Congress mandates social media APIs for parental monitoring of children
S. 4159 — Sammy’s Law · Filed by Jon Husted (R-OH) · 2 cosponsors · Introduced Mar 20, 2026 · Referred to committee
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
This bill requires large social media platforms (those with over 100 million monthly users or $1 billion annual revenue) to create and maintain APIs that allow children or their parents to delegate account management to third-party safety software providers. These providers can then monitor and manage a child's online interactions, content, and account settings in real time, with strict data security, audit, and anti-sale requirements. The bill preempts state laws on the same subject but preserves general consumer protection and fraud laws.
Why we flagged it
The bill's core mechanism is a regulatory mandate requiring platforms to expose APIs for third-party safety software, enabling parental oversight of children's accounts. It is fundamentally a child-safety and parental-empowerment measure, not a deregulation or industry carve-out.
What the text implies
- The bill's preemption of state law (Section 5) creates a uniform federal floor but may prevent states from imposing stricter child-safety requirements, potentially limiting regulatory competition and innovation at the state level.
- The indemnification clause (Section 3(6)) shields platforms from liability if they comply 'in good faith,' which may create a safe harbor for negligent API design or inadequate security if platforms can claim good-faith compliance with the statute's minimum standards.
- Third-party safety software providers become custodians of sensitive child data (including communications, location, contacts) with only FTC oversight and annual audits; a breach or misconduct by a small or undercapitalized provider could expose millions of children's data.
- The bill permits disclosure of user data to parents for a broad list of harms (depression, anxiety, eating disorders, etc.), which may incentivize over-monitoring and could chill children's willingness to seek help or confide in peers if they know parents have real-time visibility.
- Platforms must maintain end-to-end encryption features without alteration but also enable third-party access via 'user-designated recipient' interfaces; the technical feasibility and security of this dual requirement is untested and may create new attack surfaces.
Section numbers refer to the bill text the analysis read — linked under Primary records below.
Who it affects
The bill empowers parents and children with tools to manage online safety while imposing strict guardrails on data use—third-party providers cannot sell data, must delete it within days, and face FTC oversight and annual audits. The primary beneficiaries are families seeking parental controls; the primary costs fall on platforms (API development, compliance) and are passed through market competition, not to citizens.
Who stands to gain
- Third-party safety software providers (parental control and monitoring software companies)
- Cybersecurity and data protection service providers (auditing, compliance, encryption firms)
Named in the bill
Federal Trade Commission (FTC), Large social media platforms (Meta, TikTok, YouTube, Snapchat, X, Discord, etc.), Third-party safety software providers, States and political subdivisions
Where it stands
2 cosponsors: 1 Democrats, 1 Republicans.
- Mar 20, 2026 — Introduced · Congress.gov: “Introduced in Senate”
- Mar 20, 2026 — Referred to Senate Committee on Commerce, Science, and Transportation · Congress.gov: “Read twice and referred to the Committee on Commerce, Science, and Transportation”
Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.
Money around this bill
6 lobbying clients named this bill on 6 disclosure filings across 1 quarter, Jun 2026 to Jun 2026. Those filings disclosed $1,909,000 in lobbying spend. A filing names 6 bills on average, so that figure is what each filing reported, not a share belonging to this bill.
More lobbying clients named this bill than 82% of bills with at least one filing.
Jon Husted, the sponsor, reported $2,682,096 in PAC receipts in the 2026 cycle.
- Entertainment Software Association — $1,390,000 on 1 filing
- Sony Interactive Entertainment LLC — $380,000 on 1 filing
- Bark Technologies — $50,000 on 1 filing
- Bark Technologies, Inc. — $40,000 on 1 filing
- Clark County Nv (office of the County Manager) — $40,000 on 1 filing
Lobbying Disclosure Act filings through Jul 20, 2026. A filing shows who paid to lobby on a bill it names, not what changed.
How this was measured
Analysis — Quorum's AI read the bill text published by Congress.gov (24,962 characters) on Aug 21, 2026. Section numbers in the findings refer to that text, linked below; transparency and hidden-provision scores are compared against the median of 16,222 analysed bills.
Status and sponsors — Congress.gov's bill record — actions, committee referrals and cosponsors — loaded nightly. The timeline shows status changes, not every procedural action.
Money — Senate Lobbying Disclosure Act filings whose specific-issue field names this bill for quarters ending Jun 2026 to Jun 2026. A filing's amount is reported whole beside the median number of bills a filing names; it is never divided across them. PAC receipts are FEC-reported contributions to the sponsor's candidate committee in the 2026 cycle.
As of — lobbying records through Jul 20, 2026 · page rendered 2026-10-20.
“Congress mandates social media APIs for parental monitoring of children” QuorumCivic. https://share.quorumcivic.app/bill/119/s4159 Report an error
The week in bills
One email, Sunday: what Congress passed, what it changed, and who paid.
One link arrives to confirm the address. It is used for this email and nothing else, and every issue carries an unsubscribe link.