Congress demands foreign apps disclose who owns your data
S. 3614 — Internet Application I.D. Act · Filed by Catherine Cortez Masto (D-NV) · 2 cosponsors · Introduced Jan 12, 2026 · Referred to committee
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
This bill requires any website or mobile app owned by a foreign adversary country (or entities controlled by one) to clearly disclose that fact to U.S. users, and whether user data is stored in that country. The FTC enforces it as an unfair-practice violation. The bill aims to give Americans transparency about foreign control of digital services they use.
Why we flagged it
The bill's core mechanism is a transparency requirement: foreign-controlled digital services must disclose ownership and data-storage location to U.S. users. It is a disclosure-and-enforcement bill, not a ban or subsidy.
What the text implies
- The bill's definition of 'foreign adversary country' is pegged to 10 USC § 4872, which is a dynamic list maintained by the Department of Defense. Changes to that list automatically expand or contract the bill's scope without new legislation, creating potential for regulatory drift.
- Apps that store data in a foreign adversary country but are U.S.-owned must still disclose; this may inadvertently capture legitimate U.S. companies with overseas data centers in allied nations if those nations are later designated adversaries.
The full analysis lists 4 implications of this text.
Who stands to gain
U.S.-based social media and tech platforms (competitive advantage vs. foreign-owned competitors); VPN and privacy-tool providers (increased user demand for anonymity); Cybersecurity and compliance consulting firms