This bill requires tech companies and online service providers to report certain drug crimes to the Attorney General. Specifically, if these companies discover evidence of illegal fentanyl, methamphetamine, counterfeit drugs, or unauthorized prescription drug sales happening on their platforms, they must report it within 60 days. The report should include account information like usernames, email addresses, IP addresses, and any other identifying details they have, though they don't have to include the actual private messages themselves.

The law applies to social media platforms, email services, cloud storage, and similar online services. Companies that knowingly fail to report face criminal fines starting at $190,000 for a first violation and $380,000 for repeat violations. If a company submits false information in a report, they can be sued for civil penalties between $50,000 and $100,000. However, the law doesn't require companies to actively monitor users or search through private communications—they only need to report when they already know about illegal drug activity, such as through their existing content moderation efforts.

The bill includes privacy protections: companies can still use encryption, and law enforcement cannot trick companies into submitting reports by posing as users. Reports are kept confidential and only shared with law enforcement agencies that need them for investigations. The Attorney General must publish annual reports showing how many reports were received, which companies submitted them, and how many led to convictions.