This bill, titled Sammy's Law, aims to enhance child safety on large social media platforms by requiring these platforms to provide access to third-party safety software. It defines a "child" as any individual under 17 years old with an account and a "large social media platform" as a service with over 100 million monthly global active users or $1 billion in gross revenue, which allows children to share content with other users they meet through the service. Specifically, large social media platform providers must create and maintain real-time application programming interfaces (APIs) for registered third-party safety software providers. Through these APIs, a child (if 13 or older) or their parent/legal guardian can delegate permission to the third-party software to manage the child's online interactions, content, and account settings, as well as initiate secure transfers of user data. This delegation can be revoked under various conditions, and platforms must ensure secure data transfer and disclose to the child and parent that a delegation has been made and what data is transferred. Third-party safety software providers must register with the Federal Trade Commission (FTC) and meet strict conditions, including being US-based , not foreign-controlled, and using user data solely for protecting children from harm. They must also process and maintain all user data exclusively within the United States and delete most data within 14 days, with specific exceptions for data disclosed to parents or for account cancellation. Registration requires a security review and annual audits by independent firms to ensure compliance and data security. The bill outlines strict rules for user data disclosure by third-party safety software providers, generally prohibiting it except under specific circumstances. Permitted disclosures include lawful government requests, legally required disclosures, or to the child/parent if the child is experiencing or at foreseeable risk of specific harms such as suicide, human trafficking, sexual abuse, or substance abuse . Providers must generally inform the child or parent about such disclosures, unless doing so would put the child at serious risk or is prohibited by law. The FTC is tasked with enforcing this Act, treating violations as unfair or deceptive acts or practices, and will issue guidance to assist compliance and educate consumers. The bill establishes a national standard , preempting state laws that would require similar API access from social media platforms. However, it explicitly states that it does not preempt state consumer protection, trespass, contract, tort, or fraud laws.