Congress narrows Big Tech's immunity shield for deepfakes and cyberstalking

What it does

This bill amends Section 230 of the Communications Act to require social media platforms and online services to implement reasonable processes for addressing cyberstalking and nonconsensual intimate imagery (deepfakes and leaked private sexual content). Platforms must establish notice-and-removal procedures, maintain data logs for legal proceedings, and remove flagged content within 48 hours. The bill also expands the definition of 'information content provider' to include platforms that use generative AI to create or manipulate such content, potentially reducing their liability shield. Ordinary people gain faster removal of intimate privacy violations and cyberstalking, but platforms face new compliance burdens and potential liability expansion.

Why we flagged it

The bill's operative mechanism is a duty-of-care standard imposed on platforms to address nonconsensual intimate imagery and cyberstalking. It is fundamentally a consumer protection measure that narrows Section 230's liability shield for platforms that fail to implement reasonable safeguards, not a blanket deregulation or industry carve-out.

What the text implies

• Generative AI platforms may face expanded liability if they are deemed to 'create or develop' intimate imagery through solicitation, encouragement, or use of generative models—this could capture AI image-generation services and deepfake tools, not just social media platforms.
• The 48-hour removal mandate may incentivize platforms to over-remove content out of caution, potentially chilling legitimate speech or satire that falls near the definitional boundaries of 'sexually explicit digital forgery' or 'cyberstalking.'
• Data logging requirements for 'legal proceedings' may create new discovery obligations and privacy risks if preserved data is subpoenaed in civil litigation, potentially exposing user information beyond the original harm.
• The bill's definition of 'intimate privacy violation' includes deepfakes that are 'virtually indistinguishable' from authentic depictions, a subjective standard that may generate litigation over borderline cases and inconsistent platform enforcement.
• Platforms must establish removal processes but retain discretion on what constitutes 'reasonable' prevention and identification of copies, creating compliance ambiguity and potential liability disputes.

Section numbers refer to the bill text the analysis read — linked under Primary records below.

Who it affects

Ordinary citizens—particularly women and vulnerable individuals targeted by nonconsensual intimate imagery and cyberstalking—gain concrete legal remedies: faster removal (48 hours), mandatory platform processes, and data preservation for prosecution. The compliance burden on platforms is real but does not outweigh the public benefit of reducing a widespread harm that causes documented emotional distress and fear.

Who stands to gain

• Legal services / law firms (increased litigation and compliance work)
• Content moderation vendors and AI safety companies (platforms will outsource compliance)
• Cybersecurity and data preservation service providers

Named in the bill

Federal Trade Commission (FTC), Federal Communications Commission (FCC), Department of Justice (Attorney General), Section 230 of the Communications Act of 1934, TAKE IT DOWN Act, Interactive computer service providers, Covered platforms (social media, online services, mobile apps), Generative AI platforms

Where it stands

1 cosponsor: 1 Republicans.

• Dec 1, 2025 — Introduced · Congress.gov: “Introduced in House”
• Dec 1, 2025 — Referred to House Committee on Energy and Commerce · Congress.gov: “Referred to the House Committee on Energy and Commerce”

Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.

Money around this bill

3 lobbying clients named this bill on 5 disclosure filings across 2 quarters, Dec 2025 to Jun 2026. Those filings disclosed $9,805,000 in lobbying spend. A filing names 57 bills on average, so that figure is what each filing reported, not a share belonging to this bill.

More lobbying clients named this bill than 61% of bills with at least one filing.

Jake Auchincloss, the sponsor, reported $785,750 in PAC receipts in the 2026 cycle.

• Google Client Services LLC — $6,920,000 on 2 filings
• Entertainment Software Association — $2,810,000 on 2 filings
• National Women's Law Center Action Fund — $75,000 on 1 filing

Lobbying Disclosure Act filings through Jul 20, 2026. A filing shows who paid to lobby on a bill it names, not what changed.