Sec. 2501. Corporate Citizenship and Ownership, Digital Consumer Protection Commission Act of 2023

Requires operators of dominant online platforms with owners (including minority owners) who are citizens of foreign adversaries of the U.S. to sequester data and algorithms from agents of any foreign entity.

  • Authority: United States Congress
  • Parent authority: Federal government
  • Jurisdiction: United States
  • Collections: U.S. federal laws
  • Most recent activity: Defunct
  • Most recent activity date: 2025-01-03

Risk subdomain coverage

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

  • Compromise of privacy
  • AI system security vulnerabilities
  • Disinformation, surveillance, and influence at scale
  • Competitive dynamics

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has minimal coverage of risk domains, primarily addressing national security concerns related to foreign adversary ownership and data access (subdomain 4.1). It implicitly touches on privacy/security risks (2.1, 2.2) through data sequestration requirements and governance structures (6.5) through ownership restrictions, but does not explicitly describe these as risks or harms.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

  • Information

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

  • National Security

All other sectors had no coverage in this document.

Sectors Summary

The document primarily governs the Information sector, specifically operators of dominant online platforms. It addresses corporate citizenship, ownership restrictions, and data sequestration requirements for platforms with foreign adversary ownership.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding legislative provision from the U.S. Congress with mandatory requirements, enforcement mechanisms through the Committee on Foreign Investment in the United States (CFIUS), and explicit penalties including license denial for non-compliance.

Actors

Proposer

  • Entity Types: AI_Governance_Actor
  • Entities: United States Congress
  • Summary: The document is a section of the Digital Consumer Protection Commission Act of 2023, which is federal legislation proposed and enacted by the United States Congress.

Target

  • Entity Types: AI_Deployer
  • Entities: operators of dominant platforms; subsidiary corporations of dominant platform operators
  • Summary: The document explicitly targets operators of dominant online platforms, particularly those with foreign adversary ownership, requiring them to meet citizenship requirements and sequester data from foreign access.

Enforcer

  • Entity Types: AI_Governance_Actor
  • Entities: Committee on Foreign Investment in the United States (CFIUS); Office of Licensing for Dominant Platforms; National Security Division of the Department of Justice
  • Summary: CFIUS is designated to review and investigate applications from foreign persons, with authority to recommend license denial. The Office of Licensing for Dominant Platforms has authority to deny licenses based on CFIUS determinations.

Monitor

  • Entity Types: AI_Governance_Actor
  • Entities: Committee on Foreign Investment in the United States (CFIUS)
  • Summary: CFIUS is tasked with reviewing and investigating applications to ensure compliance with national security requirements, effectively monitoring foreign ownership and control of dominant platforms.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

  • Collect and Process Data
  • Build and Use Model
  • Deploy
  • Operate and Monitor

AI Lifecycle Summary

The document does not explicitly address specific AI lifecycle stages. It focuses on corporate ownership and data governance requirements for dominant online platforms, which could apply across multiple lifecycle stages but does not specify particular development or deployment phases.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

No technical scope terms identified.

Technical Scope Summary

The document does not explicitly define or mention specific AI technical categories. It refers to 'algorithms' and 'dominant platforms' but does not specify whether these are AI systems, models, or other technical implementations. The focus is on corporate governance and data security rather than technical AI specifications.

https://www.congress.gov/bill/118th-congress/senate-bill/2597
https://agora.eto.tech/instrument/328
Explore in the Document View

Document data from AGORA, CSET Emerging Technology Observatory.