,i  #aag? ,,congress  #a/ ,session  ,h4 
,r4 #dhja  ,,9 ,,! ,,h\se ,,(           
,,repres5tatives  ,july #bi1 #bjba ,ms4 
,ca/or ( ,florida introduc$ ! foll[+    
bill2 :i* 0 ref]r$ to ! ,committee on   
,en]gy & ,comm]ce  ,a ,,bill  ,to am5d !
 ,*ildr5's ,onl9e ,privacy ,protection  
,act ( #aiih to update & exp& ! cov]age 
( su* ,act1 & = o!r purposes4  #a4 ,%ort
 title2 table ( cont5ts  7a7 ,%ort title
 ,?is ,act may be cit$ z ! ,protect+ !  
,in=mation ( our ,vuln]able ,*ildr5 &   
,y\? ,act or ! ,kids ,,privcy ,act4  7b7
 ,table ( cont5ts ,! table ( cont5ts =  
?is ,act is z foll[s3  ,sec4 #a4 ,%ort  
title2 table ( cont5ts4 ,sec4 #b4       
,def9itions4 ,sec4 #c4 ,requirem5ts =   
process+ ( cov]$ in=mation ( *ildr5 or  
te5ag]s4 ,sec4 #d4 ,repeal ( safe h>bors
 provision4 ,sec4 #e4 ,adm9i/ration &   
applicability ( ,act4 ,sec4 #f4 ,review4
 ,sec4 #g4 ,private "r ( action4 ,sec4  
#h4 ,relation%ip to o!r law4 ,sec4 #i4  
,additional con=m+ am5dm5t4 ,sec4 #aj4  
,implem5t+ regulations4 ,sec4 #aa4 ,y\? 

,privacy & ,m>ket+ ,division4 ,sec4 #ab4
 ,commission def9$4 ,sec4 #ac4          
,effective date4  #b4 ,def9itions       
,section #acjb ( ! ,*ildr5's ,onl9e     
,privacy ,protection ,act ( #aiih 7#ae  
,u4,s4,c4 #feja7 is am5d$-- 7#a7 by     
/rik+ p>agraphs 7#e7 & 7#aj72  7#b7 by  
r$esignat+ p>agraphs 7#b71 7#c71 7#d71  
7#f71 7#g71 7#h71 & 7#i7 z p>agraphs    
7#c71 7#e71 7#f71 7#g71 7#h71 7#i71 &   
7#aj71 respectively2  7#c7 by ins]t+    
aft] p>agraph 7#a7 ! foll[+3  7#b7      
,te5ag] ,! t]m te5ag] means an          
individual ov] ! age ( #ab & "u ! age ( 
#ah4  2  7#d7 by /rik+ p>agraph 7#c7 7z 
s r$esignat$7 & ins]t+ ! foll[+3  7#c7  
,cov]$ entity ,! t]m cov]$ entity       
means-- 7,a7 any organization1          
corporation1 tru/1 p>tn]%ip1 sole       
proprietor%ip1 un9corporat$ association1
 or v5ture ov] :i* ! ,commission has    
au?ority pursuant to section #e7;a77#b7 
( ! ,f$]al ,trade ,commission ,act 7#ae 
,u4,s4,c4 #de7;a77#b772  7,b7 not)/&+   
section #e7;a77#b7 ( ! ,f$]al ,trade    

,commission ,act 7#ae ,u4,s4,c4         
#de7;a77#b771 common c>ri]s2 &  7,c7    
not)/&+ sections #d & #e7;a77#b7 ( !    
,f$]al ,trade ,commission ,act 7#ae     
,u4,s4,c4 #dd & #de7;a77#b771 any       
nonpr(it organization1 includ+ any      
organization describ$ 9 section #eja7;c7
 ( ! ,int]nal ,rev5ue ,code ( #aihf t is
 exempt f taxation "u section #eja7;a7 (
 ! ,int]nal ,rev5ue ,code ( #aihf4  7#d7
 ,op]ator ,! t]m op]ator means1 )       
respect to a digital s]vice1 ! cov]$    
entity t op]ates su* s]vice1 to ! ext5t 
! cov]$ entity is engag$ 9 op]at+ su*   
s]vice or 9 process+ cov]$ in=mation    
obta9$ 9 connection ) su* s]vice4  2    
7#e7 by am5d+ p>agraph 7#f7 7z s        
r$esignat$7 to read z foll[s3  7#f7     
,disclose ,! t]m disclose means to      
int5tionally or un9t5tionally release1  
transf]1 sell1 dissem9ate1 %>e1 publi%1 
lease1 lic5se1 make available1 all[     
access to1 fail to re/rict access to1 or
 o!rwise communicate cov]$ in=mation4  2
  7#f7 by am5d+ p>agraph 7#i7 7z s      

r$esignat$7 to read z foll[s3  7#i7     
,cov]$ in=mation ,! t]m cov]$           
in=mation-- 7,a7 means any in=mation1   
l9k$ or reasonably l9kable to a specific
 te5ag] or *ild1 or specific consum]    
device ( a te5ag] or *ild2  7,b7 may    
include-- 7i7 a "n1 alias1 home or o!r  
physical address1 onl9e id5tifi]1       
,int]net ,protocol address1 email       
address1 acc\nt "n1 ,social ,security   
numb]1 physical *>act]i/ics or          
description1 telephone numb]1 ,/ate     
id5tification c>d numb]1 driv]'s lic5se 
numb]1 passport numb]1 or o!r simil>    
id5tifi]2  7ii7 actual or p]ceiv$ race1 
religion1 sex1 sexual ori5tation1 sexual
 behavior1 familial /atus1 g5d] id5tity1
 disability1 age1 political affiliation1
 or national orig92  7iii7 comm]cial    
in=mation1 includ+ records relat+ to    
p]sonal prop]ty1 products or s]vices    
pur*as$1 obta9$1 or consid]$1 or o!r    
pur*as+ or consum+ hi/ories1 int]e/s1 or
 t5d5cies2  7iv7 biometric in=mation2   
7v7 device id5tifi]s1 onl9e id5tifi]s1  

p]si/5t id5tifi]s1 or digital f+]pr9t+  
in=mation2  7vi7 int]net or o!r         
electronic network activity in=mation1  
includ+ br[s+ hi/ory1 se>* hi/ory1 &    
in=mation reg>d+ a te5ag]'s or *ild's   
int]action ) an int]net website1        
application1 or adv]tisem5t2  7vii7     
geolocation in=mation2  7viii7 audio1   
electronic1 visual1 !rmal1 olfactory1 or
 simil> in=mation2  7ix7 education      
in=mation2  7x7 heal? in=mation2  7xi7  
facial recognition in=mation2  7xii7    
cont5ts (1 atta*m5ts to1 & p>ties to    
in=mation1 includ+ ) respect to         
electronic mail1 text messages1 picture 
messages1 voicemails1 audio             
conv]sations1 & video conv]sations2     
7xiii7 f9ancial in=mation1 includ+ bank 
acc\nt numb]s1 cr$it c>d numb]s1 debit  
c>d numb]s1 or insurance policy numb]s2 
&  7xiv7 inf]5ces drawn f any ( !       
in=mation describ$ 9 ?is p>agraph to    
create a pr(ile ab\t a te5ag] or *ild   
reflect+ ! te5ag]'s or *ild's pref]5ces1
 *>act]i/ics1 psy*ological tr5ds1       

pr$ispositions1 behavior1 attitudes1    
intellig5ce1 abilities1 or aptitudes2 & 
7,c7 does n include--  7i7 in=mation t  
is process$ solely = ! purpose (        
employm5t ( a te5ag]2 or  7ii7          
de-id5tifi$ in=mation4  2  7#g7 by am5d+
 p>agraph 7#aj7 7z s r$esignat$7 to read
 z foll[s3  7#aj7 ,v]ifiable cons5t ,!  
t]m v]ifiable cons5t means express1     
affirmative cons5t freely giv5 by a     
te5ag]1 or by ! p>5t ( a *ild1 to !     
process+ ( cov]$ in=mation ( t te5ag] or
 *ild1 respectively--  7,a7 t is        
specific1 in=m$1 & unambigu\s1 tak+ into
 acc\nt ! age & ! developm5tal or       
cognitive ne$s & capabilities ( ! te5ag]
 or p>5t ( a *ild1 z applicable2  7,b7 t
 is giv5 sep>ately = ea* process+       
activity2  7,c7 :]e ! te5ag] or p>5t ( a
 *ild1 z applicable1 has n receiv$ any  
f9ancial or o!r inc5tive 9 ex*ange = su*
 cons5t2  7,d7 t is giv5 be=e any       
process+ occurs1 at a "t & 9 a context 9
 :i* ! te5ag] or p>5t ( a *ild1 z       
applicable1 w\ld reasonably expect to   

make *oices conc]n+ su* process+2 &     
7,e7 t is n obta9$ ?r\gh ! use ( a      
design1 modification1 or manipulation ( 
a us] int]face ) ! purpose or sub/antial
 effect ( obscur+1 subv]t+1 or impair+  
us] autonomy1 decision mak+1 or *oice4  
2 &  7#h7 by add+ at ! end ! foll[+3    
7#ac7 ,process ,! t]m process means to  
p]=m any op]ation or set ( op]ations on 
cov]$ in=mation1 :e!r or n by automat$  
means1 includ+ collect+1 creat+1        
acquir+1 disclos+1 %>+1 classify+1      
sort+1 record+1 d]iv+1 inf]r+1 obta9+1  
assembl+1 organiz+1 /ructur+1 /or+1     
reta9+1 adapt+ or alt]+1 us+1 or        
retriev+ cov]$ in=mation4  7#ad7        
,de-id5tifi$ in=mation2 re-id5tify  7,a7
 ,de-id5tifi$ in=mation ,! t]m          
de-id5tifi$ in=mation means in=mation t 
_c reasonably be us$ to inf] in=mation  
ab\t1 or o!rwise be l9k$ to1 a specific 
te5ag] or *ild or specific consum]      
device ( a te5ag] or *ild1 if ! cov]$   
entity t possesses ! in=mation--  7i7   
takes reasonable measures to ensure t ! 

in=mation _c be associat$ ) a te5ag] or 
*ild2  7ii7 publicly commits to ma9ta9 &
 use ! in=mation 9 de-id5tifi$ =m & n to
 attempt to re-id5tify ! in=mation1     
except = ! purpose ( te/+ ! suffici5cy (
 ! de-id5tification measures2 &  7iii7  
contractually obligates any recipi5ts ( 
! in=mation to comply ) clauses 7i7 &   
7ii74  7,b7 ,re-id5tify ,! t]m          
re-id5tify means to l9k in=mation t has 
be5 de-id5tifi$ to a specific te5ag] or 
*ild or specific consum] device ( a     
te5ag] or *ild4  7#ae7 ,/ate ,! t]m     
,/ate means ea* ( ! sev]al ,/ates1 !    
,di/rict ( ,columbia1 ea* t]ritory ( !  
,unit$ ,/ates1 & ea* f$]ally recogniz$  
,indian ,tribe4  7#af7 ,s]vice provid]  
,! t]m s]vice provid] means a cov]$     
entity t processes cov]$ in=mation at ! 
direction (1 & = ! sole b5efit (1 ano!r 
cov]$ entity1 &--  7,a7 is contractually
 or legally prohibit$ f process+ su*    
cov]$ in=mation = any o!r purpose2 &    
7,b7 complies ) all ( ! requirem5ts (   
?is title & ! regulations promulgat$ "u 

?is title4  7#ag7 ,digital s]vice ,! t]m
 digital s]vice means a website1 onl9e  
s]vice1 onl9e application1 mobile       
application1 or any o!r s]vice t        
processes cov]$ in=mation digitally4    
7#ah7 ,*ildr5's s]vice ,! t]m *ildr5's  
s]vice means--  7,a7 a digital s]vice or
 portion !re( t is direct$ to *ildr52 or
  7,b7 any o!r digital s]vice or portion
 !re(1 if ! op]ator ( ! s]vice decides  
to treat all us]s ( ! s]vice or portion1
 z ! case may be1 z *ildr54  7#ai7      
,privacy risk ,! t]m privacy risk means 
pot5tial adv]se consequ5ces to an       
individual1 gr\p ( individuals1 or      
society aris+ f ! process+ ( cov]$      
in=mation1 includ+-- 7,a7 physical h>m2 
7,b7 psy*ological or emotional h>m2     
7,c7 negative or h>mful outcomes or     
decisions ) respect to an individual's  
eligibility = rights1 b5efits1 or       
opportunities2  7,d7 reputational &     
dignity h>m2  7,e7 f9ancial h>m1 includ+
 price discrim9ation2  7,f7 inconv5i5ce 
or exp5diture ( "t2  7,g7 disruption &  

intrusion f unwant$ communications or   
contacts2  7,h7 o!r effects t limit an  
individual's *oices1 influ5ce an        
individual's responses1 or pr$et]m9e    
results or outcomes = t individual2 &   
7,i7 o!r demon/rable adv]se consequ5ces 
t affect an individual's private life1  
includ+ private family matt]s1 actions1 
& communications )9 an individual's home
 or simil> physical1 onl9e1 or digital  
location4  7#bj7 ,privacy & security    
impact assessm5t & mitigation 7,,psiam7 
7,a7 ,9 g5]al ,! t]ms privacy & security
 impact assessm5t & mitigation & ,,psiam
 mean1 ) respect to a digital s]vice1 an
 assessm5t & mitigation by ! op]ator ( !
 s]vice ( risks to ! *ildr5 & te5ag]s :o
 access ! s]vice t arise f ! process+ ( 
cov]$ in=mation1 tak+ into acc\nt       
privacy risks1 security risks1 ! rights 
& be/ int]e/s ( *ildr5 & te5ag]s1 diff]+
 ages1 capacities1 & developm5tal ne$s (
 *ildr5 & te5ag]s1 & any significant    
int]nal or ext]nal em]g+ risks1 & ensur+
 t ! ,,psiam builds 9 risk mitigation & 

compliance ) ! o!r requirem5ts ( ?is    
title4  7,b7 ,requirem5ts ,9 conduct+ a 
,,psiam ) respect to a digital s]vice1 !
 op]ator ( ! s]vice %all d ! foll[+3    
7i7 ,emb$ ! ,,psiam into ! design       
process ( ! s]vice & complete ! ,,psiam 
be=e ! laun* ( ! s]vice & on an ongo+   
basis1 & be=e mak+ significant *anges to
 ! process+ ( cov]$ in=mation4  7ii7    
,publicly disclose ! nature1 scope1     
context1 & purposes ( ! process+ ( cov]$
 in=mation4  7iii7 ,dep5d+ on ! size ( !
 s]vice & level ( risks id5tifi$-- 7,i7 
seek & docum5t ! views ( *ildr51        
te5ag]s1 & p>5ts 7or _! repres5tatives71
 z well z exp]ts 9 *ildr5's & te5ag]s'  
developm5tal ne$s2 &  7,,ii7 take su*   
views into acc\nt 9 ! design ( ! s]vice4
  7iv7 ,publicly disclose an explanation
 ( :y ! op]ator's process+ ( cov]$      
in=mation is necess>y & proportionate   
vis a vis ! risks = ! s]vice1 & h[ !    
op]ator complies ) ! requirem5ts ( ?is  
title4  7v7 ,assess any process+ ( cov]$
 in=mation t is n 9 ! be/ int]e/s (     

*ildr5 or te5ag]s or t c be detrim5tal  
to _! wellbe+ & safety1 :e!r physical1  
emotional1 developm5tal1 or mat]ial4    
7vi7 ,id5tify1 assess1 & mitigate       
high-risk process+ ( cov]$ in=mation4   
7vii7 ,id5tify measures tak5 to mitigate
 ! risks id5tifi$ "u clause 7vi7 &      
comply ) ! o!r requirem5ts ( ?is title4 
7viii7 ,provide = regul> int]nal report+
 on ! effectiv5ess ( controls & residual
 risks ( ! op]ator4  7,c7 ,auditable by 
,commission ,! ,commission may audit a  
,,psiam conduct$ by an op]ator z !      
,commission consid]s necess>y4  7#ba7   
,direct$ to *ildr5  7,a7 ,9 g5]al ,! t]m
 direct$ to *ildr5 means1 ) respect to a
 digital s]vice1 t ! digital s]vice is  
t>get$ to or attractive to *ildr51 z    
demon/rat$ by--  7i7 ! subject matt] ( !
 digital s]vice2  7ii7 ! visual cont5t (
 ! digital s]vice2  7iii7 ! use (       
animat$ *>act]s or *ild-ori5t$          
activities = *ildr51 & relat$ inc5tives1
 on ! digital s]vice2  7iv7 ! music or  
o!r audio cont5t on ! digital s]vice2   

7v7 ! age ( models on ! digital s]vice2 
7vi7 ! pres5ce on ! digital s]vice (--  
7,i7 *ild celebrities2 or  7,,ii7       
celebrities :o appeal to *ildr52  7vii7 
! language us$ on ! digital s]vice2     
7viii7 adv]tis+ cont5t us$ on1 or us$ to
 adv]tise1 ! digital s]vice2  7ix7      
reliable empirical evid5ce relat+ to--  
7,i7 ! composition ( ! audi5ce ( !      
digital s]vice1 includ+--  7aa7 data !  
op]ator ( ! digital s]vice may directly 
or indirectly collect1 use1 pr(ile1 buy1
 sell1 classify1 or analyze 7via        
algori?ms or o!r =ms ( data analytics1  
includ+ look-alike model+7 ab\t a us] or
 gr\ps ( us]s to e/imate1 id5tify1 or   
classify ! age or age range 7or a proxy 
!re(7 ( su* us] or gr\ps ( us]s2  7bb7  
adv]tis+ in=mation or results1 su* z    
data1 report+1 or in=mation f ! int]nal 
communications ( ! op]ator ( ! digital  
s]vice1 includ+ docum5tation ab\t its   
adv]tis+ practices1 su* z an adv]tisem5t
 ins]tion ord]1 or o!r promotional      
mat]ial to m>ket]s1 t indicates t cov]$ 

in=mation is be+ collect$ f *ildr5 t are
 us+ ! digital s]vice2  7cc7 data or    
report+ f ! g5]al or trade press ( !    
digital s]vice indicat+ t *ildr5 are us+
 ! digital s]vice2  7dd7 compla9ts f    
p>5ts or o!r ?ird p>ties ab\t *ild us]s 
us+ ! digital s]vice1 :e!r ?r\gh !      
compla9t me*anism ( ! digital s]vice1 by
 email1 or by o!r means2 &  7ee7 data or
 report+ f a privacy & security impact  
assessm5t & mitigation1 compliance      
program1 or o!r compliance1 risk        
managem5t1 or int]nal process t docum5ts
 privacy risks & controls relat$ to     
*ildr5's privacy1 includ+ ! exi/5ce (   
data analytics controll$ by ! op]ator ( 
! digital s]vice1 includ+ ^? ( s]vice   
provid]s1 & cont5t analytics            
capabilities & functions or outputs2 &  
7,,ii7 ! int5d$ audi5ce ( ! digital     
s]vice1 includ+ data ! op]ator ( !      
digital s]vice directly or indirectly   
collects1 uses1 pr(iles1 buys1 sells1   
classifies1 or analyzes 7via algori?ms  
or o!r =ms ( data analytics1 includ+    

look-alike model+7 ab\t ! nature ( !    
cont5t ( ! digital s]vice t e/imates1   
id5tifies1 or classifies ! cont5t z     
*ild-direct$ or simil>ly e/imates1      
id5tifies1 or classifies ! int5d$ or    
likely audi5ce = ! cont5t2 or  7x7 any  
o!r evid5ce or circum/ances !           
,commission det]m9es appropriate4  7,b7 
,cov]$ in=mation f o!r s]vices ,a       
digital s]vice %all be deem$ to be      
direct$ to *ildr5 if ! op]ator ( !      
digital s]vice has actual or con/ructive
 k t ! digital s]vice collects cov]$    
in=mation directly f us]s ( any o!r     
digital s]vice t is direct$ to *ildr5 "u
 ! crit]ia describ$ 9 subp>agraph 7,a74 
7,c7 ,signals f ?ird p>ties ,a digital  
s]vice %all be deem$ direct$ to *ildr5  
if ! digital s]vice receives a signal f 
a ?ird p>ty indicat+ t ! digital s]vice 
is int5d$ = *ildr5 or likely to appeal  
to *ildr51 :e!r directly or us+ a flag  
or o!r =mal indu/ry /&>d or conv5tion4  
7,d7 ,limitation ,a digital s]vice t    
does n t>get *ildr5 z its prim>y audi5ce

 %all n be deem$ direct$ to *ildr5 if ! 
digital s]vice--  7i7 does n collect    
cov]$ in=mation f any visitor prior to  
collect+ age in=mation2 &  7ii7 prev5ts 
! collection1 use1 or disclosure ( cov]$
 in=mation f visitors :o id5tify        
!mselves z "u age #ac )\t fir/ comply+ )
 ! notice & p>5tal cons5t provisions (  
?is title & ! regulations promulgat$ "u 
?is title4  7,e7 ,fur!r limitation ,a   
digital s]vice %all n be deem$ direct$  
to *ildr5 solely because ! digital      
s]vice ref]s or l9ks to ano!r digital   
s]vice t is direct$ to *ildr5 by us+    
in=mation location tools1 includ+ a     
directory1 index1 ref]5ce1 po9t]1 or    
hyp]text l9k4  7,f7 ,det]m9ation reg>d+ 
a portion ( a digital s]vice ,= purposes
 ( det]m9+ :e!r a portion ( a digital   
s]vice is direct$ to *ildr51 any ref]5ce
 9 ?is p>agraph to a digital s]vice %all
 be consid]$ to ref] to su* portion4    
7#bb7 ,likely to be access$ by *ildr5 or
 te5ag]s ,! t]m likely to be access$ by 
*ildr5 or te5ag]s means1 ) respect to a 

digital s]vice1 t ! possibility ( m ?an 
a de m9imis numb] ( *ildr5 or te5ag]s   
access+ ! digital s]vice is m probable  
?an n4 ,9 det]m9+ :e!r a digital s]vice 
is likely to be access$ by *ildr5 or    
te5ag]s1 ! op]ator ( ! s]vice %all      
consid] :e!r ! s]vice has p>ticul>      
appeal to *ildr5 or te5ag]s & :e!r      
effective measures 7su* z age gat+7 are 
9 place t prev5t *ildr5 or te5ag]s f    
ga9+ access to ! s]vice4  7#bc7 ,age    
assurance ,! t]m age assurance means a  
v]ifiable process to e/imate or det]m9e 
! age ( a us] ( a digital s]vice ) a    
giv5 & docum5t$ degree ( c]ta9ty4  7#bd7
 ,age gate ,! t]m age gate means to use 
a v]ifiable process t meets a docum5t$  
degree ( c]ta9ty to re/rict or block    
access to a digital s]vice = us]s t d n 
meet an age requirem5t4  4  #c4         
,requirem5ts = process+ ( cov]$         
in=mation ( *ildr5 or te5ag]s  7a7 ,9   
g5]al ,section #acjc ( ! ,*ildr5's      
,onl9e ,privacy ,protection ,act ( #aiih
 7#ae ,u4,s4,c4 #fejb7 is am5d$ to read 

z foll[s3  #acjc4 ,requirem5ts =        
process+ ( cov]$ in=mation ( *ildr5 or  
te5ag]s  7a7 ,requirem5ts = *ildr5's    
s]vices  7#a7 ,data m9imization ,an     
op]ator ( a *ildr5's s]vice %all process
 cov]$ in=mation "u ! pr9ciple ( data   
m9imization1 requir+ ! op]ator to only  
process ! m9imum am\nt necess>y = a     
specifi$ purpose4  7#b7 ,transp>5cy ,an 
op]ator ( a *ildr5's s]vice %all develop
 & make publicly available1 at all times
 & 9 a ma*9e-readable =mat1 a privacy   
policy1 9 a mann] t is cle>1 easily     
und]/ood1 & writt5 9 pla9 & concise     
language1 t includes--  7,a7 !          
categories ( cov]$ in=mation t ! op]ator
 processes ab\t te5ag]s & *ildr52  7,b7 
h[ & "u :at circum/ances cov]$ in=mation
 is collect$ directly f a te5ag] or     
*ild2  7,c7 ! categories & ! s\rces (   
any cov]$ in=mation process$ by !       
op]ator t is n collect$ directly f a    
te5ag] or *ild2  7,d7 a description ( ! 
purposes = :i* ! op]ator processes cov]$
 in=mation1 includ+--  7i7 a description

 ( :e!r & h[ ! op]ator cu/omizes        
products or s]vices1 or adju/s ! prices 
( products or s]vices = te5ag]s or      
*ildr5 or bas$ 9 any "p on process+ (   
cov]$ in=mation2  7ii7 a description (  
:e!r & h[ ! op]ator1 or ! op]ator's     
affiliates or s]vice provid]s1          
de-id5tifies in=mation1 includ+ ! me?ods
 us$ to de-id5tify su* in=mation2 &     
7iii7 a description ( :e!r & h[ !       
op]ator1 or ! op]ator's affiliates or   
s]vice provid]s1 g5]ates or uses any    
consum] score to make decisions conc]n+ 
a te5ag] or *ild1 & ! s\rce or s\rces ( 
any su* consum] score2  7,e7 a          
description ( h[ long & ! circum/ances  
"u :i* ! op]ator reta9s cov]$ in=mation2
  7,f7 a description ( all ( ! purposes 
= :i* ! op]ator discloses cov]$         
in=mation to s]vice provid]s &1 on a    
bi5nial basis1 ! categories ( s]vice    
provid]s2  7,g7 a description ( :e!r & =
 :at purposes ! op]ator discloses cov]$ 
in=mation to ?ird p>ties1 & ! categories
 ( cov]$ in=mation disclos$2  7,h7 a    

description ( ! categories ( ?ird p>ties
 to :i* cov]$ in=mation describ$ 9      
subp>agraph 7,g7 is disclos$1 by        
category or categories ( cov]$ in=mation
 = ea* category ( ?ird p>ty to :i* !    
cov]$ in=mation is disclos$2  7,i7 :e!r 
! op]ator discloses cov]$ in=mation to  
data brok]s2  7,j7 :e!r ! op]ator       
collects cov]$ in=mation ab\t te5ag]s or
 *ildr5 ov] "t & across diff]5t digital 
s]vices :5 a te5ag] or *ild uses !      
op]ator's digital s]vice2  7,k7 h[ a    
te5ag] or a p>5t ( a *ild c ex]cise _!  
rights to access1 correct1 & delete su* 
te5ag]'s or *ild's cov]$ in=mation z set
 =? 9 p>agraph 7#f72  7,l7 a li/+ ( all 
possible cons5ts t may be obta9$ by !   
op]ator = ! process+ ( cov]$ in=mation1 
h[ a te5ag] or ! p>5t ( a *ild c grant1 
)hold1 )draw1 or modify any su* cons5t1 
& ! consequ5ces ( )hold+1 )draw+1 or    
modify+ any su* cons5t2  7,m7 !         
effective date ( ! notice2 &  7,n7 h[ ! 
op]ator w communicate mat]ial *anges ( !
 privacy policy to ! te5ag] or ! p>5t ( 

a *ild4  7#c7 ,cons5t requir$  7,a7 ,9  
g5]al ,an op]ator ( a *ildr5's s]vice   
%all--  7i7 provide cle> & concise      
notice to a te5ag] or ! p>5t ( a *ild ( 
! items ( cov]$ in=mation ab\t su*      
te5ag] or *ild1 respectively1 t is      
process$ by su* op]ator & h[ su* op]ator
 processes su* cov]$ in=mation & obta9  
v]ifiable cons5t = su* process+2 &  7ii7
 if su* op]ator det]m9es1 includ+ ?r\gh 
actual or con/ructive k1 t su* op]ator  
has n obta9$ v]ifiable cons5t = any     
specific process+ ( cov]$ in=mation ab\t
 a te5ag] or *ild1 n lat] ?an #dh h\rs  
aft] su* det]m9ation--  7,i7 obta9      
v]ifiable cons5t2 or  7,,ii7 delete all 
cov]$ in=mation ab\t su* te5ag] or *ild4
  7,b7 ,:5 cons5t n requir$ ,v]ifiable  
cons5t "u ?is p>agraph is n requir$ 9 ! 
case (-- 7i7 onl9e contact in=mation    
collect$ f a te5ag] or *ild t--  7,i7 is
 us$ only to respond directly on a "o-"t
 basis to a specific reque/ f ! te5ag]  
or *ild2  7,,ii7 is n us$ to re-contact 
! te5ag] or *ild2 &  7,,iii7 is n reta9$

 by ! op]ator aft] respond+ z describ$ 9
 subclause 7,i72  7ii7 a reque/ = ! "n  
or onl9e contact in=mation ( a te5ag] or
 ! p>5t ( a *ild t is us$ = ! sole      
purpose ( obta9+ v]ifiable cons5t or    
provid+ notice "u subp>agraph 7,a77i71  
:]e su* in=mation is n reta9$ by !      
op]ator if v]ifiable cons5t is n obta9$ 
)9 #dh h\rs2 or  7iii7 ! process+ (     
cov]$ in=mation t is necess>y-- 7,i7 to 
respond to judicial process2 or  7,,ii7 
to ! ext5t p]mitt$ "u o!r provisions (  
law1 to provide in=mation to law        
en=cem5t ag5cies or = an inve/igation on
 a matt] relat$ to public safety4  7,c7 
,)drawal ( cons5t  7i7 ,me*anism =      
)drawal ,an op]ator ( a *ildr5's s]vice 
%all provide a te5ag] or ! p>5t ( a     
*ild1 z applicable--  7,i7 a me*anism to
 )draw cons5t to ! process+ ( cov]$     
in=mation at any "t 9 a mann] t is z    
easy z ! me*anism to give cons5t2 &     
7,,ii7 cle> & conspicu\s notice ( !     
me*anism requir$ by subclause 7,i74     
7ii7 ,effect ( )drawal on prior process+

 ,)drawal ( cons5t to ! process+ ( cov]$
 in=mation %all n be con/ru$ to affect !
 lawfulness ( any process+ ( cov]$      
in=mation bas$ on v]ifiable cons5t t 0 9
 effect be=e su* )drawal4  7,d7         
,prohibition on limit+ or discont9u+    
s]vice ,an op]ator ( a *ildr5's s]vice  
may n refuse to provide a s]vice1 or    
discont9ue a s]vice provid$1 to a te5ag]
 or *ild1 if ! te5ag] or p>5t ( ! *ild1 
z applicable1 refuses to cons5t1 or     
)draws cons5t1 to ! process+ ( any cov]$
 in=mation n te*nically requir$ = !     
op]ator to provide su* s]vice4  7#d7    
,ret5tion ( data  7,a7 ,ret5tion        
limitations ,subject to ! exceptions    
provid$ 9 subp>agraph 7,b71 an op]ator (
 a *ildr5's s]vice may n keep1 reta91 or
 o!rwise /ore cov]$ in=mation = long]   
?an is reasonably necess>y = ! purposes 
= :i* ! cov]$ in=mation is process$4    
7,b7 ,exceptions ,fur!r ret5tion ( cov]$
 in=mation %all n be consid]$ to be     
incompatible ) ! purposes ( process+    
describ$ 9 subp>agraph 7,a7 if su*      

process+ is necess>y & done solely = !  
purposes (--  7i7 compliance )-- 7,i7   
requirem5ts to docum5t compliance "u ?is
 title2 or  7,,ii7 o!r laws1            
regulations1 or legal obligations2  7ii7
 prev5t+ risks to ! heal? or safety ( a 
*ild or te5ag] or gr\ps ( *ildr5 or     
te5ag]s2 or  7iii7 repair+ errors t     
impair exi/+ functionality4  7#e7       
,limitation on disclos+ cov]$ in=mation 
to ?ird p>ties  7,a7 ,disclosures ,an   
op]ator ( a *ildr5's s]vice may n       
disclose cov]$ in=mation to a ?ird p>ty 
unless ! op]ator has a writt5 agreem5t )
 su* ?ird p>ty t--  7i7 specifies all ( 
! purposes = :i* ! ?ird p>ty may process
 ! cov]$ in=mation = :i* ! op]ator has  
v]ifiable cons5t2  7ii7 prohibits ! ?ird
 p>ty f process+ cov]$ in=mation = any  
purpose o!r ?an ! purposes specifi$ "u  
clause 7i72 &  7iii7 requires ! ?ird    
p>ty to provide at lea/ ! same privacy &
 security protections z ! op]ator4  7,b7
 ,responsibilities ( op]ators reg>d+    
?ird p>ties ,an op]ator ( a *ildr5's    

s]vice--  7i7 %all p]=m reasonable due  
dilig5ce 9 select+ any ?ird p>ty ) :i*  
to ent] into an agreem5t describ$ 9     
subp>agraph 7,a7 & %all ex]cise         
reasonable ov]sight ov] all su* ?ird    
p>ties to assure compliance ) !         
requirem5ts ( ?is title & ! regulations 
promulgat$ "u ?is title2 &  7ii7 if !   
op]ator has actual or con/ructive k t a 
?ird p>ty has violat$ an agreem5t       
describ$ 9 subp>agraph 7,a71 %all--     
7,i7 to ! ext5t practicable1 promptly   
take /eps to ensure compliance ) su*    
agreem5t2 &  7,,ii7 promptly report to !
 ,commission t su* a violation occurr$4 
7#f7 ,"r to access1 correct1 & delete   
cov]$ in=mation  7,a7 ,access ,an       
op]ator ( a *ildr5's s]vice1 subject to 
! exceptions 9 subp>agraph 7,d71 %all1  
^u reque/ ( a te5ag] or ! p>5t ( a *ild 
& aft] prop] id5tification ( su* te5ag] 
or p>5t1 promptly provide to su* te5ag] 
or p>5t1 z applicable-- 7i7 access to   
all cov]$ in=mation process$ by !       
op]ator p]ta9+ to su* te5ag] or *ild1   

includ+ a description (--  7,i7 ea* type
 ( cov]$ in=mation process$ by ! op]ator
 p]ta9+ to ! te5ag] or *ild1 z          
applicable2  7,,ii7 ea* purpose = :i* ! 
op]ator processes ea* category ( cov]$  
in=mation p]ta9+ to ! te5ag] or *ild1 z 
applicable2  7,,iii7 ! names ( ea* ?ird 
p>ty to :i* ! op]ator disclos$ ! cov]$  
in=mation2  7,,iv7 ea* s\rce o!r ?an !  
te5ag] or *ild1 z applicable1 f :i* !   
op]ator obta9$ cov]$ in=mation p]ta9+ to
 t te5ag] or *ild1 z applicable2  7,v7  
h[ long ! cov]$ in=mation w be reta9$ or
 /or$ by ! op]ator &1 if n kn[n1 !      
crit]ia ! op]ator uses to det]m9e h[    
long ! cov]$ in=mation w be reta9$ or   
/or$ by ! op]ator2 &  7,,vi7 ) respect  
to any score ( ! te5ag] or *ild1 z      
applicable1 process$ by ! op]ator--     
7aa7 h[ su* score is us$ by ! op]ator to
 make decisions ) respect to t te5ag] or
 *ild1 z applicable2 &  7bb7 ! s\rce t  
creat$ ! score if n creat$ by ! op]ator2
 &  7ii7 a simple & reasonable me*anism 
by :i* a te5ag] or p>5t ( a *ild may    

reque/ access to ! in=mation describ$ "u
 clause 7i71 z applicable4  7,b7        
,deletion ,an op]ator ( a *ildr5's      
s]vice1 subject to ! exceptions 9       
subp>agraph 7,d71 %all--  7i7 e/abli% a 
simple1 publicly & easily accessible1 & 
reasonable me*anism by :i* a te5ag] or  
p>5t ( a *ild ) respect to :om ! op]ator
 processes cov]$ in=mation may reque/ ! 
op]ator to delete any su* cov]$         
in=mation 7or any compon5t !re(71       
includ+ publicly available cov]$        
in=mation submitt$ to ! s]vice by ! *ild
 or te5ag]2 &  7ii7 delete su* cov]$    
in=mation n lat] ?an #de days aft]      
receiv+ su* reque/4  7,c7 ,correction   
,an op]ator ( a *ildr5's s]vice1 subject
 to ! exceptions 9 subp>agraph 7,d71    
%all-- 7i7 provide ea* te5ag] or p>5t ( 
a *ild ) respect to :om ! op]ator       
processes cov]$ in=mation1 z applicable1
 a simple1 publicly & easily accessible1
 & reasonable me*anism by :i* t te5ag]  
or p>5t may submit a reque/ to !        
op]ator--  7,i7 to dispute ! accuracy or

 complet5ess ( t cov]$ in=mation1 or "p 
or compon5t !re(2 &  7,,ii7 to reque/ t 
su* cov]$ in=mation1 or "p or compon5t  
!re(1 be correct$ = accuracy or         
complet5ess2 &  7ii7 n lat] ?an #de days
 aft] receiv+ a reque/ "u clause 7i7--  
7,i7 det]m9e :e!r ! cov]$ in=mation     
disput$ or reque/$ to be correct$ is    
inaccurate or incomplete2 &  7,,ii7     
correct ! accuracy or complet5ess ( any 
cov]$ in=mation det]m9$ by ! op]ator to 
be inaccurate or incomplete4  7,d7      
,exceptions ,an op]ator ( a *ildr5's    
s]vice may d5y a reque/ made "u         
subp>agraph 7,a71 7,b71 or 7,c7 if--    
7i7 ! op]ator is unable to v]ify !      
id5tity ( ! te5ag] or p>5t ( a *ild mak+
 ! reque/ aft] mak+ a reasonable ef=t to
 v]ify ! id5tity ( su* te5ag] or p>5t2  
7ii7 ) respect to ! reque/ made1 !      
op]ator det]m9es t--  7,i7 ! op]ator is 
limit$ f fulfill+ ! reque/ by law1      
legally recogniz$ privilege1 or o!r     
legal obligation2 or  7,,ii7 fulfill+ ! 
reque/ w\ld create a legitimate risk to 

! privacy1 security1 or safety ( someone
 o!r ?an ! te5ag] or *ild1 z applicable2
  7iii7 ) respect to a reque/ to delete 
cov]$ in=mation made "u subp>agraph 7,b7
 or a reque/ to correct cov]$ in=mation 
made "u subp>agraph 7,c71 ! op]ator     
det]m9es t ! ret5tion ( ! cov]$         
in=mation is necess>y to-- 7,i7 complete
 ! transaction ) ! te5ag] or *ild1 z    
applicable1 = :i* ! cov]$ in=mation 0   
collect$2  7,,ii7 provide a product or  
s]vice affirmatively reque/$ by ! te5ag]
 or p>5t ( a *ild1 z applicable2        
7,,iii7 p]=m a contract ) ! te5ag] or a 
p>5t ( a *ild1 z applicable1 includ+ a  
contract = bill+1 f9ancial report+1 or  
acc\nt+2  7,,iv7 keep a record ( ! cov]$
 in=mation = law en=cem5t purposes2 or  
7,v7 id5tify & repair errors t impair ! 
functionality ( ! *ildr5's s]vice2 or   
7iv7 ! cov]$ in=mation is us$ 9 public  
or pe]-review$ sci5tific1 m$ical1 or    
/ati/ical rese>* 9 ! public int]e/ t    
adh]es to commonly accept$ e?ical /&>ds 
or laws1 ) in=m$ cons5t consi/5t )      

section #ej4bj ( title #ba1 ,code (     
,f$]al ,regulations1 if ! rese>* is     
already 9 progress at ! "t :5 ! reque/  
to access1 delete1 or correct is made "u
 subp>agraph 7,a71 7,b71 or 7,c74  7,e7 
,prohibition on limit+ or discont9u+    
s]vice ,an op]ator ( a *ildr5's s]vice  
may n refuse to provide a s]vice1 or    
discont9ue a s]vice provid$1 to a te5ag]
 or *ild1 if ! te5ag] or p>5t ( ! *ild1 
z applicable1 ex]cises any ( ! rights   
set =? 9 ?is p>agraph4  7#g7 ,additional
 prohibit$ practices ) respect to       
te5ag]s & *ildr5  7,a7 ,9 g5]al ,an     
op]ator ( a *ildr5's s]vice may n-- 7i7 
process any cov]$ in=mation 9 a mann] t 
is inconsi/5t ) :at a reasonable te5ag] 
or p>5t ( a *ild w\ld expect 9 ! context
 ( a p>ticul> transaction or ! te5ag]'s 
or p>5t's relation%ip ) su* op]ator1 or 
seek to obta9 v]ifiable cons5t = su*    
process+2  7ii7 process any cov]$       
in=mation 9 a mann] t is h>mful or has  
be5 %[n to be detrim5tal to ! well-be+ (
 *ildr5 or te5ag]s2  7iii7 process cov]$

 in=mation = ! purpose ( provid+ =      
t>get$ p]sonaliz$ adv]tis+ or engage 9  
o!r m>ket+ to a specific *ild or te5ag] 
or gr\p ( *ildr5 or te5ag]s bas$ on--   
7,i7 us+ ! cov]$ in=mation1 onl9e       
behavior1 or gr\p id5tifi]s ( su* *ild  
or te5ag] or ( ! *ildr5 or te5ag]s 9 su*
 gr\p2 or  7,,ii7 us+ ! cov]$ in=mation 
or onl9e behavior ( *ildr5 or te5ag]s :o
 %>e *>act]i/ics ) su* *ild or te5ag] or
 ) ! *ildr5 or te5ag]s 9 su* gr\p1      
includ+ income level or protect$        
*>act]i/ics or proxies !re(2  7iv7      
condition ! p>ticipation ( a *ild or    
te5ag] 9 a game1 sweep/akes1 or o!r     
conte/ on cons5t+ to ! process+ ( m     
cov]$ in=mation ?an is necess>y = su*   
*ild or te5ag] to p>ticipate2  7v7      
engage 9 cross-device track+ ( a *ild or
 te5ag] unless ! *ild or te5ag] is      
logg$-9 to a specific s]vice1 = ! sole  
purpose ( facilitat+ ! prim>y purpose ( 
! good or s]vice or a specific feature  
!re(2  7vi7 engage 9 algori?mic         
processes t discrim9ate on ! basis (    

race1 age1 g5d]1 ability1 or o!r        
protect$ *>act]i/ics2  7vii7 disclose   
biometric in=mation2  7viii7 disclose   
geolocation in=mation2 or  7ix7 collect 
geolocation in=mation by default or )\t 
mak+ x cle> to a us] :5 geolocation     
track+ is 9 effect4  7,b7 ,exceptions   
,no?+ 9 subp>agraph 7,a7 %all prohibit  
an op]ator f process+ cov]$ in=mation if
 necess>y solely = purposes (-- 7i7     
detect+ & prev5t+ security incid5ts2    
7ii7 prev5t+ imm95t dang] to ! p]sonal  
safety ( an individual or gr\p (        
individuals2  7iii7 id5tify+ & repair+  
errors t impair ! core functionality ( !
 *ildr5's s]vice2 or  7iv7 comply+ ) any
 ,f$]al1 ,/ate1 or local law1 rule1     
regulation1 or o!r legal obligation1    
includ+ civil1 crim9al1 or regulatory   
inquiries1 inve/igations1 subpo5as1 or  
c\rt ord]s or o!r prop]ly execut$       
compulsory process requir+ ! disclosure 
( in=mation4  7#h7 ,security            
,requirem5ts  7,a7 ,9 g5]al ,an op]ator 
( a *ildr5's s]vice %all e/abli% &      

implem5t reasonable security policies1  
practices1 & proc$ures = ! treatm5t &   
protection ( cov]$ in=mation1 tak+ into 
consid]ation--  7i7 ! size1 nature1     
scope1 & complexity ( ! activities      
engag$ 9 by su* op]ator2  7ii7 !        
s5sitivity ( any cov]$ in=mation at     
issue2  7iii7 ! /ate ( ! art 9          
adm9i/rative1 te*nical1 & physical      
safegu>ds = protect+ su* in=mation2 &   
7iv7 ! co/ ( implem5t+ su* policies1    
practices1 & proc$ures4  7,b7 ,specific 
requirem5ts ,! policies1 practices1 &   
proc$ures e/abli%$ by an op]ator "u     
subp>agraph 7,a7 %all include ! foll[+3 
7i7 ,a writt5 security policy ) respect 
to ! process+ ( su* cov]$ in=mation4    
7ii7 ,! id5tification ( an (fic] or o!r 
individual z ! po9t ( contact )         
responsibility = ! managem5t ( in=mation
 security4  7iii7 ,a process = id5tify+ 
& assess+ any reasonably =eseeable      
vuln]abilities 9 ! sy/em or sy/ems      
ma9ta9$ by su* op]ator t conta9s su*    
cov]$ in=mation1 includ+ regul> monitor+

 = a brea* ( security ( su* sy/em or    
sy/ems4  7iv7 ,a process = tak+         
prev5tive & corrective action to        
mitigate aga9/ any vuln]abilities       
id5tifi$ 9 ! process requir$ by clause  
7iii71 :i* may include-- 7,i7 implem5t+ 
any *anges to ! security practices1     
ar*itecture1 in/allation1 or            
implem5tation ( network or op]at+       
s(tw>e2 &  7,,ii7 regul> te/+ or o!rwise
 monitor+ ! effectiv5ess ( ! safegu>ds4 
7v7 ,a process = det]m9+ if ! cov]$     
in=mation is no long] ne$$ & delet+ su* 
cov]$ in=mation by %r$d+1 p]man5tly     
eras+1 or o!rwise modify+ ! cov]$       
in=mation to make su* cov]$ in=mation   
p]man5tly unreadable or indeciph]able4  
7vi7 ,a process = ov]see+ p]sons :o h   
access to cov]$ in=mation1 includ+ ?r\gh
 int]net-connect$ devices1 by-- 7,i7    
tak+ reasonable /eps to select & reta9  
p]sons t are capable ( ma9ta9+          
appropriate safegu>ds = ! cov]$         
in=mation or int]net-connect$ devices at
 issue2 &  7,,ii7 requir+ all su* p]sons

 to implem5t & ma9ta9 su* security      
measures4  7vii7 ,a process = employee  
tra9+ & sup]vision = implem5tation ( !  
policies1 practices1 & proc$ures requir$
 by ?is subsection4  7viii7 ,a writt5   
plan or protocol = int]nal & public     
response 9 ! ev5t ( a brea* ( security4 
7,c7 ,p]iodic assessm5t & consum]       
privacy & data security mod]nization ,an
 op]ator ( a *ildr5's s]vice %all1 n    
less frequ5tly ?an e #ab mon?s1 monitor1
 evaluate1 & adju/1 z appropriate1 !    
policies1 practices1 & proc$ures ( su*  
op]ator 9 light ( any relevant *anges   
9--  7i7 te*nology2  7ii7 int]nal or    
ext]nal ?reats & vuln]abilities to cov]$
 in=mation2 &  7iii7 ! *ang+ bus9ess    
arrangem5ts ( ! op]ator4  7,d7          
,submission ( policies to ! ,,ftc ,an   
op]ator ( a *ildr5's s]vice %all submit 
! policies1 practices1 & proc$ures      
e/abli%$ by ! op]ator "u subp>agraph    
7,a7 to ! ,commission 9 conjunction ) a 
notification ( a brea* ( security       
requir$ by any ,f$]al or ,/ate /atute or

 regulation or ^u reque/ ( !            
,commission4  7b7 ,rulemak+ reg>d+      
requirem5ts = digital s]vices likely ,to
 be access$ by *ildr5 or te5ag]s  7#a7  
,9 g5]al ,! ,commission %all promulgate 
regulations "u section #eec ( title #e1 
,unit$ ,/ates ,code1 t conta9           
requirem5ts = op]ators ( digital s]vices
 t are n *ildr5's s]vices b are likely  
to be access$ by *ildr5 or te5ag]s1 :i* 
%all be bas$ on ! requirem5ts (         
subsection 7a7 b modifi$ z ! ,commission
 consid]s appropriate giv5 a risk-bas$  
approa* to det]m9e age & to det]m9e &   
mitigate privacy risks & security risks 
to ! *ild or te5ag]1 & giv5 diff]+      
developm5tal ne$s & cognitive capacities
 ( *ildr5 or te5ag]s4 ,! ,commission may
 include 9 su* regulations diff]5t      
requirem5ts = op]ators ( diff]5t types (
 su* s]vices4  7#b7 ,be/ int]e/s ( *ild 
or te5ag] ,! regulations promulgat$ "u  
p>agraph 7#a7 %all require an op]ator to
 make ! be/ int]e/s ( *ildr5 & te5ag]s a
 prim>y design consid]ation :5 design+  

its s]vice1 includ+ by conduct+ a       
privacy & security impact assessm5t &   
mitigation = ! s]vice1 address+ all     
privacy risks to *ildr5 & te5ag]s :i*   
arise f ! process+ ( cov]$ in=mation1   
tak+ into acc\nt ! be/ int]e/s ( *ildr5 
& te5ag]s4  7#c7 ,risk-bas$ approa* to  
det]m9+ age ( us]  7,a7 ,9 g5]al ,!     
regulations promulgat$ "u p>agraph 7#a7 
%all require a risk-bas$ approa* to     
det]m9+ ! age ( a specific us] ( a      
digital s]vice "u :i* high] privacy     
risks & security risks f ! process+ (   
cov]$ in=mation require a high] c]ta9ty 
( age assurance4  7,b7 ,age assurance ,!
 regulations promulgat$ "u p>agraph 7#a7
 %all require an op]ator to conduct an  
age assurance to det]m9e ! age ( ea*    
specific us]4  7,c7 ,approval ( age     
assurance me*anisms ,! ,commission %all 
e/abli% 9 ! regulations promulgat$ "u   
p>agraph 7#a7 a process "u :i* an       
op]ator may obta9 ! approval ( !        
,commission ( p>ticul> me*anisms ( age  
assurance z meet+ ! age assurance       

requirem5ts ( su* regulations = p>ticul>
 levels ( privacy risks4  7,d7 ,data    
m9imization ,! regulations requir$ by   
p>agraph 7#a7 %all provide t any data   
collect$ = age assurance %all be !      
m9imal am\nt necess>y & de/roy$         
imm$iately or z det]m9$ by !            
,commission1 b consi/5t ) /&>ds t /ill  
all[ = audit+ & compliance4  7c7        
,prohibition on c]ta9 adv]tis+ or m>ket+
 = digital s]vices likely ,to be access$
 by *ildr5 or te5ag]s ,an op]ator ( a   
digital s]vice t is likely to be access$
 by *ildr5 or te5ag]s may n process     
cov]$ in=mation = ! purpose ( provid+ = 
t>get$ p]sonaliz$ adv]tis+ or engage 9  
o!r m>ket+ to a specific *ild or te5ag] 
or gr\p ( *ildr5 or te5ag]s bas$ on--   
7#a7 us+ ! cov]$ in=mation1 onl9e       
behavior1 or gr\p id5tifi]s ( su* *ild  
or te5ag] or ( ! *ildr5 or te5ag]s 9 su*
 gr\p2 or  7#b7 us+ ! cov]$ in=mation or
 onl9e behavior ( *ildr5 or te5ag]s :o  
%>e *>act]i/ics ) su* *ild or te5ag] or 
) ! *ildr5 or te5ag]s 9 su* gr\p1       

includ+ income level or protect$        
*>act]i/ics or proxies !re(4  7d7       
,en=cem5t ,subject to section #acjf1 a  
violation ( ?is section or a regulation 
promulgat$ "u ?is section %all be treat$
 z a violation ( a rule def9+ an unfair 
or deceptive act or practice prescrib$  
"u section #ah7;a77#a77;,b7 ( ! ,f$]al  
,trade ,commission ,act 7#ae ,u4,s4,c4  
#eg;a7a77#a77;,b774  4  7b7 ,con=m+     
am5dm5ts ,section #acje ( ! ,*ildr5's   
,onl9e ,privacy ,protection ,act ( #aiih
 7#ae ,u4,s4,c4 #fejd7 is am5d$-- 7#a7 9
 subsection 7a77#a7--  7,a7 by /rik+ any
 regulation ( ! ,commission prescrib$ "u
 section #acjc7;b7 & ins]t+ section     
#acjc or a regulation promulgat$ "u su* 
section2 &  7,b7 9 subp>agraph 7,b71 by 
/rik+ ! regulation & ins]t+ su* section 
or su* regulation2 &  7#b7 9 subsection 
7d7-- 7,a7 by /rik+ any regulation      
prescrib$ "u section #acjc & ins]t+     
section #acjc or a regulation promulgat$
 "u su* section2 &  7,b7 by /rik+ t     
regulation & ins]t+ su* section or su*  

regulation4  #d4 ,repeal ( safe h>bors  
provision  7a7 ,9 g5]al ,section #acjd (
 ! ,*ildr5's ,onl9e ,privacy ,protection
 ,act ( #aiih 7#ae ,u4,s4,c4 #fejc7 is  
repeal$4  7b7 ,con=m+ am5dm5t ,section  
#acje7;b7 ( ! ,*ildr5's ,onl9e ,privacy 
,protection ,act ( #aiih 7#ae ,u4,s4,c4 
#fejd7;b77 is am5d$ by /rik+ p>agraph   
7#c74  #e4 ,adm9i/ration & applicability
 ( ,act  7a7 ,en=cem5t by ,f$]al ,trade 
,commission ,section #acjf7;d7 ( !      
,*ildr5's ,onl9e ,privacy ,protection   
,act ( #aiih 7#ae ,u4,s4,c4 #feje7;d77  
is am5d$ to read z foll[s3  7d7 ,actions
 by ! ,commission  7#a7 ,9 g5]al ,except
 z provid$ 9 p>agraphs 7#b7 & 7#c71 !   
,commission %all prev5t any p]son f     
violat+ section #acjc or a regulation   
promulgat$ "u su* section 9 ! same      
mann]1 by ! same means1 & ) ! same      
jurisdiction1 p[]s1 & duties z ?\gh all 
applicable t]ms & provisions ( ! ,f$]al 
,trade ,commission ,act 7#ae ,u4,s4,c4  
#da et seq47 7 incorporat$ into & made a
 "p ( ?is title1 & any entity t violates

 su* section or su* regulation %all be  
subject to ! p5alties & entitl$ to !    
privileges & immunities provid$ 9 !     
,f$]al ,trade ,commission ,act 9 ! same 
mann]1 by ! same means1 & ) ! same      
jurisdiction1 p[]1 & duties z ?\gh all  
applicable t]ms & provisions ( ! ,f$]al 
,trade ,commission ,act 7 incorporat$   
into & made a "p ( ?is title4  7#b7     
,increas$ civil p5alty am\nt ,9 ! case (
 a civil p5alty "u subsection 7l7 or 7m7
 ( section #e ( ! ,f$]al ,trade         
,commission ,act 7#ae ,u4,s4,c4 #de7    
relat+ to acts or practices 9 violation 
( section #acjc or a regulation         
promulgat$ "u su* section1 ! maximum    
doll> am\nt p] violation %all be        
#fc1gie4  7#c7 ,nature ( relief         
available ,9 any action comm5c$ by !    
,commission "u subsection 7a7 ( section 
#ai ( ! ,f$]al ,trade ,commission ,act  
7#ae ,u4,s4,c4 #eg;b7 to en=ce section  
#acjc ( ?is title or a regulation       
promulgat$ "u su* section1 ! ,commission
 %all seek all appropriate relief       

describ$ 9 subsection 7b7 ( su* section 
#ai1 & may1 not)/&+ su* subsection1 seek
 any exempl>y or punitive damages4  4   
7b7 ,en=cem5t by c]ta9 o!r ag5cies      
,section #acjf ( ! ,*ildr5's ,onl9e     
,privacy ,protection ,act ( #aiih 7#ae  
,u4,s4,c4 #feje7 is am5d$--  7#a7 9     
subsection 7b7-- 7,a7 9 p>agraph 7#a71  
by /rik+ 1 9 ! case ( & all t foll[s &  
ins]t+ ! foll[+3 by ! appropriate ,f$]al
 bank+ ag5cy1 ) respect to any insur$   
depository in/itution 7z ^? t]ms are    
def9$ 9 section #c ( t ,act 7#ab        
,u4,s4,c4 #ahac7722  7,b7 9 p>agraph    
7#f71 by /rik+ ,f$]al l& bank1 ,f$]al l&
 bank association1 ,f$]al int]m$iate    
cr$it bank1 or production cr$it         
association & ins]t+ ,f>m ,cr$it ,bank1 
,agricultural ,cr$it ,bank 7to ! ext5t  
ex]cis+ ! au?orities ( a ,f>m ,cr$it    
,bank71 ,f$]al ,l& ,cr$it ,association1 
or agricultural cr$it association2 &    
7,c7 by /rik+ p>agraph 7#b7 & r$esignat+
 p>agraphs 7#c7 ?r\gh 7#f7 z p>agraphs  
7#b7 ?r\gh 7#e71 respectively2 &  7#b7 9

 subsection 7c71 by /rik+ subsection 7a7
 ea* place x appe>s & ins]t+ subsection 
7b74  #f4 ,review ,section #acjg ( !    
,*ildr5's ,onl9e ,privacy ,protection   
,act ( #aiih 7#ae ,u4,s4,c4 #fejf7 is   
am5d$--  7#a7 9 ! matt] prec$+ p>agraph 
7#a71 by /rik+ ! regulations initially  
issu$ "u section #acjc & ins]t+ !       
regulations issu$ "u section #aj7;a7 ( !
 ,protect+ ! ,in=mation ( our ,vuln]able
 ,*ildr5 & ,y\? ,act 7relat+ to !       
implem5tation ( ! am5dm5ts made by su*  
,act to ?is title72 &  7#b7 by am5d+    
p>agraph 7#a7 to read z foll[s3  7#a7   
review ! implem5tation ( ?is title1     
includ+ ! effect ( ! implem5tation ( ?is
 title on practices relat+ to ! process+
 ( cov]$ in=mation ab\t te5ag]s or      
*ildr5 & te5ag]'s & *ildr5's ability to 
obta9 access to in=mation ( _! *oice    
onl9e2 &  4  #g4 ,private "r ( action ,!
 ,*ildr5's ,onl9e ,privacy ,protection  
,act ( #aiih 7#ae ,u4,s4,c4 #feja et    
seq47 is am5d$--  7#a7 by r$esignat+    
sections #acjg & #acjh z sections #acjh 

& #acji1 respectively2 &  7#b7 by ins]t+
 aft] section #acjf ! foll[+3  #acjg4   
,private "r ( action  7a7 ,"r ( action  
,any p>5t ( a te5ag] or p>5t ( a *ild   
alleg+ a violation ( section #acjc or a 
regulation promulgat$ "u su* section )  
respect to ! cov]$ in=mation ( su*      
te5ag] or *ild may br+ a civil action 9 
any c\rt ( compet5t jurisdiction4  7b7  
,injury 9 fact ,a violation ( section   
#acjc or a regulation promulgat$ "u su* 
section ) respect to ! cov]$ in=mation (
 a te5ag] or *ild con/itutes an injury 9
 fact to t te5ag] or *ild4  7c7 ,relief 
,9 a civil action br\ght "u subsection  
7a7 9 :i* ! pla9tiff prevails1 ! c\rt   
may aw>d-- 7#a7 injunctive relief2  7#b7
 actual damages2  7#c7 punitive damages2
  7#d7 reasonable attorney's fees &     
co/s2 &  7#e7 any o!r relief t ! c\rt   
det]m9es appropriate4  7d7 ,pre-,dispute
 arbitration agreem5ts  7#a7 ,9 g5]al   
,no pre-dispute arbitration agreem5t or 
pre-dispute jo9t-action waiv] %all be   
valid or en=ceable ) respect to any     

claim aris+ "u section #acjc or a       
regulation promulgat$ "u su* section4   
7#b7 ,det]m9ation ,a det]m9ation z to   
:e!r & h[ ?is title or a regulation     
promulgat$ "u ?is title applies to an   
arbitration agreem5t %all be det]m9$ "u 
,f$]al law by ! c\rt1 r ?an !           
arbitrator1 irrespective ( :e!r ! p>ty  
oppos+ arbitration *all5ges su* agreem5t
 specifically or 9 conjunction ) any o!r
 t]m ( ! contract conta9+ su* agreem5t4 
7#c7 ,def9itions ,z us$ 9 ?is           
subsection-- 7,a7 ! t]m pre-dispute     
arbitration agreem5t means any agreem5t 
to arbitrate a dispute t has n aris5 at 
! "t ( ! mak+ ( ! agreem5t2 &  7,b7 !   
t]m pre-dispute jo9t-action waiv] means 
an agreem5t1 :e!r or n "p ( a           
pre-dispute arbitration agreem5t1 t w\ld
 prohibit1 or waive ! "r (1 "o ( !      
p>ties to ! agreem5t to p>ticipate 9 a  
jo9t1 class1 or collective action 9 a   
judicial1 arbitral1 adm9i/rative1 or o!r
 =um1 conc]n+ a dispute t has n yet     
aris5 at ! "t ( ! mak+ ( ! agreem5t4    

7e7 ,non-,waiveability ,! rights &      
rem$ies provid$ "u ?is title may n be   
waiv$ or limit$ by contract or o!rwise4 
4  #h4 ,relation%ip to o!r law ,section 
#acjf ( ! ,*ildr5's ,onl9e ,privacy     
,protection ,act ( #aiih 7#ae ,u4,s4,c4 
#feje7 is fur!r am5d$ by add+ at ! end !
 foll[+3  7f7 ,relation%ip to o!r law   
7#a7 ,o!r ,f$]al privacy or security    
provisions ,no?+ 9 ?is title or a       
regulation promulgat$ "u ?is title may  
be con/ru$ to modify1 limit1 or sup]s$e 
! op]ation ( any privacy or security    
provision 9 any o!r ,f$]al /atute or    
regulation4  7#b7 ,/ate law ,no?+ 9 ?is 
title or a regulation promulgat$ "u ?is 
title may be con/ru$ to preempt1        
displace1 or supplant any ,/ate common  
law or /atute1 except to ! ext5t t any  
su* common law or /atute specifically & 
directly conflicts ) ! provisions ( ?is 
title or a regulation promulgat$ "u ?is 
title1 & !n only to ! ext5t ( ! specific
 & direct conflict4 ,any su* common law 
or /atute is n 9 specific & direct      

conflict if x af=ds a great] level (    
protection to a *ild or te5ag] ?an !    
provisions ( ?is title or a regulation  
promulgat$ "u ?is title4  7#c7 ,section 
#bcj ( ! ,communications ,act ( #aicd   
,no?+ 9 section #bcj ( ! ,communications
 ,act ( #aicd 7#dg ,u4,s4,c4 #bcj7 may  
be con/ru$ to impair or limit !         
provisions ( ?is title or a regulation  
promulgat$ "u ?is title4  4  #i4        
,additional con=m+ am5dm5t ,! head+ (   
title ,,xiii ( division ,c ( ! ,omnibus 
,consolidat$ & ,em]g5cy ,supplem5tal    
,appropriations ,act1 #aiii 7,public    
,law #aje-bgg2 #aab ,/at4 #bfha-gbh7 is 
am5d$ by ins]t+ & ,te5ag]'s aft]        
,*ildr5's4  #aj4 ,implem5t+ regulations 
7a7 ,9 g5]al ,n lat] ?an #a ye> aft] !  
date ( ! enactm5t ( ?is ,act1 !         
,commission %all promulgate regulations 
"u section #eec ( title #e1 ,unit$      
,/ates ,code1 to implem5t ! am5dm5ts    
made by ?is ,act1 includ+ ! regulations 
requir$ by subsection 7b7 ( section     
#acjc ( ! ,*ildr5's ,onl9e ,privacy     

,protection ,act ( #aiih1 z am5d$ by ?is
 ,act4  7b7 ,review & revision ,n lat]  
?an #aj ye>s aft] ! date on :i* !       
,commission promulgates ! regulations   
requir$ by subsection 7a71 ! ,commission
 %all review su* regulations &1 if !    
,commission consid]s revisions to su*   
regulations appropriate1 promulgate su* 
revisions "u section #eec ( title #e1   
,unit$ ,/ates ,code4  #aa4 ,y\? ,privacy
 & ,m>ket+ ,division  7a7 ,e/abli%m5t   
,!re is e/abli%$ )9 ! ,commission a     
division to be kn[n z ! ,y\? ,privacy & 
,m>ket+ ,division4  7b7 ,director ,!    
,y\? ,privacy & ,m>ket+ ,division %all  
be head$ by a ,director1 :o %all be     
appo9t$ by ! ,*airman ( ! ,commission4  
7c7 ,duties ,! ,y\? ,privacy & ,m>ket+  
,division %all be responsible =         
address+1 z x relates to ?is ,act & !   
am5dm5ts made by ?is ,act--  7#a7 !     
privacy ( *ildr5 & te5ag]s2 &  7#b7     
m>ket+ direct$ at *ildr5 & te5ag]s4  7d7
 ,/aff ,! ,director ( ! ,y\? ,privacy & 
,m>ket+ ,division %all hire adequate    

/aff to c>ry out ! duties "u subsection 
7c71 includ+ individuals :o are exp]ts 9
 data protection1 digital adv]tis+1 data
 analytics1 & y\? developm5t4  7e7      
,reports ,n lat] ?an #a ye> aft] ! date 
( ! enactm5t ( ?is ,act1 & ea* ye>      
!reaft]1 ! ,director ( ! ,y\? ,privacy &
 ,m>ket+ ,division %all submit to !     
,committee on ,comm]ce1 ,sci5ce1 &      
,transportation ( ! ,s5ate & !          
,committee on ,en]gy & ,comm]ce ( !     
,h\se ( ,repres5tatives a report t      
includes--  7#a7 a description ( ! "w ( 
! ,y\? ,privacy & ,m>ket+ ,division on  
em]g+ conc]ns relat+ to y\? privacy &   
m>ket+ practices2 &  7#b7 an assessm5t (
 h[ effectively ! ,commission has1 dur+ 
! p]iod = :i* ! report is submitt$1     
address$ y\? privacy & m>ket+ practices4
  7f7 ,def9itions ,9 ?is section1 ! t]ms
 *ild & te5ag] h ! mean+s giv5 su* t]ms 
9 section #acjb ( ! ,*ildr5's ,onl9e    
,privacy ,protection ,act ( #aiih 7#ae  
,u4,s4,c4 #feja71 z am5d$ by ?is ,act4  
#ab4 ,commission def9$ ,9 ?is ,act1 !   

t]m ,commission means ! ,f$]al ,trade   
,commission4  #ac4 ,effective date ,!   
am5dm5ts made by ?is ,act %all take     
effect on ! date t is #a ye> aft] !     
,commission promulgates ! regulations   
requir$ by section #aj7;a74