This bill mandates that social media companies with over one hundred million active monthly users, whose primary focus is not charity or religion, must provide users with access to their personal data upon request. The data must be delivered in a portable and usable format that allows users to easily transfer their information to other social media services. Additionally, these companies are required to implement a transparent interoperability interface that enables users to share a common set of their personal data with other platforms and allows third parties to access user-generated content, contingent on user consent.

Furthermore, the bill outlines specific requirements for how social media companies must handle the export of user data, including the use of publicly available technical standards free from licensing fees and patent restrictions. It also emphasizes the importance of safeguarding user privacy and security when handling personal data obtained through interoperability interfaces. Notably, the provisions of this bill do not apply to entities owned or operated by religious organizations, and it clarifies that social media services are not obligated to import data or treat imported data differently from other user-generated content. The bill is set to take effect on July 1, 2027.

Statutes affected:
Introduced, 01/22/2026: 53-12-1, 55-1A-35.1
Senate State Affairs Engrossed, 02/11/2026: 53-12-1, 55-1A-35.1
Senate Engrossed, 02/18/2026: 53-12-1, 55-1A-35.1
House Engrossed, 02/26/2026: 53-12-1, 55-1A-35.1
Enrolled, 03/03/2026: 53-12-1, 55-1A-35.1