US SB2316

Requires electronic communication service providers and remote computing services to report to the Attorney General within 60 days of obtaining actual knowledge of crimes involving the manufacture, distribution, or sale of fentanyl, methamphetamine, counterfeit substances, or unauthorized prescription drugs on their platforms

Mandates reports include provider contact information and account details such as name, email address, IP address, and user identification; providers may optionally include communication contents, geographic location data, and timestamps

Establishes criminal penalties of up to $190,000 for initial violations and $380,000 for subsequent violations for knowingly failing to report, plus civil penalties of $50,000-$100,000 for submitting false reports or omitting required information

Protects provider discretion by explicitly not requiring monitoring of users, scanning for violations, or decryption of end-to-end encrypted communications; providers only must report upon obtaining "actual knowledge" of violations

Requires the Attorney General to publish annual reports on the number of submissions received, convictions resulting from reports, and breakdown by provider and detection method (human vs. algorithmic)