HB5380 - Parental Digital Choice Act (Sammy's Law)

• Large social media platforms with over 100 million monthly active users or $1 billion annual revenue must create real-time application programming interfaces by August 1, 2025, allowing children 13+ or parents/guardians to delegate account management to third-party safety software providers.

• Third-party safety software providers can manage a child's online interactions, content, and account settings on the same terms as the child and initiate secure data transfers in machine-readable format at least once per hour.

• Third-party safety software providers must disclose their operations to children and parents in easy-to-understand format and can only use data to protect children from harm; data can only be disclosed to law enforcement, government authorities, or if a child faces foreseeable risk of suicide, abuse, trafficking, violence, harassment, or other specified harms.

• Large social media platform providers are shielded from civil liability for good faith compliance with the Act's data transfer requirements, except in actions brought by the Attorney General.

• Violations of the Act constitute unlawful practices under the Consumer Fraud and Deceptive Business Practices Act, enforceable by the Illinois Attorney General; the Act becomes effective June 1, 2025.