CDA “Reform” on the Horizon: Investors and Operators Take Note


The appetite for acquisitions and investment in online businesses has never been stronger, with many of the most attractive online opportunities being businesses that host, manage and leverage user-generated content.  These businesses often rely on the immunities offered by Section 230 of the Communications Decency Act, 47 U.S.C. §230 (“Section 230” or the “CDA”) to protect them from liability associated with receiving, editing and posting or removing such content.  And investors have relied on the existence of robust immunity under the CDA in evaluating the risk associated with such investments in such businesses.  This seemed reasonable, as following the legacy of the landmark 1997 Zeran decision, for more than two decades courts have fairly consistently interpreted Section 230 to provide broad immunity for online providers of all types.

However, in the last five years or so, the bipartisan critics of the CDA have gotten more full-throated in decrying the presence of hate speech, revenge porn, defamation, disinformation and other objectionable content on online platforms. This issue has been building throughout the past year, and has reached a fever pitch in the weeks leading up to the election. The government’s zeal for “reining in social media” and pursuing reforms to Section 230, again, on a bipartisan basis, has come through loud and clear (even if the justifications for such reform differ on party lines). While we cannot predict exactly what structure these reforms will take, the political winds suggest that regardless of the administration in charge, change is afoot for the CDA in late 2020 or 2021. Operating businesses must take note, and investors should keep this in mind when conducting diligence reviews concerning potential investments.

Let’s recap the latest developments:

This is an interesting development, as the language of Section 230 does not contemplate FCC rulemaking and none had been undertaken in the nearly 25 years since the statute’s passage.  However, in the week following Chairman Pai’s statement, the  FCC General Counsel posted a statement that, in his opinion, the FCC has the authority to interpret all provisions of the Communications Act, including amendments such as Section 230.  Of course, as a practical matter, whether or not such a rulemaking is ever promulgated may depend on the results of the election (or even the makeup of the next Congress in January, when legislators could attempt to deploy the Congressional Review Act, 5 U.S.C. §801, which is a tool Congress can use to overturn certain federal agency actions). Given the bipartisan interest in scaling back the CDA, it is possible that even if there is a change in administration, the FCC rulemaking could still proceed or be used as a model for legislative amendments to the CDA.

The continuing attention to the CDA this year has been coming from all corners of the map, and we are hard-pressed to try to predict what’s ahead with respect to the current or any future administration’s efforts to limit the scope of the CDA.  Yet, skimming the legislative and regulatory proposals as well as reading the tea leaves of Congress, it appears that there is a focus on greater transparency in moderation decisions, more “due process”-like user rights regarding content removal and account termination decisions, more emphasis on terms of service surrounding the handling of user content and a push by some to generally trim the immunity around the edges – or even deeper.

What does this mean for online businesses and potential investors in such businesses? Depending on the scope of changes in the CDA, the risk profile of companies that rely on third party content may increase. Despite twenty-five years and many cases construing the CDA immunity broadly, a rethinking of the law in Washington could remake the liability calculus (or at least create more administrative burdens or make it more difficult to quickly dismiss negligible lawsuits), thereby threatening the vibrancy and viability of certain online services.  One thing is certain – as there are likely hundreds of plaintiffs that have been frustrated by CDA immunity, it is clear that once that immunity is scaled back, the lawsuits will flood in.

Businesses and investors should follow developments closely.  The long-held assumption that the CDA will always be there to shield against third party content liability is no longer valid.  Online businesses, and the investors in online businesses, take heed: it is not too early to start thinking about risk mitigation strategies to apply to such circumstances.


© 2025 Proskauer Rose LLP.
National Law Review, Volume X, Number 307