(a)
Covered platform requirements— Beginning on the date that is 1 year after the date of enactment of this Act, a covered platform shall adopt and utilize technology verification measures on the platform to ensure that—
(1)
users of the covered platform are not minors; and
(2)
minors are prevented from accessing any content on the covered platform that is harmful to minors.
(b)
Requirements for age verification measures— In order to comply with the requirement of subsection (a), the technology verification measures adopted and utilized by a covered platform shall do the following:
(1)
Use a technology verification measure in order to verify a user's age.
(2)
Provide that requiring a user to confirm that the user is not a minor shall not be sufficient to satisfy the requirement of subsection (a).
(3)
Make publicly available the verification process that the covered platform is employing to comply with the requirements under this Act.
(4)
Subject the Internet Protocol (IP) addresses, including known virtual proxy network IP addresses, of all users of a covered platform to the technology verification measure described in paragraph (1) unless the covered platform determines based on available technology that a user is not located within the United States.
(c)
Choice of verification measures— A covered platform may choose the specific technology verification measures to employ for purposes of complying with subsection (a), provided that the technology verification measure employed by the covered platform meets the requirements of subsection (b) and prohibits a minor from accessing the platform or any information on the platform that is obscene, child pornography, or harmful to minors.
(d)
Use of third parties— A covered platform may contract with a third party to employ technology verification measures for purposes of complying with subsection (a) but the use of such a third party shall not relieve the covered platform of its obligations under this Act or from liability under this Act.
(e)
Rule of construction— Nothing in this section shall be construed to require a covered platform to submit to the Commission any information that identifies, is linked to, or is reasonably linkable to a user of the covered platform or a device that identifies, is linked to, or is reasonably linkable to a user of the covered platform.
(f)
Technology verification measure data security— A covered platform shall—
(1)
establish, implement, and maintain reasonable data security to—
(A)
protect the confidentiality, integrity, and accessibility of technology verification measure data collected by the covered platform or a third party employed by the covered platform; and
(B)
protect such technology verification measure data against unauthorized access; and
(2)
retain the technology verification measure data for no longer than is reasonably necessary to utilize a technology verification measure or what is minimally necessary to demonstrate compliance with the obligations under this Act.