Cybersecurity Policy Report, Children’s Data Privacy Act on Agenda in California, (Mar 13, 2024)
The California state Assembly Committee on Privacy and Consumer Protection meets April 2 to take up the California Children’s Data Privacy Act, which proposes to strengthen protections of data privacy rights of children under the California Consumer Privacy Act (CCPA). An earlier hearing was canceled by the bill’s author.
Bill sponsor Assembly member Buffy Wicks (D.) explained that the bill sought to expand privacy protections for youth under age 18. The bill concludes that the CCPA doesn’t effectively protect 17-year-olds or limit businesses from collecting or exploiting the data of young users so long as they do not sell it.
AB 1949 would, therefore, amend the CCPA to prohibit businesses from collecting, using, sharing, or selling personal data of anyone under the age of 18 unless they receive informed consent or doing so is strictly necessary for the purpose of the business. For users under 13, this informed consent must come from a parent.
The bill would further require the California Privacy Protection Agency, on or before July 1, 2025, to solicit broad public participation and adopt regulations “to further the purposes of the act, including, but not limited to, issuing regulations to establish technical specifications for an opt-out preference signal that allows the consumer, or the consumer’s parent or guardian, to specify that the consumer is less than 13 years of age, or at least 13 years of age and less than 18 years of age, and issuing regulations regarding age verification and when a business must treat a consumer as being less than 13 or 18 years of age for purposes of the CCPA.”
News: DataPrivacy StateLegislation CCPA