Parental controls for direct messaging of minors

(a) Requirement A provider of a social media platform that offers, provides, or enables any direct messaging feature of such social media platform to any covered user of the social media platform shall provide easily accessible and usable parental direct messaging controls to a parent of the covered user that the parent may activate and manage by providing verifiable parental consent. (b) Accessibility; usability; awareness The parental direct messaging controls described in subsection (a) shall meet the following requirements: (1) Be clearly and conspicuously accessible to a parent of a covered user through— (A) the settings of a profile of the covered user; and (B) any parental portal or interface offered by the social media platform. (2) Be designed to be user-friendly with clear explanations of the manner in which the parental direct messaging controls operate. (3) Be prominently displayed by the social media platform to— (A) a user who indicates that the user is a parent; and (B) a user who creates a profile for an individual who is likely to be a covered user. (c) Functionality of controls As a default setting on a social media platform, the parental direct messaging controls described in subsection (a) shall allow a parent of a covered user of the social media platform to do any of the following (unless the parent adjusts the default setting with respect to any of the following by providing verifiable parental consent): (1) Receive a timely notification that— (A) alerts the parent about a request from an unapproved contact who seeks to engage in direct messaging with the covered user; and (B) allows the parent to approve or deny the request before the unapproved contact and the covered user engage in any direct messaging. (2) View and manage a list of any contacts approved for engaging in direct messaging with the covered user. (3) Be informed if the covered user changes the age listed on a profile of the covered user (if any such change affects the applicability of such parental direct messaging controls). (4) Disable any direct messaging feature of a profile of the covered user. (d) Default settings for covered users under 13 (1) Requirement A provider of a social media platform, as a default setting, shall disable any direct messaging feature of a profile of a covered user under the age of 13. (2) Verifiable parental consent A parent may provide to a provider of a social media platform verifiable parental consent to enable any direct messaging feature of a profile of a covered user described in paragraph (1). (e) No degradation of other features or services A provider of a social media platform may not degrade the functionality or availability of any other feature or service of the social media platform for a covered user of the social media platform based on the activation or management of parental direct messaging controls by a parent of the covered user under this section (except as necessary to implement the parental direct messaging controls). (f) No circumvention A provider of a social media platform shall take reasonable measures to prevent a covered user of the social media platform from easily circumventing parental direct messaging controls activated and managed by a parent of the covered user under this section.