“A bill to promote competition and reduce consumer switching costs in the provision of online services, and for other purposes.”
No CRS summary available for this bill.
This section defines terms used in the Act, including artificial intelligence (as defined in 15 U.S.C. 9401), the Federal Trade Commission, custodial user agent and provider, large online platform (a product or service with more than 50,000,000 U.S. customers or subscribers in a month), open protocol, social graph data, social media service, and user data (excluding information rendered wholly unusable).
This section establishes the right of end users of large online platforms to designate one or more registered custodial user agents to manage their online interactions, electronic commerce decisions, user-generated content, and account settings on the same terms as the user. It requires large online platform providers to maintain transparent third-party interfaces for such delegation, directs the Commission to establish authentication and revocation rules within 180 days, mandates registration of custodial user agent providers, and imposes duties on those agents to safeguard user data, avoid conflicts of interest or harm, limit data use to delegated services, maintain records, and obtain user authorization before any sub-delegation.
This section directs the Federal Trade Commission to promulgate regulations implementing the Act within one year after enactment, in coordination with the Consumer Financial Protection Bureau, Federal Deposit Insurance Corporation, and Office of the Comptroller of the Currency. It requires the Commission to establish authentication procedures for custodial user agents within 180 days, directs the National Institute of Standards and Technology to identify or develop technical standards for online messaging, social media, e-commerce, personal finance, artificial intelligence, and verifiable delegation within 180 days, mandates regular compliance assessments and complaint procedures, treats violations as unfair or deceptive acts enforceable under the Federal Trade Commission Act with per-user fines and jurisdiction over common carriers, creates an interagency working group within 180 days to address fraud and misuse risks, preempts inconsistent state laws, and sets the effective date as the earlier of one year after enactment or the date regulations are issued.
This section preserves the operation of specified privacy and security laws, including the Privacy Act of 1974, the Right to Financial Privacy Act of 1978, the Fair Credit Reporting Act, the Children's Online Privacy Protection Act of 1998, title V of the Gramm-Leach-Bliley Act, the Family Educational Rights and Privacy Act of 1974, the Privacy Protection Act of 1980, the Health Insurance Portability and Accountability Act, the Communications Assistance for Law Enforcement Act, and sections 222 and 227 of the Communications Act of 1934, as well as all antitrust laws.