(a) No provider of computer software or of an interactive computer service may be held liable for identifying, naming, removing, disabling, or otherwise affecting a computer program through any action voluntarily undertaken, or service provided, where the provider: (1) intends to identify accurately, prevent the installation or execution of, remove, or disable another computer program on a computer of a customer of such provider; (2) reasonably believes the computer program exhibits behavior that violates this Act; and (3) notifies the authorized user and obtains clear and conspicuous consent before undertaking such action or providing such service.
(b) A provider of computer software or interactive computer service is entitled to protection under this Section only if such provider: (1) has established internal practices and procedures to evaluate computer programs reasonably designed to determine whether or not a computer program exhibits behavior that violates this Act; and (2) has established a process for managing disputes and inquiries regarding misclassification or false positive identifications of computer programs. Nothing in this Section is intended to limit the ability of the Attorney General, or a District Attorney, to bring an action against a provider of computer software or of an interactive computer service. ----------