Congress demands foreign apps disclose who owns your data
S. 3614 — Internet Application I.D. Act · Filed by Catherine Cortez Masto (D-NV) · 2 cosponsors · Introduced Jan 12, 2026 · Referred to committee
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
This bill requires any website or mobile app owned by a foreign adversary country (or entities controlled by one) to clearly disclose that fact to U.S. users, and whether user data is stored in that country. The FTC enforces it as an unfair-practice violation. The bill aims to give Americans transparency about foreign control of digital services they use.
Why we flagged it
The bill's core mechanism is a transparency requirement: foreign-controlled digital services must disclose ownership and data-storage location to U.S. users. It is a disclosure-and-enforcement bill, not a ban or subsidy.
What the text implies
- The bill's definition of 'foreign adversary country' is pegged to 10 USC § 4872, which is a dynamic list maintained by the Department of Defense. Changes to that list automatically expand or contract the bill's scope without new legislation, creating potential for regulatory drift.
- Apps that store data in a foreign adversary country but are U.S.-owned must still disclose; this may inadvertently capture legitimate U.S. companies with overseas data centers in allied nations if those nations are later designated adversaries.
- The bill does not define 'access' in the context of foreign adversary access to data. Unclear whether this means direct ownership, legal authority to compel disclosure, or technical capability — creating enforcement ambiguity.
- No safe harbor or exemption for encrypted or anonymized data, which may trigger disclosure obligations even when user privacy is technically protected.
Who it affects
Ordinary users gain transparency about foreign ownership and data storage practices — information they currently lack and cannot easily discover. This enables informed choice and reduces hidden foreign surveillance risk. The compliance burden falls on service providers, not citizens.
Who stands to gain
- U.S.-based social media and tech platforms (competitive advantage vs. foreign-owned competitors)
- VPN and privacy-tool providers (increased user demand for anonymity)
- Cybersecurity and compliance consulting firms
Named in the bill
Federal Trade Commission (FTC), Foreign adversary countries (per 10 USC § 4872), TikTok (likely primary target, though not named), WeChat (likely primary target, though not named), U.S. tech platforms (Apple, Google, Meta, Amazon, Microsoft)
Where it stands
2 cosponsors: 1 Democrats, 1 Republicans.
- Jan 12, 2026 — Introduced · Congress.gov: “Introduced in Senate”
- Jan 12, 2026 — Referred to Senate Committee on Commerce, Science, and Transportation · Congress.gov: “Read twice and referred to the Committee on Commerce, Science, and Transportation”
Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.
How this was measured
Analysis — Quorum's AI read the full bill text on Jul 5, 2026; transparency and hidden-provision scores are compared against the median of 16,222 analysed bills.
Status and sponsors — Congress.gov's bill record — actions, committee referrals and cosponsors — loaded nightly. The timeline shows status changes, not every procedural action.
As of — page rendered 2026-10-20.
“Congress demands foreign apps disclose who owns your data” QuorumCivic. https://share.quorumcivic.app/bill/119/s3614 Report an error
The week in bills
One email, Sunday: what Congress passed, what it changed, and who paid.
One link arrives to confirm the address. It is used for this email and nothing else, and every issue carries an unsubscribe link.