Bill Text: CA SB1228 | 2023-2024 | Regular Session | Amended

NOTE: There are more recent revisions of this legislation. Read Latest Draft
Bill Title: User identity authentication.

Spectrum: Partisan Bill (Democrat 1-0)

Status: (Introduced) 2024-05-03 - Set for hearing May 13. [SB1228 Detail]

Download: California-2023-SB1228-Amended.html

Amended  IN  Senate  April 10, 2024
Amended  IN  Senate  March 18, 2024

CALIFORNIA LEGISLATURE— 2023–2024 REGULAR SESSION

Senate Bill
No. 1228


Introduced by Senator Padilla

February 15, 2024


An act to add Chapter 22.9 (commencing with Section 22684) to Division 8 of the Business and Professions Code, and to amend Section 35 of the Code of Civil Procedure, relating to online platforms.


LEGISLATIVE COUNSEL'S DIGEST


SB 1228, as amended, Padilla. Large online platforms: user identity authentication.
Existing law generally regulates online platforms, including by requiring a social media company, as defined, to post terms of service for each social media platform owned or operated by the social media company in a manner reasonably designed to inform all users of the social media platform of the existence and contents of the terms of service.
Existing law requires certain actions in cases involving the registration or denial of registration of voters, among others, to be placed on the calendar in the order of their date of filing and given precedence.
This bill would require a large online platform, as defined, to seek to verify the name, telephone number, and email address of an influential user, as defined, by a means chosen by the large online platform and would require the platform to seek to verify the identity of a highly influential user, as defined, by asking to review the highly influential user’s government-issued identification.
This bill would require a large online platform to note on the profile page of an influential or highly influential user, in type at least as large and as visible as the user’s name, whether the user has been authenticated pursuant to those provisions, as prescribed, and would require the platform to attach to any post of an influential or highly influential user a notation that would be understood by a reasonable person as indicating that the user is authenticated or unauthenticated, as prescribed.
This bill would authorize the Attorney General or any district attorney or city attorney to seek injunctive or other equitable relief against a large online platform to compel compliance with the bill and would require those actions to be placed on the calendar in the order of their date of filing and given precedence.
Vote: MAJORITY   Appropriation: NO   Fiscal Committee: YES   Local Program: NO  

The people of the State of California do enact as follows:


SECTION 1.

 Chapter 22.9 (commencing with Section 22684) is added to Division 8 of the Business and Professions Code, to read:
CHAPTER  22.9. Verify or Flag

22684.
 For the purposes of this chapter:
(a) “Highly influential user” means a user of a large online platform that meets either any of the following criteria:
(1) Content authored, created, or shared produced by the user has been seen by more than 100,000 users over the lifetime of the accounts that they control or administer on the platform. within a seven-day period over all of the accounts that they control or administer on the platform.
(2) Accounts controlled or administered by the user have posted or sent more than 5,000 pieces of content, whether text, images, audio, or video, that are found to be 90 percent or more likely to contain content generated by artificial intelligence, as assessed by the platform using state-of-the-art tools and techniques for detecting AI-generated content. more than 30,000 followers.
(3) The user ranks in the top 3 percent of users by amount of content viewed by users on the platform within a seven-day period over all of the accounts that the user controls or administers on the platform.
(b) “Influential user” means a user of a large online platform that meets either any of the following criteria:
(1) Content authored, created, or shared produced by the user has been seen by more than 25,000 50,000 users over the lifetime within a seven-day period over all of the accounts that they control or administer the user controls or administers on the platform.
(2) Accounts controlled or administered by the user have posted or sent more than 1,000 pieces of content, whether text, images, audio, or video, that are found to be 90 percent or more likely to contain content generated by artificial intelligence, as assessed by the platform using state-of-the-art tools and techniques for detecting AI-generated content. more than 15,000 followers.
(3) The user ranks in the top 6 percent of users by amount of content viewed by users on the platform within a seven-day period over all of the accounts that the user controls or administers on the platform.
(c) “Large online platform” means a public-facing internet website, web application, or digital application, including a social network, video sharing platform, messaging platform, advertising network, or search engine that had at least 1,000,000 California users during the preceding 12 months.
(d) “Sensitive personal information” has the same meaning as defined in Section 1798.140 of the Civil Code.

22684.1.
 (a) (1) (A) A large online platform shall seek to verify an influential user’s name, telephone number, and email address by a means chosen by the large online platform.
(B) A large online platform shall seek to verify a highly influential user’s identity by asking to review the highly influential user’s government-issued identification.
(2) A large online platform shall not use the identification information provided by a user for the purpose of complying with this subdivision for any purpose other than compliance with this subdivision.
(3) (A) Subject to subparagraph (B), a large online platform shall protect any identification information provided by an influential user in compliance with this section using, at a minimum, the standard of the industry used to protect the confidential information of users unless the large online platform makes that information public in the normal course of a user’s use of the large online platform.
(B) A large online platform shall not allow a user’s sensitive personal information to become public.
(b) A large online platform shall note on the profile page of an influential or highly influential user, in type at least as large and as visible as the user’s name, either of the following:
(1) “This user has been authenticated,” or some similar phrase, if the user has complied with the large online platform’s identification process required by subdivision (a).
(2) “This user is unauthenticated,” or some similar phrase, if the user has failed to comply with the large online platform’s identification process required by subdivision (a).
(c) (1) A large online platform shall attach to any post of an influential or highly influential user a notation that would be understood by a reasonable person as indicating that the user is authenticated or unauthenticated.
(2) For a post from an unauthenticated influential or highly influential user, the notation required by paragraph (1) shall be visible for at least two seconds before the rest of the post is visible and then shall remain visible with the post.
(d) A large online platform shall allow its users to opt out of receiving any posts, information, or other distributions from a user who is not authenticated.
(e) A large online platform shall maintain proof that it has complied with the verification requirements of this section but may refrain from storing or maintaining the verification information or documentation.

22684.2.
 (a) The Attorney General or any district attorney or city attorney may seek injunctive or other equitable relief against a large online platform to compel compliance with this chapter.
(b) In an action filed pursuant to this section, the court shall award a prevailing plaintiff reasonable attorney’s fees and costs.

22684.3.
 (a) This chapter does not preclude a large online platform from developing and implementing policies that seek to verify the identity of users who are not influential or highly influential users or from verifying the identity of influential or highly influential users with additional proof.
(b) This chapter does not preclude a large online platform from requiring that its users comply with any identification verification required by the company.
(c) This chapter does not preclude a large online platform from requiring that all users, including influential or highly influential users, be identified as either “this user has been authenticated” or “this user is unauthenticated” or similar phrases.
(d) This chapter does not preclude a large online platform from requiring or prohibiting its users to be publicly identified.
(e) This chapter does not require that a large online platform provide less exposure or visibility to the posts made or digital media content created by users who decline to provide identity verification.
(f) The provisions of this chapter are severable. If any provision of this chapter or its application is held invalid, that invalidity shall not affect other provisions or applications that can be given effect without the invalid provision or application.

SEC. 2.

 Section 35 of the Code of Civil Procedure, as amended by Section 1 of Chapter 343 of the Statutes of 2023, is amended to read:

35.
 (a) Proceedings in cases involving the registration or denial of registration of voters, the certification or denial of certification of candidates, the certification or denial of certification of ballot measures, election contests, actions under Section 20010 of the Elections Code, actions under Chapter 2 (commencing with Section 21100) of Division 21 of the Elections Code, and actions under Chapter 22.9 (commencing with Section 22684) of Division 8 of the Business and Professions Code shall be placed on the calendar in the order of their date of filing and shall be given precedence.
(b) This section shall remain in effect only until January 1, 2027, and as of that date is repealed, unless a later enacted statute, that is enacted before January 1, 2027, deletes or extends that date.

SEC. 3.

 Section 35 of the Code of Civil Procedure, as amended by Section 2 of Chapter 343 of the Statutes of 2023, is amended to read:

35.
 (a) Proceedings in cases involving the registration or denial of registration of voters, the certification or denial of certification of candidates, the certification or denial of certification of ballot measures, election contests, actions under Chapter 2 (commencing with Section 21100) of Division 21 of the Elections Code, and actions under Chapter 22.9 (commencing with Section 22684) of Division 8 of the Business and Professions Code shall be placed on the calendar in the order of their date of filing and shall be given precedence.
(b) This section shall become operative January 1, 2027.

feedback