Codify — Article

California bill raises platform liability for cyberbullying violations

SB 780 increases statutory exposure for social media platforms and sharpens the remedial tools courts may use against noncompliance.

The Brief

SB 780 amends Section 22589.3 of the Business and Professions Code to increase the statutory penalty a social media platform faces for each violation of the Cyberbullying Protection Act from $10,000 to $50,000. The amendment keeps intact the bill’s structure that allows plaintiffs listed in Section 22589.2 to recover statutory damages alongside compensatory and punitive relief.

This change substantially increases potential financial exposure for platforms that fail to meet the chapter’s duties (for example, maintaining reporting mechanisms and other anti-cyberbullying obligations). For compliance officers and in‑house counsel, the amendment transforms a previously manageable statutory penalty into an enforcement lever that can meaningfully multiply liability over time.

At a Glance

What It Does

The bill revises the monetary penalty framework and preserves the existing remedies architecture: courts can award compensatory and punitive damages, injunctive relief, and reasonable attorney fees. It reiterates that the duties in the chapter are cumulative with other laws and preserves a Section 230 carve-out where federal law bars liability.

Who It Affects

The statute targets internet-based social media platforms that host user-generated content and are subject to California law, and it directly affects plaintiffs listed in Section 22589.2 (including public enforcement entities and private parties who may sue). Secondary stakeholders include insurers, legal counsel, and moderating/content teams who manage compliance systems.

Why It Matters

By elevating enforcement stakes and explicitly authorizing injunctive relief and fee awards, the amendment increases both the deterrent value of the chapter and the incentives for private suits. Compliance failures can compound rapidly because the statute counts each day of noncompliance as a separate violation, creating a potential multiplier effect on exposure.

More articles like this one.

A weekly email with all the latest developments on this topic.

Unsubscribe anytime.

What This Bill Actually Does

SB 780 modifies California’s enforcement architecture for social-media-related cyberbullying rules by amplifying the consequences of noncompliance and clarifying the remedies courts may enter. The statute keeps the existing private and public enforcement pathways but reshapes the economics of litigation against platforms: violations can result in statutory penalties alongside normal damages, and courts can use injunctions and fee awards to secure compliance.

Practically, the law treats continued noncompliance as a continuing wrong. The text defines each day a platform fails to meet a chapter requirement as a distinct violation, which means a short compliance gap can become a long tail of liability.

The bill also instructs courts to treat statutory damages for noncompliance as separate from harms caused by the underlying reported content, which raises questions about how courts will allocate responsibility between content-originated injury and platform conduct.The amendment confirms the remedies are cumulative — plaintiffs can seek civil penalties in addition to any criminal, administrative, or other civil remedies available under other laws. At the same time, the statute preserves the Section 230 exception: if federal law bars platform liability for certain claims, the state statute does not impose it.

That carve-out will be a central litigation line for platforms asserting federal immunity.For compliance teams, the practical takeaways are twofold: systems and workflows (reporting tools, escalation paths, recordkeeping) must be demonstrably operational every day, and risk modelling should account for litigation that seeks injunctive relief and fee-shifting as well as damages. Insurers and outside counsel will need to reassess exposure scenarios that previously treated state statutory penalties as modest and contained.

The Five Things You Need to Know

1

The statute treats each day of a platform’s noncompliance as a separate violation, dramatically increasing aggregate exposure for sustained failures to meet chapter duties.

2

Courts must adjudicate statutory remedies for noncompliance separately from harms traceable to the underlying reported content, creating two parallel damage tracks in litigation.

3

A successful plaintiff can obtain injunctive relief to force platform compliance and recover reasonable attorney’s fees and costs from the defendant.

4

The bill makes clear that remedies under this section are cumulative with other civil, criminal, and administrative remedies and do not preempt other legal obligations.

5

The statute explicitly disclaims state liability where Section 230 of Title 47 U.S.C. precludes it, preserving a federal immunity defense for platforms.

Section-by-Section Breakdown

Every bill we cover gets an analysis of its key sections. Expand all ↓

Section 22589.3(a)(1)

Statutory liability and scope of recoverable relief

This subdivision sets the platform’s baseline exposure for violations and enumerates the kinds of monetary relief that a plaintiff may recover — compensatory and punitive damages plus any civil remedies, penalties, or sanctions. Importantly, it requires courts to treat damages for the platform’s failure to comply as distinct from harms that flow directly from the reported content, which changes how a plaintiff frames causation and allocation of harm in litigation.

Section 22589.3(a)(2)

Equitable remedies and fee-shifting

This paragraph gives courts the authority to order injunctive relief to bring platforms into compliance and to award reasonable attorney’s fees and costs to prevailing plaintiffs. That combination increases the leverage of private plaintiffs and public enforcers because fee recovery reduces the financial barrier to bringing and sustaining suits seeking structural changes to platform practices.

Section 22589.3(b)

Separate daily violations

The statute treats each day of noncompliance as a separate violation. Legally, this creates a cumulative damages model: the duration of noncompliance materially increases statutory exposure. Practically, it places a premium on continuous operational evidence of compliance and raises the stakes for brief technical outages or administrative lapses that leave reporting systems nonfunctional.

1 more section
Section 22589.3(c)

Cumulative remedies and Section 230 carve-out

This subsection confirms that the remedies here are additive to other sanctions or remedies available under state or federal law and that the statute does not relieve parties from unrelated obligations. It also states that the provision imposes no liability where Section 230 forbids it, signaling that defendants will likely invoke federal immunity for certain claims and that courts will need to parse when state enforcement efforts are preempted.

At scale

This bill is one of many.

Codify tracks hundreds of bills on Technology across all five countries.

Explore Technology in Codify Search →

Who Benefits and Who Bears the Cost

Every bill creates winners and losers. Here's who stands to gain and who bears the cost.

Who Benefits

  • Victims of cyberbullying and harassment: higher statutory stakes and the possibility of fee awards make it easier to secure relief and fund litigation that seeks both monetary and structural remedies.
  • State and local enforcement agencies (including the Attorney General): the statute increases the potential financial remedy per violation and preserves injunctive relief, strengthening public enforcement leverage to compel systemic fixes.
  • Consumer-protection and civil-society organizations: fee-shifting and cumulative remedies lower the financial barrier to bring test cases or pattern-and-practice litigation that can establish industry norms.

Who Bears the Cost

  • Large and mid-size social media platforms: compliance systems, content-moderation workflows, and reporting tools will need continuous testing and documentation because daily noncompliance multiplies exposure and can translate brief outages into large damages exposure.
  • Insurers and underwriters: higher statutory exposure and the risk of long-tail daily liabilities will push casualty and E&O carriers to raise premiums, narrow coverage, or add exclusions for cyberbullying-related claims.
  • Courts and defense counsel: an uptick in complex suits seeking parallel statutory damages, injunctions, and fee awards will increase discovery burdens and litigation costs, and courts will need to allocate judicial resources to resolve disputes over Section 230 preemption and damage allocation.

Key Issues

The Core Tension

The bill pits two legitimate objectives against one another: increasing deterrence and accountability for platforms that fail to prevent or respond to cyberbullying, versus avoiding an overbroad liability regime that chills moderation, invites nuisance litigation, and produces massive, duration-based exposure for transient operational failures. Deciding which risk to favor — stronger state enforcement or preservation of platform and moderation flexibility — is the statute’s central unresolved trade-off.

The statute strengthens enforcement tools but leaves open significant implementation and adjudication questions. First, defining what constitutes a violation of the chapter — and proving when a platform failed to meet its duties — will be litigated heavily.

The language treats noncompliance as a continuing wrong; courts will have to develop standards for when a day counts as a separate violation (is a partially functioning report button a violation? Does an intermittent backend error render a platform noncompliant for the whole day?).

Second, the bill separates statutory remedies for platform conduct from harms caused by the underlying content. That creates a novel allocation problem: courts must determine how much of a plaintiff’s injury traces to third-party content and how much to the platform’s misconduct.

Proving causation and apportioning damages in that regime will be fact-intensive and could lead to inconsistent results across cases. Finally, although the statute preserves Section 230 as a bar where applicable, the coexistence of state-level strictures and federal immunity invites threshold preemption litigation that may determine whether large portions of the statute can be enforced in practice.

Try it yourself.

Ask a question in plain English, or pick a topic below. Results in seconds.