Stealth Bot Prohibition Act
- Sponsor
- Rep. Lee, Laurel M. [R-FL-15]
- Committees
- Energy and Commerce Committee (primary)
- Last action
- Jul 23, 2026
Bottom line
The Stealth Bot Prohibition Act aims to increase transparency and accountability for automated online activity, particularly concerning AI, by penalizing bots that conceal their nature or intent to harm online platforms.
What it actually does
This bill prohibits the deployment of "stealth bots" that either damage online services or intentionally misrepresent themselves as human users, especially when used with generative AI models. It grants enforcement authority to the Federal Trade Commission (FTC) and State attorneys general, allowing them to seek civil penalties and injunctions against violators. The bill defines "stealth bot" as a bot that fails to disclose its identity or purpose, including its use for data mining or AI development.
Proponents argue
Supporters argue this bill is crucial for maintaining the integrity and security of online platforms and services in the age of advanced AI. They contend that undisclosed bots can unfairly burden website infrastructure, scrape data without consent, and manipulate online interactions, making it difficult for legitimate users and businesses to operate. This legislation provides necessary tools for regulators to combat deceptive automated practices and protect intellectual property and digital infrastructure from misuse by AI systems.
Opponents contend
Opponents might argue that the bill's definitions, particularly for "stealth bot" and "damage, impair, or burden," are overly broad and could stifle legitimate research, competitive intelligence gathering, or beneficial automated processes. They may contend that requiring explicit disclosure of "specific nature and purpose" for every bot interaction could be technically challenging or impractical, potentially leading to unintended consequences for innovation and the open internet. Some might also raise concerns about potential overreach by the FTC or state authorities.
The bill is very concise and can be read and understood quickly, making it accessible for public review.
Section 2(a)(1)
Prohibition on Damaging/Burdensome Stealth Bots
This provision makes it illegal for any person to deploy or direct a "stealth bot" if that bot is reasonably likely to damage, impair, or burden the technical or commercial operation of a website, digital platform, or online service. It targets bots that cause operational issues while concealing their identity.
Supporters argue
Supporters argue this provision is essential to protect the stability and functionality of the internet. They contend that malicious or poorly designed bots can overwhelm servers, degrade user experience, and impose significant costs on businesses, and this measure provides a legal recourse against such harmful activities.
Critics contend
Critics might argue that "reasonably likely to damage, impair, or burden" is subjective and could lead to arbitrary enforcement or chill legitimate automated activities that might inadvertently cause minor, temporary burdens. They may suggest it could be used to suppress competition or block access to public data.
Tradeoffs
This provision balances the need to protect online infrastructure from abuse against concerns that broad language could inadvertently restrict legitimate automated processes or innovation.
Section 2(a)(2)
Prohibition on Deceptive AI-Related Stealth Bots
This provision prohibits intentionally misrepresenting or concealing a bot's nature to make it appear as a human user, specifically when that bot is used in connection with a generative AI model or service. This aims to prevent AI systems from being trained or operated using data gathered deceptively by bots posing as humans.
Section 2(b)
FTC Enforcement Powers and Penalties
This section grants the Federal Trade Commission (FTC) the authority to enforce the prohibition on stealth bots. The FTC can initiate civil actions in federal court to recover civil penalties, which can be up to $53,000 per violation (adjusted annually), or to enjoin persons from committing violations. It clarifies that the FTC retains its existing jurisdiction and powers under the Federal Trade Commission Act for this enforcement.
Section 2(c)
State Attorneys General Enforcement Powers
This section allows State attorneys general or other State officials to bring civil actions on behalf of their residents (parens patriae) against violations of the stealth bot prohibition. States can seek injunctions, compliance, damages, restitution, or other relief. It requires States to notify the FTC before or immediately after filing such actions and outlines rules for coordination with federal actions, preventing simultaneous federal and state lawsuits against the same defendant for the same violation.
Section 2(d)(6)
Definition of Stealth Bot
This crucial definition specifies that a "stealth bot" is a bot that interacts with online services without prior disclosure of its identity and purpose. This includes failing to identify itself via a valid user-agent string or failing to disclose its specific nature and purpose, such as whether it's performing text and data mining, search indexing, inferencing, or AI development/training, in a format accessible to the website operator.
A "stealth bot" is defined, in part, by its failure to disclose the specific nature and purpose of the bot, including any proposed use and purpose of page content such as text and data mining, search indexing, inferencing, or artificial intelligence development, support, or operations (like training, fine tuning, or retrieval augmented generation).
Section 2(d)(6)(B)
Why it matters:This level of detail is standard for definitions in legislative text, ensuring legal precision. It's not necessarily evasive but requires careful reading to fully appreciate the scope of disclosure.
Case for: Proponents argue that this explicit enumeration of AI-related uses is crucial to ensure that website operators are fully aware when their content is being used to train or develop AI models. This transparency allows operators to make informed decisions about access and usage, protecting their intellectual property and managing their resources.
Case against: Critics might argue that requiring such granular disclosure of AI development purposes could be overly burdensome for bot operators and potentially reveal proprietary information about their AI models or data strategies. They might contend it could stifle innovation by making data collection for AI training more difficult or legally risky.
Estimated impact: This provision significantly impacts how AI developers and researchers acquire and process data from online sources, potentially requiring substantial changes to bot behavior and disclosure protocols.