The TAKE IT DOWN Act requires major social media platforms and websites hosting user-generated content to establish a 48-hour removal process for nonconsensual intimate visual depictions (including deepfakes) upon verified request. It defines "nonconsensual intimate visual depictions" as images or videos of identifiable people shared without consent, with criminal penalties for sharing such content with intent to cause harm. The law exempts law enforcement activities, medical purposes, and content shared for legitimate educational reasons. Platforms must remove these materials quickly but are protected from liability if they act in good faith. This law directly affects social media companies and individuals whose intimate images are shared without consent.
The NO FAKES Act of 2025 establishes legal rights for individuals to control how their voice and visual likeness are used in digital replicas, which are defined as highly realistic computer-generated representations readily identifiable as a specific person. The bill requires authorization from the individual or their designated right holder before using their likeness in digital replicas, with specific rules for minors (limiting licenses to 5 years) and post-mortem rights (allowing 10 years of protection with possible 5-year renewals). It creates civil liability for unauthorized use of digital replicas or for distributing products/services designed to create such replicas without authorization, with penalties ranging from $5,000 to $750,000 per violation depending on the entity involved. Online services are provided safe harbor protections if they follow procedures for handling takedown notices and have designated agents for copyright issues, while also including exemptions for news, commentary, criticism, and historical uses. The law preempts most state laws regarding digital likeness rights but has exceptions for certain historical uses, news, and sexually explicit content.
This bill (S 2266) requires businesses selling online services with automatic renewals or free trials to clearly disclose renewal terms and make cancellation simple for consumers. It mandates 7-day advance notice before charging for renewals, requires express consent for each renewal (not just initial sign-up), and prohibits deceptive "dark patterns" that hide cancellation options. Violations make renewals void and require full refunds for affected charges. The law directly affects subscription services (like streaming or software) and protects consumers from unexpected fees or hidden billing practices.
This bill requires the Department of Veterans Affairs (VA) to display clear warnings on all public-facing VA websites and online tools about predatory practices. Specifically, it mandates that VA websites warn veterans not to share their account login credentials or bank account information (like usernames/passwords) with anyone. The law amends existing VA procedures to add this security warning as a standard message during website logins. The Chief Veterans Experience Officer will implement these changes, effective 180 days after the bill's enactment. The policy directly affects veterans using VA online services by strengthening protections against fraudulent agents targeting their personal information.
HR 2612, the DELETE Act, creates a system allowing individuals to request deletion of their personal data from data brokers through a single online portal. Data brokers must register annually with the FTC and implement a centralized deletion system, requiring them to delete personal information within 31 days of a request (with limited exceptions for legal requirements or research). The FTC enforces compliance through annual audits, mandatory reporting on deletion completion rates, and penalties for violations. This directly affects companies that collect personal information without a direct customer relationship and sell or share it with third parties.
This bill requires major websites and online services (excluding small businesses) to provide a simplified, accessible summary of their terms of service within 360 days. The summary must clearly explain what sensitive data they collect (e.g., health, location, financial info), user rights (like arbitration waivers), data breach history, and estimated reading time, and must be placed prominently on their sites. It also mandates a graphic diagram showing how user data is shared with third parties and an interactive format for full terms. Violations can be enforced by the FTC or state attorneys general acting on behalf of residents.
The Kids Internet Safety Partnership Act establishes a new program within the Commerce Department to improve online safety for children under 18. The program will work with parents, educators, online platforms, and experts to identify risks and benefits of digital services for minors, then develop practical safety guidelines. Within two years, it will publish a detailed guide for platforms on implementing features like age verification, parental controls, and design changes that reduce addictive elements (e.g., endless scrolling). The program will also release regular reports tracking how well platforms adopt these safety measures. The initiative will end after five years.
HR 6484, the Kids Online Safety Act, requires social media platforms and online services (termed "covered platforms") to implement specific safety measures for minors under 17. The bill mandates default privacy settings that limit communication with other users, default time limits on platform usage, and parental control tools to monitor and restrict children's online activity. Platforms must prevent advertising of harmful products like drugs, alcohol, and gambling to minors and provide clear safety information before minors register or make purchases. The legislation also requires annual independent audits of platforms' compliance with these safety measures and establishes a Kids Online Safety Council to provide recommendations on online safety for minors.
This bill reforms how the Technology Modernization Fund is used to upgrade outdated federal computer systems. It requires agencies to identify and report high-risk legacy systems to a central office, which then compiles a national inventory and prioritizes the most critical systems for modernization. Agencies that receive funds must repay the fund under specific terms to ensure it remains fully operational until 2032. The bill also blocks funding for projects with fraudulent claims about their technology plans or costs.
The ePermit Act requires federal agencies to adopt standardized digital systems for environmental reviews and authorizations, creating a unified online portal for project sponsors to submit documents, track progress, and access real-time data. It mandates data standards for consistent information sharing, automated tools for screening projects and managing public comments, and a deadline for full implementation by December 2027. The bill directly affects federal agencies (like the EPA and Army Corps of Engineers), project developers seeking permits, and the public by replacing fragmented paper-based processes with a transparent, digital platform. Key provisions include requiring agencies to report on current systems within 90 days, implement minimum functional tools within 180 days, and prioritize vendor-neutral interoperability to reduce delays and redundancy.
