Data protection for children

In California, a new Data Protection Impact Assessment determines how personal data how children use online services, products, and features, and what potential harms to children may result from data management. California protects children's online data from exploitation by companies.

The California Age-Appropriate Design Code Act requires online services to implement settings by default that protect children's mental and physical health and well-being.

Accordingly, it is unlawful for online service providers to collect, sell, or store geolocation data from children; to create profiles of children without their express consent; or to induce or encourage children to disclose personal information.

The measure requires that privacy notices, terms of use, policies, and community standards be easily accessible and complied with, and that children have access to responsive tools to protect their Privacy will be made available. This new

This bipartisan law strikes a balance that protects children while ensuring that technology companies have clear rules to follow so they can continue to innovate.

To submit a report on best practices for protecting children’s data to the legislature by January 2024, the California Children’s Data Protection Working Group will be established as part of the California Age-Appropriate Design Code Act.

Before offering new online services, products, or features that children can access, companies with an online presence must Data Protection Impact Assessment (Data Protection Impact Assessment – DPIA).

Data protection impact assessments must demonstrate how personal data used by children through online services, products, and features, and what potential harm to children may result from data management practices. The California Attorney General must receive a copy of the assessments.