Internet Application I.D. Act

#3614 | S Congress #119

Policy Area: Commerce
Subjects:

Last Action: Read twice and referred to the Committee on Commerce, Science, and Transportation. (1/12/2026)

Bill Text Source: Congress.gov

Summary and Impacts
Original Text

Bill Summary

The "Internet Application Integrity and Disclosure Act" (also known as the "Internet Application I.D. Act") is a piece of legislation aimed at enhancing transparency regarding the ownership and data handling practices of internet websites and mobile applications associated with foreign adversaries.

Key provisions of the Act include:

1. **Disclosure Requirements**: Starting one year after the enactment, any individual or entity that operates a website or mobile application partially or fully owned by a foreign adversary or that stores user data in such a country must inform users about the ownership and data storage practices. This includes clarifying whether:
- The service is owned by a foreign adversary country or entity.
- User data is maintained in a foreign adversary country.
- Foreign adversaries have access to user information.

2. **False Information Penalty**: It is illegal to knowingly provide false information regarding these disclosures.

3. **Definitions**: The Act defines key terms, including "covered service" (the websites or applications in question), "foreign adversary country," and "individual" (a person residing in the U.S.).

4. **Enforcement**: The Federal Trade Commission (FTC) is tasked with enforcing compliance with this law, categorizing violations as unfair or deceptive practices under existing laws.

Overall, the legislation aims to protect U.S. citizens by ensuring they are aware of potential risks associated with using digital platforms tied to foreign adversaries, promoting informed decision-making about their online activities.

Possible Impacts

Here are three examples of how the "Internet Application Integrity and Disclosure Act" could affect people:

1. **Informed Decision-Making**: Individuals who download or use mobile applications or websites that are owned or operated by foreign adversaries will be better informed about the potential risks to their personal information. The requirement for clear disclosure will allow users to make more informed decisions about whether to trust these services with their data, enhancing their ability to protect their privacy.

2. **Increased Compliance and Transparency**: Businesses that distribute mobile applications or operate websites will need to ensure compliance with the new disclosure requirements. This could lead to increased operational costs for these companies as they may need to implement new systems and processes to provide the required disclosures. This increased transparency may also lead to changes in how companies handle user data and their relationships with foreign partners, potentially benefiting consumers through improved data protection practices.

3. **Legal and Financial Consequences**: Entities that fail to comply with the disclosure requirements may face legal repercussions under the enforcement provisions of the Act. This could result in fines or other penalties imposed by the Federal Trade Commission (FTC). For individuals, if they are misled by false information about the ownership or data storage practices of an application, they may have legal recourse, potentially leading to greater accountability for companies and enhanced consumer rights.

[Congressional Bills 119th Congress]
[From the U.S. Government Publishing Office]
[S. 3614 Introduced in Senate (IS)]

<DOC>






119th CONGRESS
  2d Session
                                S. 3614

To require any person that maintains an internet website or that sells 
or distributes a mobile application that is owned, wholly or partially, 
 by a foreign adversary country, by a foreign adversary country-owned-
 entity, or by a non-state-owned entity located in a foreign adversary 
 country, or that stores and maintains information collected from such 
website or application in a foreign adversary country, to disclose that 
fact to any individual who downloads or otherwise uses such website or 
                              application.


_______________________________________________________________________


                   IN THE SENATE OF THE UNITED STATES

                            January 12, 2026

Ms. Cortez Masto (for herself, Mr. Grassley, and Mr. Lujan) introduced 
the following bill; which was read twice and referred to the Committee 
                on Commerce, Science, and Transportation

_______________________________________________________________________

                                 A BILL


 
To require any person that maintains an internet website or that sells 
or distributes a mobile application that is owned, wholly or partially, 
 by a foreign adversary country, by a foreign adversary country-owned-
 entity, or by a non-state-owned entity located in a foreign adversary 
 country, or that stores and maintains information collected from such 
website or application in a foreign adversary country, to disclose that 
fact to any individual who downloads or otherwise uses such website or 
                              application.

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

    This Act may be cited as the ``Internet Application Integrity and 
Disclosure Act'' or the ``Internet Application I.D. Act''.

SEC. 2. DISCLOSURE REQUIREMENTS RELATING TO OWNERSHIP, STORAGE, AND 
              MAINTENANCE OF INFORMATION IN A FOREIGN ADVERSARY 
              COUNTRY.

    (a) Disclosure Requirements.--Beginning 1 year after the date of 
enactment of this Act, any person who owns, controls, or distributes 
access to a covered service shall clearly and conspicuously disclose to 
any individual who downloads or otherwise uses the covered service the 
following:
            (1) Whether the covered service is owned, wholly or 
        partially, by a foreign adversary country, by a foreign 
        adversary country-owned entity, or by a non-state-owned entity 
        located in a foreign adversary country.
            (2) Whether information collected from the covered service 
        is stored and maintained in a foreign adversary country.
            (3) Whether a foreign adversary country or a foreign 
        adversary country-owned entity has access to such information.
    (b) False Information.--It shall be unlawful for any person to 
knowingly disclose false information under this section.
    (c) Definitions.--In this section:
            (1) Covered service defined.--The term ``covered service'' 
        means an internet website or a mobile application that--
                    (A) is owned, wholly or partially, by a foreign 
                adversary country, by a foreign adversary country-owned 
                entity, or by a non-state-owned entity located in a 
                foreign adversary country; or
                    (B) stores and maintains information collected from 
                such website or application in a foreign adversary 
                country.
            (2) Foreign adversary country.--The term ``foreign 
        adversary country'' means a country specified in section 
        4872(f)(2) of title 10, United States Code.
            (3) Individual.--The term ``individual'' means a natural 
        person residing in the United States.
            (4) Non-state-owned entity located in a foreign adversary 
        country.--The term ``non-state-owned entity located in a 
        foreign adversary country'' means an entity that is--
                    (A) controlled (as such term is defined in section 
                800.208 of title 31, Code of Federal Regulations, or a 
                successor regulation) by any governmental organization 
                of a foreign adversary country; or
                    (B) organized under the laws of a foreign adversary 
                country.

SEC. 3. ENFORCEMENT.

    (a) Unfair or Deceptive Acts or Practices.--A violation of this Act 
is a violation of a rule defining an unfair or deceptive act or 
practice prescribed under section 18(a)(1)(B) of the Federal Trade 
Commission Act (15 U.S.C. 57a(a)(1)(B)).
    (b) Powers of the Federal Trade Commission.--
            (1) In general.--The Federal Trade Commission shall enforce 
        this Act in the same manner, by the same means, and with the 
        same jurisdiction, powers, and duties as though all applicable 
        terms and provisions of the Federal Trade Commission Act (15 
        U.S.C. 41 et seq.) were incorporated into and made a part of 
        this Act.
            (2) Privileges and immunities.--Any person that violates 
        this Act shall be subject to the penalties, and entitled to the 
        privileges and immunities, provided in the Federal Trade 
        Commission Act (15 U.S.C. 41 et seq.).
            (3) Authority preserved.--Nothing in this Act shall be 
        construed to limit the authority of the Federal Trade 
        Commission under any other provision of law.
                                 <all>