This bill directs the Government Accountability Office (GAO) to conduct a comprehensive study on liquid cooling technologies for data centers, specifically to assess their potential for improving energy efficiency as AI workloads grow. The study will evaluate technical aspects like single-phase vs. 2-phase cooling systems, coolant options, heat-reuse opportunities, and safety considerations, while comparing costs and benefits to traditional air cooling. Federal agencies, including the Department of Energy, will use the findings to inform future decisions about cooling infrastructure for government data centers and AI systems. The bill does not mandate new policies or funding but requires a detailed report within 90 days of enactment to guide future adoption.
This bill prohibits federal agencies from allowing "covered applications" (apps developed, owned, or controlled by Chinese entities or determined to pose national security risks by the Secretary of Defense) on government devices. It requires agencies to remove such apps within 60 days of being identified and issue cybersecurity-safeguarded exception guidelines for research/intelligence use within 270 days. The Office of Management and Budget must maintain and update a list of covered apps every 180 days, consulting with homeland security, defense, and intelligence agencies. The policy directly affects all federal agencies managing government devices, aiming to prevent potential security risks from Chinese-linked applications.
Sammy's Law requires large social media platforms (those with over 100 million monthly users or $1 billion in annual revenue) to create real-time tools allowing parents or third-party safety software providers to help protect children under 17 from online harms. Platforms must provide secure access to children's account data for safety software providers that register with the Federal Trade Commission and meet strict security and privacy requirements. Third-party providers can only use the data to address specific risks like cyberbullying, trafficking, or abuse, and must delete data after 14 days unless needed for a safety concern. The law creates a federal standard that prevents states from making their own rules about this type of platform access.
This bill codifies the Federal Trade Commission's existing "negative option" rule into law, making it permanently binding as of July 7, 2025. It requires companies to get explicit customer consent before automatically renewing subscriptions or services, rather than assuming consent through inaction. The rule directly affects consumers who use recurring payment services (like streaming, software, or memberships) and the businesses that offer them. This change prevents companies from charging customers for continued service without clear, affirmative action from the user to renew.
The DEFIANCE Act of 2025 creates civil legal remedies for individuals harmed by non-consensual digital forgeries depicting them in sexually intimate situations without their consent. It defines "intimate digital forgery" as fabricated images or videos that appear authentic to a reasonable person, even with disclaimers, and allows victims to sue those who create, possess, or disclose such content. Key provisions include fixed damages of $150,000 (or $250,000 for severe cases like sexual assault-related forgeries), court-ordered privacy protections (like pseudonyms and redacted filings), and a 10-year statute of limitations. The law applies to interstate or online disclosures and explicitly preserves existing state laws, ensuring it does not override stronger state protections.
HR 859 requires manufacturers to clearly state before purchase whether internet-connected consumer devices (like smart speakers or home monitors) contain a camera or microphone. It directly affects device manufacturers, excluding phones, laptops, and dedicated cameras (which consumers reasonably expect to have such features). The Federal Trade Commission enforces this as an unfair/deceptive practice under existing law, with guidance issued within 180 days of enactment. The law applies only to devices made after the FTC issues its guidance, not older models.
This bill establishes a federal program to enhance water system security by supporting participation in the Water Information Sharing and Analysis Center (WISAC). It directly affects community water systems and publicly owned treatment works by offsetting their costs to join WISAC and improving EPA coordination with the center for threat monitoring. Key provisions include funding $10 million annually (2026-2027) to help water systems monitor threats, prepare for cyberattacks or natural hazards, and share incident data. The program aims to strengthen the water sector’s ability to detect, respond to, and recover from security incidents.
HR 6333, the Parents Over Platforms Act, requires app stores (like the Apple App Store or Google Play) and app developers to implement age verification systems for applications that offer different experiences for minors versus adults. It mandates app stores to ask users for age during signup, provide parents with tools to block age-inappropriate apps, and prevent developers from showing personalized ads to minors. The bill directly affects app stores, developers of "covered applications" (such as games or social media apps targeting children), and parents seeking to control their children’s app access. Key provisions include requiring developers to confirm if their app treats minors differently, obtain parental consent for age-restricted content, and use age signals from app stores to verify user age. The law applies to apps on smartphones, tablets, and gaming consoles but excludes websites and browsers.
HR 2612, the DELETE Act, creates a system allowing individuals to request deletion of their personal data from data brokers through a single online portal. Data brokers must register annually with the FTC and implement a centralized deletion system, requiring them to delete personal information within 31 days of a request (with limited exceptions for legal requirements or research). The FTC enforces compliance through annual audits, mandatory reporting on deletion completion rates, and penalties for violations. This directly affects companies that collect personal information without a direct customer relationship and sell or share it with third parties.
S 3354, the QUIET Act, requires anyone making robocalls or text messages using artificial intelligence to mimic a human to disclose at the start that AI is being used. It directly affects businesses, marketers, or scammers using AI for automated calls/texts that sound human, but excludes calls needing substantial human input. The bill adds enhanced penalties, doubling maximum fines for violations involving AI impersonation intended to defraud or cause harm. These provisions amend federal law to increase transparency and strengthen consequences for deceptive AI-driven communications.
