SB 432

Abstract

Consumer Data Protection Act; protections forchildren. Requires a controller or processor to obtain verifiableparental consent, defined in the bill, prior to registering any childwith the operator's product or service or before collecting, using,or disclosing such child's personal data and prohibits a controllerfrom knowingly processing the personal data of a child for purposesof (i) targeted advertising, (ii) the sale of such personal data,or (iii) profiling in furtherance of decisions that produce legalor similarly significant effects concerning a consumer. The bill also amends the definition of child for purposes of the Consumer DataProtection Act to include any natural person younger than 18 yearsof age.