This bill mandates that internet services disclose to U.S. users if they are owned by, store data in, or grant access to data to a foreign adversary country.
Catherine Cortez Masto
Senator
NV
The Internet Application I.D. Act mandates that certain websites and mobile applications clearly disclose their ownership, data storage locations, and access rights related to foreign adversary countries. Owners or distributors of a "covered service" must inform U.S. users if the service is tied to a foreign adversary or stores user data there. The Federal Trade Commission (FTC) is granted the authority to enforce these disclosure requirements.
Ever downloaded an app or visited a website and wondered who really owns it, or where your data ends up? The proposed “Internet Application I.D. Act” aims to pull back the curtain on just that. This bill wants to make sure that internet websites and mobile applications clearly tell users in the United States if they’re owned, in whole or in part, by a “foreign adversary country” or an entity tied to one. It also requires them to disclose if your data is stored in one of these countries or if a foreign adversary has access to it. Think of it as a nutrition label for your digital life.
Starting one year after this bill becomes law, if you’re using a “covered service”—which basically means an app or website that either has foreign adversary ties or stores your data in one of those countries—they’ve got to give you the heads-up. This isn’t a small detail; it’s a clear, upfront disclosure. For example, if you’re using a social media app that stores all its user information on servers in a country deemed a foreign adversary, the app would need to tell you that right when you download it or start using it. The bill explicitly states that knowingly providing false information in these disclosures would be unlawful, adding a layer of accountability.
So, who’s going to make sure these apps and websites actually follow through? That would be the Federal Trade Commission (FTC). The bill gives the FTC the full authority to enforce these new rules, treating any violation as an “unfair or deceptive act or practice” under their existing powers. This means the FTC can hit companies with the same penalties and use the same legal muscle they do for other consumer protection issues. This is a big deal because it leverages an established agency to oversee a new digital frontier, though it will be interesting to see how they manage the sheer volume of online services out there.
For you, the everyday user, this bill is about transparency. It means you’ll have more information to decide if you’re comfortable using certain apps or websites, especially concerning your personal data. Imagine you’re a small business owner using a productivity app, or a parent letting your kids play a game; knowing who owns the service and where your data lives could influence your choices. The bill aims to empower individuals by giving them a clearer picture of potential national security or privacy risks tied to foreign adversary countries. However, the exact definition of what constitutes a “foreign adversary country” or an entity “controlled by” one will be key here. If those definitions are too broad or vague, it could create confusion for both companies and consumers, potentially making it tough for the FTC to enforce consistently. It’s a step towards more informed digital citizenship, but like any new rule, the devil will be in the details of its implementation.