Custodial Agent Interoperability Framework

Summary#

This bill creates a federal right for people to appoint software “custodial user agents” (automated tools or services) to act for them on large online platforms. It requires big platforms to provide technical interfaces so those agents can operate, sets rules for how agents must protect users, and gives the Federal Trade Commission (FTC) authority to register, regulate, and enforce those rules. The goal is to make it easier to use third‑party tools, lower switching costs, and promote competition in online services.

Key changes:

• Right to delegate: Users of a “large online platform” (one with >50 million U.S. customers in a month) may designate custodial user agents to manage their interactions, purchases, content, and account settings on the same terms as the user.
• Platform duties: Large platforms must provide transparent, third‑party accessible interfaces (interoperability) so authorized agents can act for users, and they must offer access on fair, reasonable, and nondiscriminatory terms.
• Agent registration and duties: Custodial user agent providers must register with the FTC, follow duties to protect user data, avoid using data for secondary commercial purposes (like advertising), keep records, and avoid delegating authority without the user’s consent.
• Standards and tech: The Director of NIST must identify or create open technical standards for key service types (messaging, social media, e‑commerce, finance, AI) and for verifiable delegation.
• Enforcement: Violations are treated as unfair or deceptive acts under the FTC Act. The FTC can deregister agents, impose penalties, and assess fines with each affected user counted separately.
• Timing: The FTC must issue regulations within 1 year. Some technical and authentication rules are due within 180 days or 120 days as specified.

What it means for you#

• Users

  • You can choose one or more registered custodial user agents to act for you on covered large platforms.
  • Agents must act on the same terms you have and you must be able to revoke the agent easily.
  • Your agent cannot use your data for advertising, profiling, or sale unless necessary to provide the service you chose.

• People or companies that build custodial user agents

  • You must register with the FTC before your agent can access platform interfaces.
  • You must follow duties on privacy, security, record‑keeping, and not acting against users’ interests.
  • If you violate the duties, you can be deregistered and face FTC enforcement.

• Large online platforms (over 50M U.S. users per month)

  • Must maintain interoperability interfaces and publish documentation needed for third parties to build compatible agents.
  • Must offer access on fair and nondiscriminatory terms but may set reasonable usage thresholds and fees that are proportional to cost, complexity, and risk.
  • Must publish their privacy/security access standards and report denials of access to the FTC.
  • Cannot change interfaces primarily to block authorized custodial user agents.

• Businesses and third‑party service providers

  • New markets may open for services that manage user accounts, automate purchases, or migrate user data across platforms.
  • Platforms may charge fees to high‑volume agent providers; businesses should plan for possible integration and compliance work.

• Regulators and financial services

  • The FTC coordinates with financial regulators on rules where agents interact with finance services.
  • NIST will publish technical models that could be adopted by industry.

• Who is not affected

  • Platforms with fewer than 50 million U.S. users in a month are not covered as “large online platforms” under this bill.

Expenses#

No publicly available information on official cost estimates or a fiscal note is included in the bill text or explanatory material.

Possible likely costs (inferred from the bill):

• The FTC will need resources for rulemaking, registration systems, compliance assessments, and enforcement.
• NIST will need staff time to identify or develop technical standards.
• Large platforms will face development and maintenance costs to build and document interoperability interfaces, and to operate privacy/security controls and reporting.
• Custodial user agent providers will face registration, compliance, and record‑keeping costs.
• The bill does not specify who pays for certification bodies; the Commission may recognize independent bodies, which could create certification costs for agent providers.

Proponents' View#

• The bill appears intended to increase competition by making it easier for users to use third‑party tools that manage accounts, content, and commerce across platforms.
• It could be seen as reducing switching costs for users who want to move or manage accounts without losing social connections or content.
• The requirement for open protocols and NIST standards may improve technical interoperability and reduce fragmentation.
• Registration, duties, and record‑keeping aim to protect users’ privacy and security while letting agents operate.
• Treating violations as unfair or deceptive practices gives the FTC a clear enforcement path.

Opponents' View#

• One concern is that the bill leaves important technical and procedural details to agencies (FTC, NIST), so practical implementation and timelines are uncertain.
• The law applies only to very large platforms (over 50 million users), so many services and smaller platforms would not be covered.
• There may be privacy and security risks if delegated agents are compromised or misused; the bill requires safeguards but does not fully specify liability rules for agent mistakes or fraud.
• Platforms and agent providers could face new costs to register, certify, and comply; the bill allows platforms to charge fees for heavy usage but leaves “reasonable” open to dispute.
• The role and independence of private certification bodies is not fully detailed; the FTC may rely on these bodies, creating questions about oversight and standards.
• Enforcement burdens on the FTC and related agencies could be substantial, and the bill does not include a published cost estimate.