Industry groups say Congress stripped the FCC of authority to issue new data-breach disclosure regulations.

"There is currently no privacy-protective way to determine whether a consumer is a child," staff at the California Privacy Protection Agency said in a memo to the board.

"Section 230 is now poisoning the healthy online ecosystem it once fostered," Reps. Cathy McMorris Rodgers (R-Washington) and Frank Pallone, Jr. (D-New Jersey) say.