HB 3880

Abstract

Creates the Children's Privacy Protection and Parental Empowerment Act. Provides that a business that provides an online service, product, or feature likely to be accessed by children shall take specified actions, including completing a Data Protection Impact Assessment for any online service, product, or feature likely to be accessed by children. Provides that a business shall complete a Data Protection Impact Assessment on or before July 1, 2024, for any online service, product, or feature likely to be accessed by children offered to the public before July 1, 2024. Provides that any business that violates the Act shall be subject to an injunction and liable for a civil penalty of not more than $2,500 per affected child for each negligent violation or not more than $7,500 per affected child for each intentional violation. Creates the Children's Data Protection Working Group to deliver a report to the General Assembly regarding best practices for the implementation of the Act. Effective immediately.