Delegatability

(a) General duty of large communications platform providers A large communications platform provider shall maintain a set of transparent third-party-accessible interfaces by which a user may delegate a custodial third-party agent to manage the user’s online interactions, content, and account settings on a large communications platform on the same terms as a user. (b) Authentication Not later than 180 days after the date of enactment of this Act, the Commission shall establish rules and procedures to facilitate a custodial third-party agent’s ability to obtain access pursuant to subsection (a) in a way that ensures that a request for access on behalf of a user is a verifiable request. (c) Registration with the Commission A custodial third-party agent shall register with the Commission as a condition of, and prior to, accessing an interface described in subsection (a). (d) Deregistration by the Commission The Commission shall establish rules and procedures to deregister a custodial third-party agent that the Commission determines has violated the duties established in this section. (e) Revocation of access rights A large communications platform provider may revoke or deny access for any custodial third-party agent that— (1) fails to register with the Commission; or (2) repeatedly facilitates fraudulent or malicious activity. (f) Duties of a custodial third-Party agent A custodial third-party agent— (1) shall reasonably safeguard the privacy and security of user data provided to it by a user, or accessed on a user’s behalf; (2) shall not access or manage a user’s online interactions, content, or account settings in any way that— (A) will benefit the custodial third-party agent to the detriment of the user; (B) will result in any reasonably foreseeable harm to the user; or (C) is inconsistent with the directions or reasonable expectations of the user; and (3) shall not collect, use, or share any user data provided to it by a user, or accessed on a user’s behalf, for the commercial benefit of the custodial third-party agent. (g) Fees A custodial third-party agent may charge users a fee for the provision of the products or services described in subsection (a). (h) Extent of access rights Nothing in this section shall be construed to confer greater rights of access for a custodial third-party agent to a large communications platform than are accessible to a user.