Sammy’s Law

Specifically, large social media platforms must make available a mechanism by which a child or their parent or guardian may permit a provider of safety software to (1) manage the child’s interactions, content, and account settings on the platform; and (2) regularly access the child’s user data.

A software provider may only disclose a child’s data under limited circumstances, including to the child’s parent or guardian if the child is experiencing or is at foreseeable risk of experiencing specified harms. Such harms include suicide, eating disorders, sexual abuse, harassment, and academic dishonesty. The provider may only share data necessary for a reasonable parent or caregiver to understand that the child is experiencing or is at risk of harm.

To participate, a software provider must register with the Federal Trade Commission, undergo a security review, and demonstrate that, among other requirements, the provider is based in the United States and will use a child's data solely to protect them from harm.

Under the bill, a large social media platform is generally a service that enables a child to share content through the internet with other users that the child has become aware of solely through the platform, and which has more than 100 million monthly global active users or generates more than $1 billion in gross annual revenue.