Consumer Data Protection Act; social media platforms & model operators, interoperability interfaces.

The definition of 'Artificial intelligence' was changed from 'Artificial intelligence model' and updated to 'Artificial intelligence system' with a broader description that includes any machine learning-based system that generates outputs to influence physical or virtual environments. The new definition also adds an exemption for systems used only for development, prototyping, and research before deployment.

The term 'Model operator' was changed to 'Operator' and now refers to anyone making an artificial intelligence system available for use, with the same exclusion for those who only interact through APIs or prompting.

The definition of 'Contextual data' was updated to refer to 'artificial intelligence system' instead of 'artificial intelligence model' and now explicitly includes data from multiple sessions.

The definition of 'Open protocol' was expanded to clarify it must be free from licensing fees and patent restrictions, and explicitly states it can be used to export social graph or contextual data between platforms.

Five specific exemptions from the definition of 'Sale of personal data' were removed, including disclosures to processors, third parties for consumer-requested services, affiliates, publicly available information, and data transferred in mergers or acquisitions. This means these activities may now be considered sales of personal data under the law.

The interoperability requirements for social media platforms and model operators were updated to require sharing of social graph and contextual data respectively, with provisions for users to designate which data to share and for platforms to notify other platforms when new data is available.

Minor formatting and numbering changes were made throughout the document, including reorganization of sections and addition of page headers indicating this is a draft substitute bill offered for consideration on February 4, 2026.