HR 2713, the MAIN Event Ticketing Act, requires ticket-issuing websites to implement stronger security measures to prevent automated bots from bypassing purchase limits and circumventing online ticketing rules. It directly affects ticket sellers (like major platforms) and their third-party service providers, mandating they establish technical safeguards, report security breaches within 30 days, and address circumvention incidents. Key provisions include requiring access controls to enforce purchase limits, creating a public complaint website for consumers, and imposing civil penalties of up to $10,000 per day for violations. The bill strengthens enforcement by the Federal Trade Commission, which will issue compliance guidance and oversee civil actions for non-compliance.
The Foreign Anti-Digital Piracy Act (HR 791) creates a new legal process for copyright holders to seek court orders blocking U.S. service providers from allowing access to foreign websites primarily designed for copyright infringement. Copyright owners must prove the foreign website is primarily for infringement, attempt to notify the website operator, and identify service providers that host the site before a court can issue a blocking order. Service providers must implement reasonable measures to block access within 15-20 days (or 7 days for live events) but aren't required to use specific technical methods. The bill includes protections for service providers who comply with orders and requires courts to publish order details publicly. It applies specifically to foreign websites operating outside the U.S. that meet the defined infringement criteria.
The TAKE IT DOWN Act requires major social media platforms and websites hosting user-generated content to establish a 48-hour removal process for nonconsensual intimate visual depictions (including deepfakes) upon verified request. It defines "nonconsensual intimate visual depictions" as images or videos of identifiable people shared without consent, with criminal penalties for sharing such content with intent to cause harm. The law exempts law enforcement activities, medical purposes, and content shared for legitimate educational reasons. Platforms must remove these materials quickly but are protected from liability if they act in good faith. This law directly affects social media companies and individuals whose intimate images are shared without consent.
The NO FAKES Act of 2025 establishes legal rights for individuals to control how their voice and visual likeness are used in digital replicas, which are defined as highly realistic computer-generated representations readily identifiable as a specific person. The bill requires authorization from the individual or their designated right holder before using their likeness in digital replicas, with specific rules for minors (limiting licenses to 5 years) and post-mortem rights (allowing 10 years of protection with possible 5-year renewals). It creates civil liability for unauthorized use of digital replicas or for distributing products/services designed to create such replicas without authorization, with penalties ranging from $5,000 to $750,000 per violation depending on the entity involved. Online services are provided safe harbor protections if they follow procedures for handling takedown notices and have designated agents for copyright issues, while also including exemptions for news, commentary, criticism, and historical uses. The law preempts most state laws regarding digital likeness rights but has exceptions for certain historical uses, news, and sexually explicit content.
This bill (S 2266) requires businesses selling online services with automatic renewals or free trials to clearly disclose renewal terms and make cancellation simple for consumers. It mandates 7-day advance notice before charging for renewals, requires express consent for each renewal (not just initial sign-up), and prohibits deceptive "dark patterns" that hide cancellation options. Violations make renewals void and require full refunds for affected charges. The law directly affects subscription services (like streaming or software) and protects consumers from unexpected fees or hidden billing practices.
This bill requires the Department of Veterans Affairs (VA) to display clear warnings on all public-facing VA websites and online tools about predatory practices. Specifically, it mandates that VA websites warn veterans not to share their account login credentials or bank account information (like usernames/passwords) with anyone. The law amends existing VA procedures to add this security warning as a standard message during website logins. The Chief Veterans Experience Officer will implement these changes, effective 180 days after the bill's enactment. The policy directly affects veterans using VA online services by strengthening protections against fraudulent agents targeting their personal information.
HR 2612, the DELETE Act, creates a system allowing individuals to request deletion of their personal data from data brokers through a single online portal. Data brokers must register annually with the FTC and implement a centralized deletion system, requiring them to delete personal information within 31 days of a request (with limited exceptions for legal requirements or research). The FTC enforces compliance through annual audits, mandatory reporting on deletion completion rates, and penalties for violations. This directly affects companies that collect personal information without a direct customer relationship and sell or share it with third parties.
This bill requires major websites and online services (excluding small businesses) to provide a simplified, accessible summary of their terms of service within 360 days. The summary must clearly explain what sensitive data they collect (e.g., health, location, financial info), user rights (like arbitration waivers), data breach history, and estimated reading time, and must be placed prominently on their sites. It also mandates a graphic diagram showing how user data is shared with third parties and an interactive format for full terms. Violations can be enforced by the FTC or state attorneys general acting on behalf of residents.
The Kids Internet Safety Partnership Act establishes a new program within the Commerce Department to improve online safety for children under 18. The program will work with parents, educators, online platforms, and experts to identify risks and benefits of digital services for minors, then develop practical safety guidelines. Within two years, it will publish a detailed guide for platforms on implementing features like age verification, parental controls, and design changes that reduce addictive elements (e.g., endless scrolling). The program will also release regular reports tracking how well platforms adopt these safety measures. The initiative will end after five years.
HR 6484, the Kids Online Safety Act, requires social media platforms and online services (termed "covered platforms") to implement specific safety measures for minors under 17. The bill mandates default privacy settings that limit communication with other users, default time limits on platform usage, and parental control tools to monitor and restrict children's online activity. Platforms must prevent advertising of harmful products like drugs, alcohol, and gambling to minors and provide clear safety information before minors register or make purchases. The legislation also requires annual independent audits of platforms' compliance with these safety measures and establishes a Kids Online Safety Council to provide recommendations on online safety for minors.
