968e6c6b047559e5344f129b34200"><enum>(1)</enum><text>the information is collected through a covered method of digital investigation;</text></paragraph>
<paragraph id="idc86945dca2fe4b1b8b42b3f6b653d18e"><enum>(2)</enum><text>the purpose of the project is to inform the general public about matters of public concern;</text></paragraph> <paragraph id="idf417faa25b2143c090727b389fa80328"><enum>(3)</enum><text>with respect to information that is collected through a covered method of digital investigation—</text>
<subparagraph id="idC9CE49B9E75246629E83B594C4A666EB"><enum>(A)</enum><text>the information is not used except to inform the general public about matters of public concern; and</text></subparagraph> <subparagraph id="id347543D14ADF42D4818A5203EA6E5FBB"><enum>(B)</enum><text>the person takes reasonable measures to protect the privacy of the platform's users;</text></subparagraph></paragraph>
<paragraph id="id9f027bfe6ac7478aaa6dce0254de0cc1"><enum>(4)</enum><text>with respect to the creation and use of a research account, the person takes reasonable measures to avoid misleading the platform’s users; and</text></paragraph> <paragraph id="id4c62235601414f96a12f9bed884cbd93"><enum>(5)</enum><text>the project does not materially burden the technical operation of the platform.</text></paragraph></subsection>
<subsection id="id4a40c0fe984c4bcd91e983d0ef91bc4d"><enum>(b)</enum><header>Regulations</header><text>No later than 1 year after the date of the enactment of this Act, the Commission shall promulgate regulations under section 553 of title 5—</text> <paragraph id="id3f970d1367904b4d9734887f9b8beeb5"><enum>(1)</enum><text>defining <quote>covered method of digital investigation,</quote> which phrase, as defined, must encompass—</text>
<subparagraph id="idd79a29b8ac184eb0b75cfa4a2aca863b"><enum>(A)</enum><text>the collection of information from a platform's user-facing interface through automated means;</text></subparagraph> <subparagraph id="id004cba9bfcd945e397afae5b00c6ab6d"><enum>(B)</enum><text>the collection of information donated by a user, including through a browser extension or plug-in, where the donation is in connection with the project and with the user's explicit consent; and</text></subparagraph>
<subparagraph id="ide4b20c3a6acb472db645a6cd48956795"><enum>(C)</enum><text>the creation or use of research accounts;</text></subparagraph></paragraph> <paragraph id="id764a8c20d8b147b09f6f550163acd7f1"><enum>(2)</enum><text>defining <quote>covered information,</quote> which phrase, as defined, must encompass—</text>
<subparagraph id="idf304614d55dd491989f4c8a0c656a368"><enum>(A)</enum><text>publicly available information, except that such term should not exclude information merely because an individual must log into an account in order to see it;</text></subparagraph> <subparagraph id="id5aefac2eaad5463191fbc7491c7fb599"><enum>(B)</enum><text>information about ads shown on the platform, including the ads themselves, the advertiser’s name and disclosure string, and information the platform provides to users about how an ad was targeted; and</text></subparagraph>
<subparagraph id="id8579ffb840044bb9be1be08912c84d85"><enum>(C)</enum><text>any other category of information the collection of which the Commission determines, consistent with paragraph (3), will not unduly burden user privacy;</text></subparagraph></paragraph> <paragraph id="id6ba17e19f108401e92603bb2eed749f7"><enum>(3)</enum><text>defining <quote>reasonable measures to protect the privacy of the platform’s users</quote> under subsection (a)(3), including by specifying the measures that must be taken to—</text>
<subparagraph id="id7c4efd82431f4df982f31e54eff330bd"><enum>(A)</enum><text>avoid the collection and retention of non-public information that would readily identify a user without that user's consent;</text></subparagraph> <subparagraph id="id8646069FEB6941DDAD853389E6CD8863"><enum>(B)</enum><text>prevent the theft and accidental disclosure of any information collected;</text></subparagraph>
<subparagraph id="id740262364db544a8bac1340de412bf92"><enum>(C)</enum><text>ensure that the information at issue is not used for any purpose other than to inform the general public about matters of public concern; and</text></subparagraph> <subparagraph id="id1955b8aaa06144f3a8fdf1431e2b52fa"><enum>(D)</enum><text>restrict the publication or other disclosure of any information that would readily identify a user without the user's consent, except when such user is— </text>
<clause id="id3ACC3D9E4DE34D159E62D36084601896"><enum>(i)</enum><text>an advertiser and the data concerns an advertisement; or</text></clause> <clause id="id8F8E40F3D7554D7B99844814AF95AB6E"><enum>(ii)</enum><text>a public official, candidate for public office, or public figure;</text></clause></subparagraph></paragraph>
<paragraph id="id946a945257844ca892fe7b18592c2b17"><enum>(4)</enum><text>defining <quote>reasonable measures to avoid misleading the platform’s users</quote> under subsection (a)(4); and</text></paragraph> <paragraph id="id609faa77bf9245ef83534f8c23a1af63"><enum>(5)</enum><text>defining <quote>materially burden the technical operation of a platform</quote> under subsection (a)(5).</text></paragraph></subsection>
<subsection id="idf34adb71521545d38615a49891b32416"><enum>(c)</enum><header>Amendment of regulations</header><text>The Commission may, as necessary, amend regulations promulgated pursuant to subsection (b) to the extent such amendment will accomplish the purposes of this section.</text></subsection> <subsection id="id040cb4aa92e74b60baca9b92d6b47830"><enum>(d)</enum><header>Reporting</header><text>In December of each calendar year beginning with calendar year 2024, the Commission shall require each operator of any platform to submit an annual report to the Commission that addresses whether the measures prescribed under subsections (b)(3) and (b)(4) of this section are adequately protecting the platform’s users.</text></subsection>
<subsection id="id8A281CD9B9A54D26A0076DC451457CC5"><enum>(e)</enum><header>Definition of research account</header><text>For purposes of this section, the term <term>research account</term> means an account on a platform that is created and used solely for the purposes of a news-gathering or research project that meets the requirements of subsection (a) and for no longer than is necessary to complete such project.</text></subsection></section> <section id="id058DC41D2F27402882F730E0DE93B809"><enum>9.</enum><header>Rulemaking authority</header> <subsection id="id2C77759C06E2446F83A2E9C8C0501DCF"><enum>(a)</enum><header>Additional reporting requirements</header> <paragraph id="idED762C4293EE4C829AAFDB423FBAF2F2"><enum>(1)</enum><header>In general</header><text>In consultation with the NSF, the Commission may, in accordance with section 553 of title 5, United States Code, and subject to subsection (g), issue regulations that require platforms to make available to qualified researchers data, metrics, or other information that the Commission determines will facilitate independent research in the public interest into activity on platforms.</text></paragraph>
<paragraph id="id443B1554DFFD457B9C8B83D1F77623B3"><enum>(2)</enum><header>Factors</header><text>In exercising its authority under this subsection, the Commission shall consider the extent to which disclosures under this subsection may facilitate collaboration amongst qualified researchers and alleviate burdens on platforms and qualified researchers as compared to qualified research projects conducted pursuant to section 3.</text></paragraph> <paragraph id="ide85e4b6da18e417786e4ef02418621c3"><enum>(3)</enum><header>Form and frequency; retention of information</header><text>The Commission shall specify in the regulations the required form and frequency of reporting or disclosures, as well as how long data, metrics, or other information should be retained and made available. It may require the information be provided in a form that is accessible for analysis by qualified researchers, such as through an application programming interface.</text></paragraph>
<paragraph id="id1d5fe6ce939b4dd6b804cf97c300a498"><enum>(4)</enum><header>Consultation</header><text>The Commission shall further consult with the National Institutes of Health and other relevant government agencies, as appropriate, in exercising its authority under this subsection. </text></paragraph> <paragraph id="idfbed7a89058c40faacf564a588e6764c"><enum>(5)</enum><header>Applicability of prior sections</header><text>For data made available to qualified researchers under this section, the Commission shall establish privacy and cybersecurity safeguards applicable to platforms and qualified researchers in the manner described in section 3 for data made available under that section. The obligations and immunities for platforms and qualified researchers described in sections 4 and 5 shall apply to data disclosed to qualified researchers under this section, and the provisions of section 7 may be invoked to enforce this section.</text></paragraph></subsection>
<subsection id="id31A7E202C5CD4414BB306112E84E7CA3"><enum>(b)</enum><header>Transparency of certain content and user accounts</header>
<paragraph id="id8e111e5025f04b71ab2e1ef378833ff6"><enum>(1)</enum><header>In general</header><text>Not later than 1 year after the date of enactment of this Act, the Commission shall, in accordance with section 553 of title 5, United States Code, and subject to subsection (g), issue regulations to require platforms to make available to the public on an ongoing basis, in a specific section of their online interface, through a searchable and reliable tool that allows multicriteria queries and through application programming interfaces, a repository containing information regarding reasonably public content on the platform that— </text> <subparagraph id="idFD7820FD9B3E4E3DBCC15FE8DA0E9E6D"><enum>(A)</enum><text>has been highly disseminated; or</text></subparagraph>
<subparagraph id="id0E1C0819F2C9493C9BF39A0C3E9484A7"><enum>(B)</enum><text>was originated or spread by major public accounts.</text></subparagraph></paragraph> <paragraph id="id432965b4a2ea41bdbc0155933592f97c"><enum>(2)</enum><header>Disclosure of public content samplings</header><text>The regulations issued under paragraph (1) shall further require platforms to disclose on an ongoing basis statistically representative samplings of reasonably public content, including, at a minimum, a sampling that is weighted by the number of impressions the content receives.</text></paragraph>
<paragraph id="id19228f5435b3461cbae02332230fca2d"><enum>(3)</enum><header>Required information</header><text>The information required to be disclosed about content described in paragraphs (1) and (2) shall include, as appropriate—</text> <subparagraph id="id24c4f75f4c714a0c9d74db7c84dd5624"><enum>(A)</enum><text>the user-generated content itself, including any text, images, videos, links, and keywords;</text></subparagraph>
<subparagraph id="id54768e675c41431f9c12bba4d2c3e37d"><enum>(B)</enum><text>platform-generated content displayed in connection with the user-generated content, including any dates, labels, disclaimers, or metrics; </text></subparagraph> <subparagraph id="id60694a72134347bb9fea612383bc332b"><enum>(C)</enum><text>metrics about the extent of dissemination of or engagement with the content, including the number of impressions, reach, and engagements;</text></subparagraph>
<subparagraph id="id98b4e85296734379b0ab020af5745d00"><enum>(D)</enum><text>information about the extent to which the content was recommended, amplified, or restricted by platform algorithms or policies;</text></subparagraph> <subparagraph id="id4ac006d7a34d454ca28e314e8717f5d2"><enum>(E)</enum><text>reasonably public information about the user accounts responsible for the content; and</text></subparagraph>
<subparagraph id="id4D10C21B18BF42029AE73CD8C9963A63"><enum>(F)</enum><text>public uniform resource locators that uniquely link to the content and identify related materials such as the parent content, replying content, and cross-posted content.</text></subparagraph></paragraph> <paragraph id="ide55028434ffe4df1806b2847e9093fbb"><enum>(4)</enum><header>Highly disseminated content</header><text>As part of the regulations issued under paragraph (1), the Commission shall define <quote>highly disseminated</quote> according to metrics that the Commission deems appropriate (which may include engagement, views, reach, impressions, or other metrics), provided that a piece of content must have been viewed by at least 10,000 unique users to qualify.</text></paragraph>
<paragraph id="id77e36bd3449f4b21901467942ad72ef8"><enum>(5)</enum><header>Major public accounts</header><text>As part of the regulations issued under paragraph (1), the Commission shall define <quote>major public accounts</quote> as it deems appropriate, provided that, at a minimum, <quote>major public accounts</quote> are restricted to reasonably public accounts whose content is followed by at least 25,000 users or otherwise regularly reaches at least 25,000 users per month.</text></paragraph> <paragraph id="idff6c629dac3c4bb4b745cfabd39c182f"><enum>(6)</enum><header>Treatment of content that has been removed</header><text>The regulations described in paragraph (1) shall provide guidance regarding disclosure of content that is removed by the user or platform subsequent to its dissemination.</text></paragraph>
<paragraph id="idE7F0B9E051B04B958FC9266C01857552"><enum>(7)</enum><header>Frequency</header><text>To the extent practicable, the Commission shall require this information to be updated so as to provide a real-time understanding of the content described in paragraphs (1) and (2).</text></paragraph></subsection> <subsection id="id3E07BA81A3F4422D8898211F99D3CE3A"><enum>(c)</enum><header>Transparency of advertising</header> <paragraph id="idd43b3fc4ec874e30bb40cf477d7c4099"><enum>(1)</enum><header>In general</header><text>Not later than 1 year after the date of enactment of this Act, the Commission shall, in accordance with section 553 of title 5, United States Code, and subject to subsection (g), issue regulations to require platforms to disclose on an ongoing basis information regarding advertising on the platform. These regulations shall require platforms to compile and disclose publicly in a specific section of their online interface, through a searchable and reliable tool that allows multicriteria queries and through application programming interfaces, a repository containing the information referred to in paragraph (2), for the entire period during which they present an advertisement and until one year after the advertisement was presented for the last time on their online interfaces. Platforms shall ensure that the repository does not contain any personal information of the recipients of the service to whom the advertisement was or could have been presented. </text></paragraph>
<paragraph id="id5fa78a9d3d3c4bb89b3a2bbe965278bb"><enum>(2)</enum><header>Information required</header><text>The information required to be included in the repository required under paragraph (1) shall include at least all of the following information:</text> <subparagraph id="id6314703af0d94811af79f0e2ed30f787"><enum>(A)</enum><text>The content of the advertisement, including the name of the product, service or brand and the subject matter of the advertisement.</text></subparagraph>
<subparagraph id="idbaac30e8f99c4b0a8a54dbeb5de104eb"><enum>(B)</enum><text>The natural or legal person on whose behalf the advertisement is presented.</text></subparagraph> <subparagraph id="id7c2dd218d576436a8c51d4ddca50445a"><enum>(C)</enum><text>The natural or legal person who paid for the advertisement, if that person is different from the person referred to in subparagraph (B).</text></subparagraph>
<subparagraph id="id16f7e38ce9aa4ae6987107f68a6dbe9f"><enum>(D)</enum><text>The period during which the advertisement was presented.</text></subparagraph> <subparagraph id="id9df9291c6b204cc4bbd000ef017bd565"><enum>(E)</enum><text>Whether the advertisement was intended to be presented specifically to one or more particular groups of recipients of the service and if so, the main parameters used for that purpose including where applicable the main parameters used to exclude one or more of such particular groups.</text></subparagraph>
<subparagraph id="id0f48bdc69e334cfca69f7515036a2eeb"><enum>(F)</enum><text>The total number of recipients of the service reached and, where applicable, aggregate numbers broken down by group or groups of recipients that the advertisement specifically targeted.</text></subparagraph> <subparagraph id="id304fc556c619496c962b7596c20f7ece"><enum>(G)</enum><text>Information about the extent to which the advertisement was recommended, amplified, or restricted by platform algorithms or policies. </text></subparagraph></paragraph>
<paragraph id="id1f38e8fcfd154f03adf1e968821c5c09"><enum>(3)</enum><header>Treatment of removed ads</header><text>The regulations described in paragraph (1) shall provide guidance regarding disclosure of ads that are removed by the user or platform subsequent to its dissemination.</text></paragraph> <paragraph id="id9104ae6e0c2f4f39828c62e74f4f5789"><enum>(4)</enum><header>Frequency</header><text>To the extent practicable, the Commission shall require this information to be updated so as to provide a real-time understanding of the content described in paragraph (2).</text></paragraph></subsection>
<subsection id="id2BD198BC5F964780A26CF71D48400A8B"><enum>(d)</enum><header>Transparency of algorithms and company metrics and data</header>
<paragraph id="idE5241FD02ADC4DEBB939D23FD1B44580"><enum>(1)</enum><header>In general</header><text>Not later than 1 year after enactment of this Act, the Commission shall, in accordance with section 553 of title 5, United States Code, and subject to subsection (g), issue regulations to require platforms to report publicly on their use of recommender or ranking algorithms and metrics.</text></paragraph> <paragraph id="idf1106d8927404149ad5f8924414ddfb7"><enum>(2)</enum><header>Required information</header><text>The reporting required under paragraph (1) shall be at least semiannual and include, as appropriate—</text>
<subparagraph id="id419f341e4f2445098a73bb9325ee979e"><enum>(A)</enum><text>a description of all consumer-facing product features that made use of recommender or ranking algorithms during the reporting period;</text></subparagraph> <subparagraph id="idb5b5c42b275243ec9be4ffa22fe24e2d"><enum>(B)</enum><text>a summary of signals used as inputs to the described recommender or ranking algorithms, including an explanation of which rely on user data, an explanation of the types of user data relied upon, and ranked based on the significance of their impact on the algorithms’ outputs;</text></subparagraph>
<subparagraph id="ida96bcb1774224f9684ae978162939660"><enum>(C)</enum><text>a summary of the processes or predictions used by the platform to assess the signals incorporated into the recommender or ranking algorithm and to score or rank content (such as predictions of future user engagement), ranked based on the significance of their impact on the algorithms’ outputs;</text></subparagraph> <subparagraph id="id4EE83DB07DA4436B944ADFD5A8257065"><enum>(D)</enum><text>a summary of the optimization objectives of the described recommender or ranking algorithms;</text></subparagraph>
<subparagraph id="id53ED4FB5EEF4463094228007F4751704"><enum>(E)</enum><text>a summary of metrics calculated by the platform to assess product changes or new features, or as a basis to assess performance or calculate employee or executive compensation, with an assessment of their relative importance in company decision making;</text></subparagraph> <subparagraph id="id07065eba09164258b11b5b452a5642b0"><enum>(F)</enum><text>significant changes during the reporting period from the last report; and</text></subparagraph>
<subparagraph id="id986737624268410c886d15f037cd09d8"><enum>(G)</enum><text>other information about the recommender or ranking algorithms that the Commission deems appropriate. </text></subparagraph></paragraph> <paragraph id="id6a284300e5314e5bb96e3bc424af6a9c"><enum>(3)</enum><header>Implementation</header><text>In implementing this section, the Commission shall ensure that the reporting is useful and actionable while ensuring that platforms are not required to disclose trade secrets. </text></paragraph></subsection>
<subsection id="idA49788EC2F2349E6BC68801B7457BDEB"><enum>(e)</enum><header>Transparency of content moderation and violating content</header>
<paragraph id="id6ac1b601f654427599f13986b565f3f4"><enum>(1)</enum><header>In general</header><text>Not later than 1 year after the date of enactment of this Act, the Commission shall, in accordance with section 553 of title 5, United States Code, and subject to subsection (g), issue regulations to require platforms to issue a public report on an ongoing basis information regarding content moderation and content violating platform policies.</text></paragraph> <paragraph id="id2bef5e51589744a880cafcbc711a629c"><enum>(2)</enum><header>Required information</header><text>The information required to be disclosed under paragraph (1) shall include, as appropriate—</text>
<subparagraph id="idcea2f8030fcc432984f4ff041bb043da"><enum>(A)</enum><text>statistics regarding the amount of content that the platform determined violated its policies, broken down by— </text> <clause id="idA720DDBF55084BEA9491A34EBB223BAE"><enum>(i)</enum><text>the violated policy; </text></clause>
<clause id="id1A4141BA04574D15BBA5FBA1AECE044B"><enum>(ii)</enum><text>the action taken in response to the violation;</text></clause> <clause id="id602DFBE9E7684866A67648A40D962789"><enum>(iii)</enum><text>the methods the platform used to identify the violating content (such as artificial intelligence, user report, human moderator review, or other means); </text></clause>
<clause id="id81C914BD66ED476C96173A2671ED78EA"><enum>(iv)</enum><text>the extent to which the content was recommended, amplified, or restricted by platform algorithms or policies; and</text></clause> <clause id="id3285ECCAE2D8450E85B0360EE3C59ADB"><enum>(v)</enum><text>geographic and demographic factors as the Commission deems appropriate;</text></clause></subparagraph>
<subparagraph id="idaf9d3690bf6243a790c3bcbbd6c28b95"><enum>(B)</enum><text>statistics regarding the number of times violating content was viewed by users and the number of users who viewed it;</text></subparagraph> <subparagraph id="id450b119a0a194faa81b401ac765f3021"><enum>(C)</enum><text>estimates by the platform about the prevalence of violating content (including as measured by the number of impressions of violating content), broken down by—</text>
<clause id="id5F69C3901DD6457AAA4E705CF0BC0D75"><enum>(i)</enum><text>the violated policy;</text></clause> <clause id="idC7E0508FDB204A179B96AAE80C6D854B"><enum>(ii)</enum><text>geographic and demographic factors; and</text></clause>
<clause id="id6440A434D5D74AF9969000815EDF3EDD"><enum>(iii)</enum><text>other factors the Commission deems appropriate; and</text></clause></subparagraph> <subparagraph id="idae8722288aaa4e848a5dbef87384c56c"><enum>(D)</enum><text>the number of orders received from governmental authorities, categorized by the type of violating content concerned, and the average time needed for taking the action specified in those orders.</text></subparagraph></paragraph></subsection>
<subsection id="id3d25e2c9dcdb4df9bfaf7b7e49b02402"><enum>(f)</enum><header>Data dictionaries</header><text>Not later than 1 year after the date of enactment of this Act, the Commission shall, in consultation with the NSF and in accordance with section 553 of title 5, United States Code, and subject to subsection (g), issue regulations to require platforms to disclose, and update periodically, data dictionaries to inform and facilitate researcher data access requests. Such data dictionaries shall include descriptions of significant datasets in the platform’s possession relating to content on, or users of, the platform, enforcement of content policy, or advertising, as necessary or appropriate to inform and facilitate researcher data access requests. </text></subsection> <subsection id="idF8E55841520B40B698FFE2094DF3E9C7"><enum>(g)</enum><header>Privacy, confidentiality, and platform integrity</header><text>The Commission shall ensure that any reporting or disclosures required pursuant to this section do not infringe upon reasonable expectations of personal privacy of users of platforms or of other persons, or require dissemination of trade secrets. If necessary, the Commission may require withholding of information otherwise required to be disclosed to meet this requirement. The Commission shall further consider the effect of disclosures on risks to platform integrity or the susceptibility of the platform to manipulation or inauthentic behavior, and may limit or reduce the information required to be disclosed if necessary to address a substantial such risk.</text></subsection>
<subsection id="id9c7f618f72ac47498ae1c543b47aaa7c"><enum>(h)</enum><header>Variation</header><text>In implementing this section, the Commission may vary the requirements it imposes on platforms based on the size of the platform and scope of its services. </text></subsection> <subsection id="id45DFDA720A2243B4B912688F96A7F17B"><enum>(i)</enum><header>Definitions</header><text>In this section:</text>
<paragraph id="id5f5e350f1cb74522a8d50b0baef3c877"><enum>(1)</enum><header>Engagement</header><text>The term <term>engagement</term> means, with respect to content on a platform, the number of times a user interacts with the content, whether through comments, indications of approval or disapproval (such as likes or dislikes), reshares, or any other form of active interaction. </text></paragraph> <paragraph id="id44ae7580d18848d2bb9fb24e53c8fda4"><enum>(2)</enum><header>Impression</header><text>The term <term>impression</term> means, with respect to content on a platform, the display or delivery of the content to a user, regardless of whether the user engages with the content. </text></paragraph>
<paragraph id="id67924dbea3b44fa7a1ba5f5f78c6b19f"><enum>(3)</enum><header>Prevalence of violating content</header><text>The term <term>prevalence of violating content</term> means a platform’s estimate of the number of impressions of content that violates its moderation policies among its users, regardless of whether the platform ever identifies that particular content as violating.</text></paragraph> <paragraph id="id86f174f29eeb4ef5b08d48ff02076e10"><enum>(4)</enum><header>Reach</header><text>The term <term>reach</term> means, with respect to content on a platform, the number of users to whom the content is displayed or delivered during a particular period, regardless of how many times it is delivered to them. </text></paragraph>
<paragraph id="id1F86A0E629914418ACFFF4ABBAF67C69"><enum>(5)</enum><header>Real-time understanding</header><text>The term <term>real-time understanding</term> means an understanding of content on a platform that is up-to-date within less than 24 hours.</text></paragraph> <paragraph id="id72EB4302F0DB4C1D874F11E9B87631AB"><enum>(6)</enum><header>Reasonably public</header><text>The term <term>reasonably public</term> means information that the author made available in a manner and under such circumstances such that the author does not retain a reasonable expectation of privacy in the information. The fact that a user may need to register or create an account with a platform to view information does not preclude it form being deemed reasonably public.</text></paragraph>
<paragraph id="iddc489363fac64c7298d9bf46f21d6c9f"><enum>(7)</enum><header>Recommender or ranking algorithm</header><text>The term <term>recommender or ranking algorithm</term> means a fully or partially automated system used by a platform to suggest in its online interface specific information to recipients of the service offered by the platform, or to prioritize that information, including as a result of a search initiated by the recipient of the service or otherwise determining the relative order or prominence of information displayed. This includes any computational process, including one derived from machine learning or other artificial intelligence techniques, that processes personal information or other data for the purpose of determining the order or manner that a set of information is provided, recommended to, or withheld from a user of a platform, including the provision of commercial content, the display of social media posts, recommendations of user or group accounts to follow or associate with, or any other method of content selection, amplification, or restriction. </text></paragraph></subsection></section> <section id="id5C22A6EDDCC846C89FE37D8BB0400D3C"><enum>10.</enum><header>Authorization of appropriations</header><text display-inline="no-display-inline">There are authorized to be appropriated such sums as are necessary to carry out this Act for fiscal year 2023 and each succeeding fiscal year.</text></section>
<section id="idcbcfc6a6ab4f4b09af0fa256fe55d42a"><enum>11.</enum><header>Severability</header><text display-inline="no-display-inline">If any provision of this Act, or the application of such provision to any person or circumstance, is held to be unconstitutional, the remainder of this Act, and the application of the remaining provisions of this Act, to any person or circumstance, shall not be affected. </text></section> </legis-body> </bill> 

