AB373: Bill Text

AB373,,73 (5) Privacy. (a) A social media company and its agents may use and retain information and data obtained under this section only for the purpose of complying with this section and may not use that information or data for any other purpose.

AB373,,74 (b) A social media company may not use or employ a person to process estimation or verification requirements for the social media company unless the person’s principal place of business is located in the United States of America.

AB373,,75 (6) Waiver prohibited. A social media company may not include a provision in an agreement or contract, and a finder of fact or court may not enforce or give effect to a provision in an agreement or contract, that waives, limits, or purports to waive or limit any of the following:

AB373,,76 (a) A protection or requirement of this section.

AB373,,77 (b) The right of a person to cooperate with the department or to file a complaint with the department.

AB373,,78 (7) Notice and enforcement. (a) The department shall receive consumer complaints alleging violations of this section, and shall investigate alleged violations of this section. Subject to par. (b), the department, the department of justice in consultation with the department, or a district attorney in consultation with the department may bring an action for temporary or permanent injunctive or other relief for any violation of this section or an action for the penalties authorized in sub. (8).

AB373,,79 (b) 1. At least 30 days before the day on which an action against a social media company is initiated under par. (a), the department, the department of justice in consultation with the department, or a district attorney in consultation with the department seeking to bring an action under par. (a) shall provide the social media company with written notice that identifies each alleged violation of this section, and an explanation of the basis for each allegation.

AB373,,80 2. An action may not be initiated under par. (a) if, within 30 days after the day on which the social media company was provided notice under subd. 1., the social media company cures the violation of this section and the social media company provides to the department a written statement that the violation has been cured and that no further violation will occur.

AB373,,81 3. Notwithstanding subd. 2., the department, the department of justice, or a district attorney may initiate an action under par. (a) if the social media company does not cure a violation of this section or provide a written statement as provided in subd. 2., or, if after curing a noticed violation of this section and providing a written statement in accordance with subd. 2., the social media company commits another violation of the same provision of this section.

AB373,,82 (8) Penalties. A social media company that violates this section is subject to all of the following:

AB373,,83 (a) A forfeiture of $100 for each violation. Each account affected by a violation constitutes a separate offense. Each day of continued violation constitutes a separate offense.

AB373,,84 (b) An order to pay an award of damages to an injured account holder.

AB373,,85 (c) Disgorgement of the money the social media company received in the course of violating this section’s requirements and payout of the disgorged money to all injured account holders.

AB373,,86 (d) Notwithstanding s. 814.04 (1), a court-ordered award to the department and the department of justice, as appropriate, for the reasonable and necessary costs of investigation and expenses of prosecution, including court costs and attorney fees.

AB373,,87 (e) Any other relief or course of action the court deems reasonable and necessary.

AB373,,88 (9) Rule making. The department shall promulgate rules establishing all of the following:

AB373,,89 (a) Processes by which a social media company may meet the requirements of this section.

AB373,,90 (b) Acceptable forms or methods of age verification that are not limited to a valid identification card issued by a government entity.

AB373,,91 (c) Requirements for providing confirmation of the receipt of any information provided by a person seeking to verify age under this section.

AB373,,92 (d) Processes to confirm the identity of a person claiming to be a minor account holder’s parent or guardian.

AB373,,93 (e) Requirements for social media companies regarding the retaining, protecting, and securely disposing of any information obtained by a social media company or one of its agents as a result of compliance with the requirements of this section.

AB373,,94 (f) Processes by which the department ensures that it appropriately retains, protects, and securely disposes of any forms of identification or documents it obtains in the course of enforcing this section.

AB373,,95 (g) Such rules as are necessary to effectively enforce this section.

AB373,,96 (10) Department report. (a) The department shall, on July 1, 2025, and annually thereafter, submit a report to the governor and the appropriate standing committees of the legislature under s. 13.172 (3) that includes all of the following information:

AB373,,97 1. An evaluation of the liability and enforcement provisions of this section, including the effectiveness of the department’s efforts to enforce this section and any recommendations for changes to this section.

AB373,,98 2. A summary of the consumer interactions that are protected and not protected by this section, including a list of alleged violations of this section that the department has received.

AB373,,99 3. An accounting for the year of all penalties assessed and all forfeitures collected.

AB373,,100 (b) The department may update or correct the report submitted under par. (a) as new information becomes available.

AB373,2 Section 2. Effective dates. This act takes effect on August 1, 2024, except as follows:

AB373,,102 (1) The treatment of s. 100.75 (9) takes effect on the day after publication.

AB373,,103 (end)