S.150 directs the Secretary of Homeland Security, the Attorney General, and the Secretary of State to produce a joint assessment (within 180 days) and a joint “National Strategy to Combat Illicit Recruitment Activity by Transnational Criminal Organizations on Social Media and Online Platforms” (within one year). The bill defines the scope of covered services—social platforms, messaging and real‑time interactive applications including multiplayer games and immersive tech—lists specified illicit activities, and requires interagency consultation, voluntary reporting processes, and safeguards for civil rights and privacy.
The statute requires agencies to begin implementing the strategy within 90 days of submission, to report semiannually for five years on progress and threat changes, and to deliver a civil rights/civil liberties/privacy assessment within two years; it also mandates rulemaking and explicitly bars new appropriations or any expansion of statutory law‑enforcement authority. Compliance officers at platforms, local border communities, federal program managers, and privacy/compliance teams should view this as a directive to engage with federal partners and prepare for new reporting, outreach, and administrative requirements.
At a Glance
What It Does
The bill requires a three‑agency joint assessment (DHS, DOJ, State) identifying how transnational criminal organizations use covered online services for recruitment and illicit activity, then mandates a national strategy with specific operational elements and a formal implementation timeline. It imposes an implementation start date, a semiannual reporting cadence for five years, and a civil‑rights/privacy audit, plus rulemaking at DHS under the Administrative Procedure Act.
Who It Affects
Operators of social media, messaging apps, multiplayer games and immersive platforms; compliance, safety, and trust teams at those companies; DHS, DOJ, and State components named in the bill; local and Tribal border communities, school districts, and NGOs engaged in youth outreach; and privacy and civil‑liberties offices within the federal government.
Why It Matters
The bill creates a prescriptive interagency playbook aimed specifically at recruitment efforts by transnational criminal organizations rather than general illicit content moderation, demands repeated public reporting and internal rulemaking, and imposes implementation duties without authorizing new funds—forcing agencies and private operators to prioritize work within existing budgets and to square enforcement aims with civil‑liberties protections.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
S.150 starts by drawing boundaries: it defines the services covered (social media, messaging and group chat services with substantial social features, and interactive platforms including games and immersive apps) and enumerates the cross‑border crimes of concern—drug and weapons trafficking, migrant and human smuggling/trafficking, cybercrime, intellectual‑property offenses, bulk cash smuggling, and money‑laundering tied to those activities. That framing focuses agency work on platforms that facilitate real‑time group interaction rather than ordinary email or SMS.
Within 180 days of enactment, DHS, DOJ, and State must deliver a joint assessment describing how transnational criminal organizations and related criminal enterprises use those services to recruit people in the United States and to facilitate illicit operations in border regions (explicitly including Mexico and ‘‘proximity to an international border’’). The assessment must also catalogue current federal countermeasures and law‑enforcement efforts, so Congress and agencies have a shared baseline for planning.The agencies then have one year to produce a joint national strategy.
The statute lists minimum elements the strategy must include—improved interagency cooperation, a voluntary reporting process for recruitment incidents, heightened intelligence analysis, international partnerships, youth outreach in border communities, and explicit privacy and civil‑liberties protections with special attention to minors and constitutionally protected activities. Importantly, the strategy cannot rely on proposed legislation that has not been enacted.After the strategy is submitted, agencies must start implementing it within 90 days.
Agencies must report to Congress 180 days after implementation and then every six months for five years, covering implementation steps, interagency and international coordination, and changes in the threat landscape. Two years after implementation, DHS’s civil‑rights and privacy offices, working with DOJ counterparts, must issue a joint assessment of how the program protects civil rights, civil liberties, and privacy and recommend improvements.
DHS must complete rulemaking under 5 U.S.C. 553 before carrying out the strategy. The Act also disclaims any expansion of existing enforcement authorities and authorizes no additional appropriations, leaving agencies to perform the work within current budgets.
The Five Things You Need to Know
The bill requires a joint assessment from DHS, DOJ, and State within 180 days describing platform use by transnational criminal organizations for recruitment and illicit activity.
Agencies must deliver a joint national strategy within one year that includes a voluntary reporting process, intelligence‑analysis enhancements, youth outreach in border communities, and explicit privacy and civil‑liberties protections.
Implementation must begin within 90 days after the strategy is submitted, and agencies must file a joint report 180 days after implementation and then semiannually for five years; reports are unclassified with an optional classified annex.
DHS must complete rulemaking under section 553 of title 5, and DHS’s Civil Rights and Privacy offices together with DOJ must submit a civil‑rights/civil‑liberties/privacy assessment within two years of implementation.
The Act contains two limits: it forbids creating new law‑enforcement authorities and it authorizes no additional funds, making execution an unfunded mandate for responsible agencies.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Short title
Designates the bill’s common name: the ‘‘Combating Cartels on Social Media Act of 2025.’
Definitions of scope and targets
Establishes the operative vocabulary that frames every duty in the statute. ‘Covered service’ reaches social media, messaging/group platforms with substantial social functions, and interactive platforms including multiplayer gaming and immersive apps—but gives the Secretary of Homeland Security discretion to determine whether particular services are or have been used by transnational criminal organizations. The statute also lists the specific ‘‘illicit activities’’ (drug trafficking, weapons trafficking, migrant and human smuggling/trafficking, cybercrime, IP crimes, bulk cash smuggling, and laundering) that trigger agency attention.
Joint assessment requirement
Requires DHS, the Attorney General, and State to deliver a joint assessment within 180 days that maps how covered services are used for recruitment and illicit activity, identifies recruitment targeting of U.S. residents and border‑proximate operations, and summarizes existing federal responses. For practitioners, this is the baseline the strategy must address and will be the document agencies cite when prioritizing enforcement or outreach.
National strategy and mandatory elements
Mandates a coordinated strategy within one year and prescribes minimum components: interagency cooperation proposals, a voluntary reporting mechanism for recruitment incidents, intra‑ and intergovernmental coordination, enhanced intelligence analysis, international partnership activities, targeted youth outreach in border communities, and an explicit plan to protect privacy, civil rights, and minors. The strategy may not include recommendations contingent on legislation that has not been enacted, limiting policymakers to administrative and cooperative measures.
Required consultations and stakeholder engagement
Specifies an extensive consultation list: named DHS components (Intelligence and Analysis, Science & Technology, CBP, ICE, Privacy and Civil Rights offices), DOJ components (Criminal Division, National Security Division, Civil Rights Division, FBI, ATF, OCDETF), State Department offices, HHS and Education, and representatives from border communities, school districts, local law enforcement, and NGOs. That list sets expectations for who must be involved and signals federal priorities for local engagement and youth outreach.
Implementation, reporting cadence, and classification
Requires agencies to start implementing the strategy within 90 days of submission. Reporting obligations begin 180 days after implementation and recur semiannually for five years; each report must describe recommendation implementation, interagency posture (including foreign collaboration), and the evolving threat landscape. Reports are unclassified with an allowance for a classified annex, which establishes the public transparency floor and a routine intelligence reporting stream to Congress.
Civil‑rights/privacy review and rulemaking
Directs the DHS Office for Civil Rights and Civil Liberties and the Privacy Office—working with DOJ privacy and civil‑rights officials—to issue a joint assessment two years after implementation detailing how civil rights, civil liberties, and privacy were protected and offering recommendations. Before DHS implements the strategy, it must promulgate rules under the Administrative Procedure Act, creating a formal administrative record and a route for judicial review or stakeholder challenge.
Limits on authority and funding
Section 5 clarifies that the Act does not expand statutory law‑enforcement authorities of DHS, DOJ, or State. Section 6 states that no additional funds are authorized, meaning agencies must absorb costs within existing budgets and priorities—an effective operational constraint with practical consequences for implementation speed and scope.
This bill is one of many.
Codify tracks hundreds of bills on Justice across all five countries.
Explore Justice in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Border community outreach programs and school districts — the statute mandates targeted engagement and youth outreach in border communities, which can bring federal resources, partnerships, and clearer guidance for prevention and rehabilitation activities.
- Federal law‑enforcement components with intelligence missions — the bill creates a formal mechanism for cross‑agency intelligence analysis and recurring reporting, improving situational awareness and coordination on transnational recruitment.
- Non‑governmental victim‑service and humanitarian organizations — the mandated consultations and emphasis on protections for minors and migrants create formal entry points for NGOs to shape outreach and protection strategies.
- International partners and multilateral institutions — the strategy explicitly prioritizes international partnerships, providing a structured channel for information‑sharing and cooperative initiatives against cross‑border recruitment networks.
- Platform compliance and safety teams — the bill’s prescription for a voluntary reporting process and required rulemaking gives companies clearer expectations for engagement and may limit ad hoc enforcement approaches.
Who Bears the Cost
- Covered‑service operators and platform compliance teams — the requirement to engage in voluntary reporting, respond to government outreach, and adapt policies to an administratively enforced strategy increases operational and legal compliance burdens.
- DHS, DOJ, and State components — the Act imposes assessments, rulemaking, implementation work, and recurring reporting without authorizing new appropriations, creating an unfunded mandate on agency budgets and staff time.
- Local and Tribal governments and school districts in border regions — agencies must consult and engage these entities for outreach and prevention, which may require local resources, coordination, and potential liabilities.
- Privacy and civil‑liberties offices — the law requires a formal audit and ongoing oversight work, raising workloads and potential intra‑agency friction if operational tactics conflict with civil‑liberties standards.
- Technology vendors and contractors — vendors who provide monitoring, content analysis, or reporting tools may see increased procurement demand and contractual complexity as agencies and platforms implement the strategy.
Key Issues
The Core Tension
The core dilemma is a classic trade‑off: law enforcement needs timely, coordinated authority and data to disrupt transnational criminal recruitment online, but aggressive administrative actions—especially without additional funding or clear limits—risk encroaching on privacy, civil liberties, and platform neutrality; the bill tries to thread that needle by requiring civil‑liberties safeguards and limiting statutory authority, but it forces agencies to accomplish substantial work through voluntary cooperation and existing budgets, a combination that invites friction and uneven implementation.
The bill frames an interagency response but leaves key operational discretion in agency hands—most notably DHS’s authority to decide which services qualify as ‘‘covered’’ based on observed use by transnational criminal organizations. That delegation creates uncertainty for platforms about whether they will fall within the statute’s practical ambit and complicates planning for compliance teams.
The requirement for rulemaking under 5 U.S.C. 553 provides procedural transparency but also exposes implementation to administrative‑law challenges that could slow deployment.
Two significant resource tensions are embedded in the Act. First, agencies must perform assessments, engage in extensive consultations, promulgate rules, begin implementation rapidly, and sustain semiannual reporting for five years—all with no additional appropriations.
Second, the bill expressly forbids creating new law‑enforcement authority, limiting what agencies can do administratively and increasing pressure on voluntary cooperation with private operators. These pressures could push agencies toward intelligence collection or more intrusive information‑sharing arrangements that civil‑liberties offices may resist, producing internal stalemates or litigation.
The statute’s focus on recruitment by transnational criminal organizations mitigates overbroad content policing, but the line between investigating TCO networks and surveilling at‑risk individuals is operationally thin, especially where minors or constitutionally protected speech are implicated.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.