Cybersecurity Policy Report, New Jersey Legislature Passes Online Child Safety Bill, (Jul 1, 2026)

By Jonathan Anderson

A bill imposing new requirements on online service providers to enhance the privacy and safety of minors has cleared the New Jersey Legislature and now heads to Gov. Mikie Sherrill (D.) for her signature.

The state Senate and Assembly voted yesterday in favor of adopting the New Jersey Kids Code Act (AB 4015/SB 3413), which would limit the collection, retention, and use of minors’ personal data, requiring that only the minimum necessary data be processed for the specific service engaged by the minor.

The legislation would restrict targeted advertising to minors, limit notifications during late-night and school hours, and forbid the use of “dark patterns,” defined as “a user interface designed or manipulated with the substantial effect of subverting or impairing user autonomy, decision-making, or choice and includes, but is not limited to, any practice the United States Federal Trade Commission refers to as a ‘dark pattern.’”

The bill further would require that default privacy settings for known minors be set to the highest level of protection. Covered online service providers would have to establish mechanisms for minors or their parents to report harms experienced on their platforms, according to the bill.

The Electronic Privacy Information Center (EPIC) issued a press release applauding passage of the bill, which EPIC said included features from the organization’s model age-appropriate design code.

The Computer & Communication Industry Association (CCIA) has previously voiced concerns about the legislation, arguing that it “raises significant constitutional concerns and could produce unintended consequences for minors, families, and businesses.”

Assembly member Andrea Katz (D.) sponsored the Assembly bill (A.B. 4015, Reg Sess.). Sen. Raj Mukherji (D.) sponsored the Senate version (S.B. 3413, Reg Sess.).

News: StateLegislation DataPrivacy