Section 7 of KOSA establishes a framework for qualified researcher access to covered platform data for public interest research. (1) Section 7(a) Qualified Researcher Definition: (a) Affiliated with accredited higher education institution + non-profit research organisation + government entity; (b) Demonstrated expertise in subject area (e.g. minor online safety + adolescent mental health + algorithm research); (c) Compliance with research ethics including IRB Institutional Review Board approval; (d) Conflict of interest disclosure; (e) Privacy + security training. (2) Section 7(b) Public Interest Research Scope: (a) Research advancing understanding of minor safety + welfare online; (b) Research on platform design impacts; (c) Research on algorithmic effects; (d) Research on content moderation effectiveness; (e) Research on parental tool effectiveness; (f) Research on demographic disparities + equity; (g) Excludes commercial research + competitive intelligence. (3) Section 7(c) Approval Process: (a) Researcher application + research proposal + methodology + data needed + privacy plan + IRB approval; (b) Platform review + approval/decision within reasonable timeframe; (c) Section 9 Kids Online Safety Council guidance on approval criteria; (d) Appeals process for declined applications; (e) Independent advisory committee role; (f) Public list of approved researchers + projects. (4) Section 7(d) Data Sharing Methods: (a) Aggregate statistics access; (b) Anonymized + de-identified data access; (c) Sandbox/secure environment access for sensitive data; (d) Privacy-Enhancing Technologies (PETs) - differential privacy + federated learning + secure multi-party computation; (e) Time-limited access; (f) On-premises only access for highest sensitivity. (5) Section 7(e) Privacy Protections: (a) No re-identification attempts; (b) No combination with external data without authorization; (c) Minor privacy preserved; (d) Sensitive category data heightened protection; (e) Breach notification + remediation; (f) Auditable data access logs. (6) Section 7(f) Researcher Obligations: (a) Use data only for approved research; (b) Maintain confidentiality of platform business information; (c) Publish findings (subject to embargo for trade secret protection); (d) Cite data source; (e) Participate in advisory process; (f) Share research output with platform + public + Council. (7) Section 7(g) Platform Obligations: (a) Reasonable cooperation with approved research; (b) Provision of data in usable format; (c) Technical support for sandbox access; (d) Confidentiality protections for researcher work; (e) No retaliation for research findings; (f) Cooperation with research findings remediation. (8) Section 7(h) Research Output: (a) Publication encouraged in peer-reviewed venues; (b) Conference presentations; (c) Policy briefings; (d) Public benefit considerations; (e) Replication encouraged; (f) Open data + code where feasible. (9) Section 7(i) International + Multi-Jurisdiction Coordination: (a) EU DSA Article 40 researcher access (mandatory for VLOPs); (b) UK Online Safety Act researcher access; (c) Multi-jurisdiction harmonization; (d) Cross-border research considerations; (e) Privacy law compliance across jurisdictions. (10) Section 7(j) Council Coordination: (a) Section 9 Kids Online Safety Council provides best practices; (b) Researcher community input; (c) Industry self-regulation alignment; (d) Periodic review + update. (11) Industry Implementation Examples: (a) Meta Researcher Access Program (FORT - Facebook Open Research and Transparency); (b) Twitter Academic Research API (discontinued + limited); (c) TikTok Research API; (d) YouTube Researcher Program; (e) DSA Article 40 compliance for EU VLOPs; (f) Academic-industry partnerships. (12) Enforcement of Section 7: (a) FTC Section 5 + State AG enforcement; (b) Civil penalty up to USD 43,792 per violation; (c) Failure to cooperate with approved research; (d) Retaliation prohibition. Coordinates with EU DSA Article 40 researcher access + UK Online Safety Act + Meta FORT Facebook Open Research and Transparency + Twitter Academic Research API (legacy) + TikTok Research API + YouTube Researcher Program + IRB Institutional Review Board + Privacy-Enhancing Technologies + Differential Privacy + Section 9 Kids Online Safety Council + Academic-Industry Partnerships + Open Science Framework. KOSA Researcher Access + Section 7 applies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.