Sammy's Law requires large social media platforms with over 100 million monthly users to create open systems (called APIs) that allow independent third-party safety software to help children and parents monitor online interactions and manage account settings in real-time. These safety software providers must register with the Federal Trade Commission, undergo annual audits, and follow strict rules including prohibitions on selling user data, foreign government control, and data deletion within five days. Social media companies must implement strong data security protections and clearly disclose what information is shared with safety providers, while safety providers can only share user data with parents, children, law enforcement, or child protection agencies when risks like abuse or trafficking are identified. The FTC can deny registration or suspend providers that engage in willful misconduct or fail to comply with requirements, giving providers 45 days to fix problems unless intentional violations occur. The law establishes a single federal standard to prevent states from creating conflicting requirements, though states retain authority over general consumer protection and fraud laws.
Take Action
Your position
Add a comment
to comment on this bill.
Annotate the text
Highlight any passage on the Summary or Full Text tab to attach a note. Annotations appear on the Annotations tab.