See Something, Say Something Online Act of 2023

To require reporting of suspicious transmissions in order to assist in criminal investigations and counterintelligence activities relating to international terrorism, and for other purposes. 1. Short title This Act may be cited as the See Something, Say Something Online Act of 2023 2. Sense of Congress It is the sense of Congress that— (1) section 230 of the Communications Act of 1934 ( 47 U.S.C. 230 Communications Decency Act of 1996 (2) it is not the intent of this Act to remove or strip all liability protection from websites or interactive computer service providers that are proactively working to resolve these issues; and (3) should websites or interactive computer service providers fail to exercise due care in the implementation, filing of the suspicious transmission activity reports, and reporting of major crimes, Congress intends to look at removing liability protections under the Communications Decency Act of 1996 in its entirety. 3. Definitions In this Act: (1) Department The term Department (2) Interactive computer service The term interactive computer service 47 U.S.C. 230 (3) Known suspicious transmission The term known suspicious transmission (A) should have reasonably known to have occurred; or (B) was notified of by a director, officer, employee, agent, interactive computer service user, or State or Federal law enforcement agency. (4) Major crime The term major crime (A) that is a crime of violence (as defined in section 16 of title 18, United States Code); (B) relating to domestic or international terrorism (as those terms are defined in section 2331 of title 18, United States Code); or (C) that is a serious drug offense (as defined in section 924(e) of title 18, United States Code). (5) STAR The term STAR (6) Suspicious transmission The term suspicious transmission 4. Reporting of suspicious activity (a) Mandatory reporting of suspicious transmissions (1) In general If a provider of an interactive computer service detects a suspicious transmission, the provider, including any director, officer, employee, agent, or representative of the provider, shall submit to the Department a STAR describing the suspicious transmission in accordance with this section. (2) Requirements (A) In general Except as provided in subparagraph (C), a STAR required to be submitted under paragraph (1) shall be submitted not later than 30 days after the date on which the provider of an interactive computer service— (i) initially detects the suspicious transmission; or (ii) is alerted to the suspicious transmission on the platform of such service. (B) Immediate notification In the case of a suspicious transmission that requires immediate attention, such as an active sale or solicitation of sale of drugs or a threat of terrorist activity, the provider of an interactive computer service shall— (i) immediately notify, by telephone, an appropriate law enforcement authority; and (ii) file a STAR in accordance with this section. (C) Delay of submission The 30-day period described in subparagraph (A) may be extended by 30 days if the provider of an interactive computer service provides a valid reason to the agency designated or established under subsection (b)(2). (b) Reporting process (1) In general The Attorney General shall establish a process by which a provider of an interactive computer service may submit STARs under this section. (2) Designated agency (A) In general In carrying out this section, the Attorney General shall designate an agency within the Department, or, if the Attorney General determines appropriate, establish a new agency within the Department, to which STARs should be submitted under subsection (a). (B) Consumer reporting The agency designated or established under subparagraph (A) shall establish a centralized online resource, which may be used by individual members of the public to report suspicious activity related to major crimes for investigation by the appropriate law enforcement or regulatory agency. (C) Cooperation with industry The agency designated or established under subparagraph (A)— (i) may conduct training for enforcement agencies and for providers of interactive computer services on how to cooperate in reporting suspicious activity; (ii) may develop relationships for promotion of reporting mechanisms and resources available on the centralized online resource required to be established under subparagraph (B); and (iii) shall coordinate with the National White Collar Crime Center to convene experts to design training programs for State and local law enforcement agencies, which may include using social media, online ads, paid placements, and partnering with expert non-profit organizations to promote awareness and engage with the public. (c) Contents Each STAR submitted under this section shall contain, at a minimum— (1) the name, location, and other such identification information as submitted by the user to the provider of the interactive computer service; (2) the date and nature of the post, message, comment, tag, transaction, or other user-generated content or transmission detected for suspicious activity such as time, origin, and destination; and (3) any relevant text, information, and metadata related to the suspicious transmission. (d) Retention of records and nondisclosure (1) Retention of records Each provider of an interactive computer service shall— (A) maintain a copy of any STAR submitted under this section and the original record equivalent of any supporting documentation for the 5-year period beginning on the date on which the STAR was submitted; (B) make all supporting documentation available to the Department and any appropriate law enforcement agencies upon request; and (C) not later than 30 days after the date on which the provider submits a STAR under this section, take action against the website or account reported unless the provider receives a notification from a law enforcement agency that the website or account should remain open. (2) Nondisclosure Except as otherwise prescribed by the Attorney General, no provider of an interactive computer service, or officer, director, employee, or agent of such a provider, subject to an order under subsection (a) may disclose the existence of, or terms of, the order to any person. (e) Disclosure to other agencies (1) In general Subject to paragraph (2), the Attorney General shall— (A) ensure that STARs submitted under this section and reports from the public submitted under subsection (b)(2)(B) are referred as necessary to the appropriate Federal, State, or local law enforcement or regulatory agency; (B) make information in a STAR submitted under this section available to an agency, including any State financial institutions supervisory agency or United States intelligence agency, upon request of the head of the agency; and (C) develop a strategy to disseminate relevant information in a STAR submitted under this section in a timely manner to other law enforcement and government agencies, as appropriate, and coordinate with relevant nongovernmental entities, such as the National Center for Missing and Exploited Children. (2) Limitation The Attorney General may only make a STAR available under paragraph (1) for law enforcement purposes. (f) Compliance Any provider of an interactive computer service that fails to report a known suspicious transmission shall not be immune from civil or criminal liability for such transmission under section 230(c) of the Communications Act of 1934 ( 47 U.S.C. 230(c) (g) Application of FOIA Any STAR submitted under this section, and any information therein or record thereof, shall be exempt from disclosure under section 552 of title 5, United States Code, or any similar State, local, Tribal, or territorial law. (h) Rulemaking authority Not later than 180 days after the date of enactment of this Act, the Attorney General shall promulgate regulations to carry out this section. (i) Report Not later than 180 days after the date of enactment of this Act, the Attorney General shall submit to Congress a report describing the plan of the Department for implementation of this Act, including a breakdown of the costs associated with implementation. (j) Authorization of appropriations There are authorized to be appropriated to the Attorney General such sums as may be necessary to carry out this Act. 5. Amendment to Communications Decency Act Section 230(e) of the Communications Act of 1934 ( 47 U.S.C. 230(e) (6) Loss of liability protection for failure to submit suspicious transmission activity report (A) Definitions In this paragraph, the terms known suspicious transmission suspicious transmission See Something, Say Something Online Act of 2023 (B) Requirement Any provider of an interactive computer service shall take reasonable steps to prevent or address unlawful users of the service through the reporting of suspicious transmissions. (C) Failure to comply Any provider of an interactive computer service that fails to report a known suspicious transmission may be held liable as a publisher for the related suspicious transmission. (D) Rule of construction Nothing in this paragraph shall be construed to impair or limit any claim or cause of action arising from the failure of a provider of an interactive computer service to report a suspicious transmission. .

Summary: See Something, Say Something Online Act of 2023 This bill requires a provider of an interactive computer service (e.g., a social media company) to submit an activity report to the Department of Justice if it detects the transmission of any post, message, comment, tag, or other user-generated content or transmission that commits, facilitates, incites, promotes, or otherwise assists the commission of a major crime. The activity report describing the transmission must contain (1) the name, location, and other identification information submitted by the user; (2) the date and nature of the user-generated content or transmission detected for suspicious activity; and (3) any relevant text, information, and metadata related to the suspicious transmission. If a provider fails to report a known suspicious transmission, the bill eliminates federal liability protection (sometimes referred to as Section 230 protection) for claims related to that transmission. (Generally, Section 230 provides federal immunity that prevents providers and users of interactive computer services from being held liable for transmitting or taking down user-generated content.)