SC H4666

Requires social media companies to provide users with a portable, usable copy of their personal data (including their "social graph" of connections, content, and interactions) upon request

Mandates social media companies implement interoperability interfaces using open protocols, allowing users to share their data between different social media platforms with their consent

Defines "social graph" to include a user's connections, content they created, comments/reactions/shares, responses from others, and associated metadata—but excludes private messages

Establishes enforcement through the Department of Consumer Affairs with civil penalties of up to $2,500 per violation, or $5,000 for violating administrative or court orders

Grants consumers rights to access, delete, correct, and obtain copies of their personal data, as well as opt out of targeted advertising and data sales

Exempts religious organizations that are tax-exempt from the law's requirements