22990.
(a) For purposes of this part, the following definitions apply:(1) (A) “Country of concern” has the same meaning as “foreign adversary” as that term is defined in paragraph (2) of subsection (c) of Section 1607 of Title 47 of the United States Code.
(B) Notwithstanding subparagraph (A), each of the following is a “country of concern”:
(i) Bolivarian Republic of Venezuela.
(ii) Democratic People’s Republic of Korea.
(iii) Islamic Republic of Iran.
(iv) People’s Republic of China.
(v) Republic of Cuba.
(vi) Russian Federation.
(2) “Social media company” has the same meaning as defined in Section 22675 of the Business and Professions Code.
(3) “Social media platform” has the same meaning as defined in Section 22675 of the Business and Professions Code.
(b) A person shall not install an application for a social media platform on a state-issued or state-owned electronic device if any of the following conditions are met:
(1) The social media company that owns the application is domiciled in, has its principal
place of business in, has its headquarters in, or is organized under the laws of, a country of concern.
(2) A country of concern directly or indirectly owns, directly or indirectly controls, or holds 10 percent or more of the voting shares of the social media company that owns the application.
(3) The social media platform uses software or an algorithm controlled by a country of concern.
(c) A person shall not install an application for a social media platform that meets either of the following conditions on a state-issued or state-owned electronic device:
(1) The application is owned or controlled by ByteDance, Ltd., a subsidiary of or a successor company to ByteDance, Ltd., or a company directly or indirectly controlled by ByteDance, Ltd.
(2) The application is owned or controlled by TikTok, a subsidiary of or a successor company to TikTok, or a company directly or indirectly controlled by TikTok.
(d) Notwithstanding subdivisions (b) and (c), a person may install an application for a social media platform on a state-issued or state-owned electronic device if the application is installed for either of the following purposes:
(1) Law enforcement activities.
(2) Cybersecurity research.