SB385: Bill Text

SB385,2,3 100.75 Social media company requirements. (1) Definitions. In this section:

SB385,2,4 (a) “Account” means a social media platform account or profile.

SB385,2,5 (b) “Account holder” means a person who has, or opens, an account.

SB385,2,6 (c) “Educational entity” means any of the following:

SB385,2,7 1. A public school, as defined in s. 115.01 (1).

SB385,2,8 2. A charter school, as defined in s. 115.001 (1).

SB385,2,9 3. A tribal school, as defined in s. 115.001 (15m).

SB385,2,10 4. A private school participating in a program in s. 118.60 or 119.23.

SB385,2,11 5. The Wisconsin Center for the Blind and Visually Impaired.

SB385,2,13 6. The Wisconsin Educational Services Program for the Deaf and Hard of Hearing.

SB385,2,15 7. A school of a parochial or denominational character that offers a course with a sectarian objective.

SB385,2,17 8. A technical college under the authority of a district board, as defined in s. 38.01 (6).

SB385,3,1 9. A college campus, as defined in s. 36.05 (6m).

SB385,3,2 10. An institution, as defined in s. 36.05 (9).

SB385,3,3 11. A tribally controlled college located in this state.

SB385,3,5 12. A private, nonprofit postsecondary institution that is a member of the Wisconsin Association of Independent Colleges and Universities.

SB385,3,11 (d) “Interactive computer service” means an information service, an information system, or information access software that provides access to the Internet or provides or enables computer access by multiple users to a computer server. “Interactive computer service” includes a web service, a web system, a website, a web application, and a web portal. “Interactive computer service” does not include an Internet service provider.

SB385,3,13 (e) “Minor” means a resident under the age of 18. “Minor” does not include an emancipated minor, as defined in s. 48.375 (2) (e).

SB385,3,15 (f) “Post” means content that an account holder or user makes available on a social media platform for other account holders or users to view.

SB385,3,16 (g) “Resident” means an individual who resides in this state.

SB385,3,18 (h) “Social media company” means an interactive computer service that makes available a social media platform that has 5,000,000 or more account holders.

SB385,3,22 (i) 1. “Social media platform” means an online forum that a social media company makes publicly available and for which the primary purpose of is enabling an account holder to open a profile, upload a post, view a post of another account holder, or interact with other account holders or users.

SB385,3,25 2. Notwithstanding subd. 1., “social media platform” does not include an online service, website, or application for which the predominant or exclusive function is any of the following:

SB385,4,1 a. Electronic mail.

SB385,4,5 b. The direct messaging of text, photo, or video messages that are sent between devices by electronic means, in which the messages shared between the sender and the recipient are visible only to the sender and the recipient and are not posted publicly.

SB385,4,8 c. A streaming service that provides only licensed media in a continuous flow from itself to the end user and that does not obtain a license to the media from an account holder or user by agreement to its terms of service.

SB385,4,12 d. News, sports, entertainment, or other content that is preselected by a social media platform that is not user-generated, on which any provided chat, comment, or other interactive functionality is incidental to, directly related to, or dependent upon the provision of the content.

SB385,4,15 e. A community forum, the primary purpose of which is for customer self-service support related to products, sellers, services, events, or places, or any combination thereof.

SB385,4,20 f. Online shopping or e-commerce if an account holder's or user's interaction with other account holders or users is generally limited to the ability to upload a post or comment on reviews, the ability to display lists or collections of goods for sale, and other functions that are focused on online shopping or e-commerce rather than on interaction between account holders or users.

SB385,4,24 g. Interactive gaming, virtual gaming, or an online service that allows the creating and uploading of content for the purpose of interactive gaming, educational entertainment, or entertainment associated with interactive gaming or educational entertainment, and the communication related to that content.

SB385,5,2 h. A professional creative network for showcasing and discovering artistic content if the content is required to be non-pornographic.

SB385,5,5 i. Single-purpose community groups for public safety if interaction between account holders or users is generally limited to the single purpose and the community has guidelines or policies against illegal content.

SB385,5,7 j. Providing career development opportunities, including professional networking, job skills, learning certificates, and job posting and application services.

SB385,5,8 k. Business-to-business software.

SB385,5,10 L. A teleconferencing or videoconferencing service that allows reception and transmission of audio and video signals for real-time communication.

SB385,5,11 m. Cloud storage.

SB385,5,12 n. Shared document collaboration.

SB385,5,13 o. Cloud computing services.

SB385,5,15 p. Providing access to or interfacing with data visualization platforms, libraries, or hubs.

SB385,5,17 q. Permitting comments on a digital news website if the news content is posted only by the provider of the digital news website.

SB385,5,18 r. Providing or obtaining technical support for a platform, product, or service.

SB385,5,19 s. Academic or scholarly research.

SB385,5,20 t. Genealogical research.

SB385,5,23 u. Providing content to account holders or users if any ability of account holders or users to chat, comment, or interact with other account holders or users is directly related to the provider's content.

SB385,5,25 v. A classified ad service that permits only the sale of goods and prohibits the solicitation of personal services.

SB385,6,3 w. Use by and under the direction of an educational entity, including a learning management system, a student engagement program, and a subject or skill-specific program.

SB385,6,5 (j) “User” means a person who is not an account holder and who has access to view or create a post on a social media platform.

SB385,6,7 (k) “Youth account” means an account on a social media platform for use by a minor.

SB385,6,11 (2) Age-based account requirements. (a) Except as provided in par. (b), beginning on August 1, 2024, a social media company shall ensure that all accounts created on or after January 1, 2019, are designated as youth accounts that comply with the requirements under sub. (3).

SB385,6,14 (b) A social media company may remove a youth account designation from a user's account and in turn be exempted from the corresponding requirements under sub. (3) for the account if any of the following applies:

SB385,6,17 1. The social media company estimates that the account holder is not a minor through employment of a process or program that provides a 95 percent accuracy rate of estimating age within 24 months of actual age.

SB385,6,18 2. The social media company verifies that the account holder is not a minor.

SB385,6,21 3. A parent or guardian of a minor account holder requests that the social media company remove the youth account designation from the minor's account as provided under sub. (4) (f).

SB385,6,23 (3) Youth accounts. A social media company shall do all of the following regarding a youth account:

SB385,7,2 (a) Prevent direct messaging between the account holder and any other account holder or user that is not linked to the account through friending or another process through which 2 persons add each other to a list of contacts associated with the account holder.

SB385,7,6 (b) Refrain from showing the account or information about the account in search results provided to any other account holder or user that is not linked to the account through friending or another process through which 2 persons add each other to a list of contacts associated with the account holder.

SB385,7,7 (c) Prevent advertising from being shown to the account holder.

SB385,7,10 (d) Refrain from collecting or using personal information from the account or the account holder's posts, messages, text, usage activities, or entered information, other than information that is necessary to comply with state or federal law.

SB385,7,12 (e) Refrain from the use of targeted or suggested groups, accounts, users, services, posts, and products on the account.

SB385,7,17 (f) Subject to sub. (4) (c), ensure that the account cannot be used or accessed between the hours of 10 p.m. and 7 a.m. The time of day under this paragraph shall be calculated on the basis of the Internet protocol address being used by the account at the time of attempted access. The social media company shall ensure that an account holder does not change or bypass the time restrictions under this paragraph.

SB385,7,22 (4) Parental access. A social media company shall provide to a parent or guardian of a minor account holder a password or other means for the parent or guardian to access the minor's account until the account holder is no longer a minor. The parent or guardian access required under this subsection shall include all of the following:

SB385,7,23 (a) Access to posts that the minor has made on the social media platform.

SB385,7,25 (b) Access to all messages and responses sent by or to the minor on the social media platform.

SB385,8,2 (c) The ability to change or eliminate the time restrictions required under sub. (3) (c).

SB385,8,4 (d) The ability to set a limit of total time per day that the minor may use or access the minor's youth account.

SB385,8,5 (e) The ability to access the minor's youth account without time restrictions.

SB385,8,7 (f) The ability to opt the minor's account out of the youth account designation and the corresponding youth account requirements provided under sub. (3).

SB385,8,10 (5) Privacy. (a) A social media company and its agents may use and retain information and data obtained under this section only for the purpose of complying with this section and may not use that information or data for any other purpose.

SB385,8,13 (b) A social media company may not use or employ a person to process estimation or verification requirements for the social media company unless the person's principal place of business is located in the United States of America.

SB385,8,17 (6) Waiver prohibited. A social media company may not include a provision in an agreement or contract, and a finder of fact or court may not enforce or give effect to a provision in an agreement or contract, that waives, limits, or purports to waive or limit any of the following:

SB385,8,18 (a) A protection or requirement of this section.

SB385,8,20 (b) The right of a person to cooperate with the department or to file a complaint with the department.

SB385,9,2 (7) Notice and enforcement. (a) The department shall receive consumer complaints alleging violations of this section, and shall investigate alleged violations of this section. Subject to par. (b), the department, the department of justice in consultation with the department, or a district attorney in consultation with the department may bring an action for temporary or permanent injunctive or other relief for any violation of this section or an action for the penalties authorized in sub. (8).

SB385,9,8 (b) 1. At least 30 days before the day on which an action against a social media company is initiated under par. (a), the department, the department of justice in consultation with the department, or a district attorney in consultation with the department seeking to bring an action under par. (a) shall provide the social media company with written notice that identifies each alleged violation of this section, and an explanation of the basis for each allegation.

SB385,9,13 2. An action may not be initiated under par. (a) if, within 30 days after the day on which the social media company was provided notice under subd. 1., the social media company cures the violation of this section and the social media company provides to the department a written statement that the violation has been cured and that no further violation will occur.

SB385,9,19 3. Notwithstanding subd. 2., the department, the department of justice, or a district attorney may initiate an action under par. (a) if the social media company does not cure a violation of this section or provide a written statement as provided in subd. 2., or, if after curing a noticed violation of this section and providing a written statement in accordance with subd. 2., the social media company commits another violation of the same provision of this section.

SB385,9,21 (8) Penalties. A social media company that violates this section is subject to all of the following:

SB385,9,24 (a) A forfeiture of $100 for each violation. Each account affected by a violation constitutes a separate offense. Each day of continued violation constitutes a separate offense.

SB385,9,25 (b) An order to pay an award of damages to an injured account holder.

SB385,10,3 (c) Disgorgement of the money the social media company received in the course of violating this section's requirements and payout of the disgorged money to all injured account holders.

SB385,10,6 (d) Notwithstanding s. 814.04 (1), a court-ordered award to the department and the department of justice, as appropriate, for the reasonable and necessary costs of investigation and expenses of prosecution, including court costs and attorney fees.

SB385,10,8 (e) Any other relief or course of action the court deems reasonable and necessary.

SB385,10,10 (9) Rule making. The department shall promulgate rules establishing all of the following:

SB385,10,12 (a) Processes by which a social media company may meet the requirements of this section.

SB385,10,14 (b) Acceptable forms or methods of age verification that are not limited to a valid identification card issued by a government entity.

SB385,10,16 (c) Requirements for providing confirmation of the receipt of any information provided by a person seeking to verify age under this section.

SB385,10,18 (d) Processes to confirm the identity of a person claiming to be a minor account holder's parent or guardian.

SB385,10,22 (e) Requirements for social media companies regarding the retaining, protecting, and securely disposing of any information obtained by a social media company or one of its agents as a result of compliance with the requirements of this section.

SB385,10,25 (f) Processes by which the department ensures that it appropriately retains, protects, and securely disposes of any forms of identification or documents it obtains in the course of enforcing this section.