Information Integrity and Foreign Influence Defense

Current Status

Existing Law: Foreign Agents Registration Act (22 U.S.C. § 611) requires agents of foreign principals to register and disclose activities.¹ Section 230 (47 U.S.C. § 230) provides platform immunity.² FCC foreign ownership rules (47 U.S.C. § 310) apply to broadcast licensees but not digital media.³ 52 U.S.C. § 30121 prohibits foreign national contributions to elections.⁴

Current Authority: DOJ National Security Division enforces FARA. FBI Counterintelligence investigates foreign influence. FTC addresses deceptive practices. CISA coordinates election security. No unified authority over non-electoral foreign influence operations.

Existing Limitations: FARA covers only agents acting on behalf of foreign principals—not organic-appearing influence networks. No law addresses coordinated inauthentic behavior, synthetic media in political contexts, or foreign-controlled digital media entities. No requirement for platforms to detect or disclose foreign influence operations.

Problem

Russia's Internet Research Agency reached 126 million Americans on Facebook during 2016 election cycle.⁵ Foreign actors generated over 10 million social media posts during 2020 election.⁶ Deepfake technology enables synthetic video of public figures at $25-50 per minute of footage.⁷ FARA prosecutions average 3 per year despite estimated 50,000+ unregistered foreign agents operating in US.⁸ No federal law prohibits coordinated inauthentic behavior campaigns—only content-specific violations (fraud, defamation) are actionable. Foreign state media (RT, CGTN, Sputnik) operate without ownership transparency requirements applied to broadcast media.

Who is Affected: All Americans targeted by foreign influence operations. Election integrity compromised by synthetic content. Public trust eroded by inability to distinguish authentic from manufactured discourse. National security threatened by hostile information warfare conducted against civilian population.

Proposed Reform

Primary Policy Change: Establish comprehensive framework to detect, deter, and counter foreign influence operations targeting US population while protecting First Amendment speech, focusing on behavior-based violations (coordination, deception, foreign control) rather than content-based restrictions.

Definitions:

"Coordinated Inauthentic Behavior" means the use of multiple accounts, personas, or automated systems operating in coordination to artificially amplify content, simulate grassroots support, or deceive audiences about the origin, popularity, or organic nature of messaging, where such coordination is concealed from the audience.

"Foreign Influence Operation" means a campaign conducted by, on behalf of, or substantially funded by a foreign government, foreign political party, or entity under foreign government control, intended to influence US public opinion, elections, or policy through deceptive means including coordinated inauthentic behavior, synthetic media, or concealed foreign origin of content.

"Synthetic Media" means audio, video, or image content substantially generated or manipulated by artificial intelligence or machine learning where the output falsely appears to depict real events, statements, or actions by identifiable persons.

"Foreign-Controlled Digital Media Entity" means any entity that publishes news, commentary, or analysis to US audiences where (a) a foreign government, foreign political party, or entity controlled by such government or party holds 25% or more ownership, voting control, or editorial control, or (b) the entity receives 25% or more of its funding from such sources.

New Requirements:

Coordinated Inauthentic Behavior: Platforms with 10 million+ US monthly active users must maintain detection systems for coordinated inauthentic behavior, remove identified networks within 72 hours of detection, preserve evidence for 3 years, and report quarterly to CISA on detected operations including attributed origin where determinable. Platforms must publish transparency reports within 30 days of each quarter identifying: number of accounts removed, attributed foreign vs. domestic origin, reach before removal, and detection methodology summary. Platform detection systems must undergo annual third-party audit by GAO-certified auditors (Auditor Mesh) with results submitted to CISA and published in summary form.

Safety Valve for Platform Removals: Where an account holder disputes foreign influence attribution within 72 hours of removal, platform must: (a) provide specific basis for attribution, (b) restore account within 48 hours if holder demonstrates US citizenship/residency and denies foreign direction, pending full review, and (c) complete full review within 30 days. Wrongful removal due to data error or misattribution entitles account holder to restoration and $1,000 statutory damages (indexed to CPI-U). This safety valve does not apply where platform possesses direct evidence of foreign government direction.

Synthetic Media: Synthetic media depicting identifiable persons in political contexts must include clear, persistent disclosure ("This content was generated by AI") using technical standards published by NIST. Platforms must label or remove synthetic political content lacking required disclosure within 24 hours of identification. Creating synthetic media depicting identifiable persons making statements they did not make, for purposes of deceiving audiences about actual statements or actions, constitutes a federal offense when distributed to 1,000+ persons.

Foreign-Controlled Media Transparency: Foreign-controlled digital media entities must register with FCC within 90 days, disclose foreign government funding sources and ownership in all published content, and identify editorial control relationships. Registration information must be public and searchable. Content from registered entities must carry persistent disclosure: "This outlet receives funding from [foreign government/entity]."

FARA Modernization: Expand FARA to cover coordinated influence campaigns, not just individual agents. Any person who engages in coordinated inauthentic behavior at direction of or with substantial funding from foreign principals must register regardless of employment relationship. Platforms must report to DOJ when removing coordinated networks attributed to foreign state actors.

Counter-Influence Capacity: CISA shall designate a Foreign Influence Operations unit within existing infrastructure to: aggregate platform reports, coordinate federal response, publish annual threat assessments, and provide classified briefings to platforms on active threats. This unit operates within CISA's existing Cybersecurity Division—no new agency or independent body created (P3 compliant). Unit must maintain NIST SP 800-34 compliant continuity of operations plan ensuring degraded-mode capability during cyber incidents. State Department Global Engagement Center shall support allied nations facing same threat actors. Intelligence community shall provide declassified attribution assessments to support public awareness.

New Prohibitions:

Conducting coordinated inauthentic behavior campaigns on behalf of foreign governments or at their direction is prohibited, punishable by up to 5 years imprisonment and $250,000 fine per campaign (indexed to CPI-U).

Creating or distributing synthetic media depicting identifiable persons making statements they did not make, with intent to deceive and influence elections or public policy, is prohibited when distributed to 1,000+ persons, punishable by up to 3 years imprisonment and $100,000 fine (indexed to CPI-U).

Operating foreign-controlled digital media without required registration and disclosure is prohibited, punishable by $50,000 per day of non-compliance (indexed to CPI-U).

Platforms may not accept payment from foreign-controlled entities for political advertising targeting US audiences.

Enforcement:

DOJ National Security Division prosecutes criminal violations. FBI Counterintelligence investigates foreign influence operations. CISA coordinates platform compliance and aggregates threat intelligence. FCC enforces foreign media registration. FTC addresses commercial deception claims.

GAO conducts biennial audits of: CISA Foreign Influence Operations unit effectiveness, platform compliance rates, FARA enforcement patterns, Auditor Mesh performance, and prosecution outcomes. Reports to Congress with recommendations.

Civil penalties: $10,000-$100,000 per violation for disclosure failures (indexed to CPI-U); $1M+ for platforms failing to maintain required detection systems (indexed to CPI-U). Criminal penalties as specified above for willful violations.

Private right of action: Persons depicted in non-disclosed synthetic media may sue for actual damages plus $50,000 statutory damages (indexed to CPI-U). Platforms immune from private suits if complying with detection and removal requirements.

Administrative Appeals:

Foreign Media Registration Disputes: Entities disputing FCC foreign-control determination may appeal to FCC Administrative Law Judge within 30 days. ALJ decision within 90 days. Appeal to DC Circuit Court of Appeals within 60 days of ALJ decision.

Platform Removal Appeals: Account holders may appeal platform foreign-influence attribution to CISA within 30 days of final platform decision. CISA must rule within 45 days. CISA determination reviewable by federal district court under APA arbitrary-and-capricious standard. Platforms acting in good faith on CISA guidance immune from liability for removal decisions.

Criminal Prosecution: Standard federal criminal procedure applies. Defendants may challenge foreign-control or coordination findings at trial.

First Amendment Safeguards:

No provision of this Act authorizes content-based restrictions on speech. All requirements address behavior (coordination, deception, concealment) or disclosure (origin, ownership, synthetic nature)—not viewpoint or subject matter.

Foreign nationals retain right to express opinions; restrictions apply only to coordinated deceptive campaigns and concealed foreign government funding.

Platforms retain discretion over content moderation; requirements address only detection, disclosure, and reporting—not removal of lawful speech.

ACLU or designated civil liberties organization shall receive quarterly briefings from CISA on enforcement patterns and may petition for rulemaking modifications.

What Changes

Before: FARA covers only registered agents—not organic-appearing influence networks. No law addresses coordinated inauthentic behavior. Deepfakes of political figures are legal. Foreign state media operates without transparency requirements. Platforms have no obligation to detect or report foreign influence operations. 126 million Americans reached by single foreign operation with no accountability. No appeals process for disputed attributions.

After: Coordinated inauthentic behavior on behalf of foreign governments is federal crime. Synthetic media in political contexts requires disclosure. Foreign-controlled media must register and disclose funding. Platforms must detect, remove, and report coordinated foreign networks with third-party audited systems. CISA aggregates threat intelligence and coordinates response within existing infrastructure. Safety valve protects against wrongful removals. Administrative appeals available for registration disputes and removal decisions. Civil liberties organizations monitor enforcement for overreach. All dollar thresholds indexed to inflation.

ROI

Costs:

Item	10-Year
CISA Foreign Influence Operations unit	$500M
DOJ/FBI enhanced enforcement	$300M
FCC registration system	$50M
Platform compliance (private sector)	$2B est.
State Dept. GEC expansion	$200M
Auditor Mesh certification/oversight	$50M
Total Federal	$1.1B

Savings:

Item	Gross	Capture	Net
Reduced election security emergency spending	$500M	50%	$250M
Avoided foreign influence response costs	$300M	40%	$120M
Civil penalty revenue	$200M	70%	$140M
Total			$510M

Societal Benefits:

Benefit	Annual	NPV (3%)	NPV (7%)
Election integrity protection	$2B	$17.1B	$14.1B
Public trust preservation	$1B	$8.5B	$7.0B
Reduced manipulation harm	$500M	$4.3B	$3.5B
Total	$3.5B	$29.9B	$24.6B

Summary:

Category	10-Year	Notes
Federal Investment	$1.1B	CISA, DOJ, FCC, State, Auditor Mesh
Federal Savings	$510M	Penalties, avoided costs
Net Federal Cost	$590M	$59M/year
Societal Benefit	$24.6B-$29.9B	NPV at 3-7%

Confidence: LOW - societal benefits difficult to quantify; based on estimated costs of successful influence operations and value of election integrity.

References

22 U.S.C. § 611 et seq. (Foreign Agents Registration Act)
47 U.S.C. § 230 (Communications Decency Act Section 230)
47 U.S.C. § 310 (FCC foreign ownership restrictions)
52 U.S.C. § 30121 (foreign national campaign contribution prohibition)
Senate Intelligence Committee, "Russian Active Measures Campaigns and Interference in the 2016 U.S. Election" (2019)
Stanford Internet Observatory, "Foreign Interference Attribution" (2021)
Witness Media Lab, "Synthetic Media Cost Analysis" (2023)
DOJ FARA Unit, Annual Reports (2019-2024); Georgetown Law FARA Project estimates
EU Digital Services Act (2022) - coordinated inauthentic behavior provisions
Australia Foreign Influence Transparency Scheme (2018)
RAND Corporation, "Russian Social Media Influence" (2019)
NIST SP 800-34, "Contingency Planning Guide for Federal Information Systems"

Change Log

2026-01-21: No Nonsense Radar fixes applied: (1) Clarified CISA unit operates within existing infrastructure (P3); (2) Added administrative appeals for FCC registration and platform removals (P24); (3) Added NIST SP 800-34 resilience requirement (P4); (4) Added Auditor Mesh third-party audit for platform detection systems (P23); (5) Added 72-hour safety valve for wrongful removals (P22); (6) Added CPI-U indexing to all dollar thresholds (P20); (7) Added superscript citations throughout.
2026-01-21: Initial document created addressing gaps in foreign influence defense identified during "Project Russia" framework review.