On 9 January 2024, the Bill amending Consumer Data Protection Act to include protections for children (SB 361), was introduced in the Virginia Legislature. The Bill aims to protect children's data and defines key terms such as "biometric data", "child", and "consumer". It provides specific requirements for data controllers and processors regarding the protection of children's privacy, including restrictions on data processing, processing of sensitive data, and prohibition of specific processing activities. The Bill prohibits operators of websites, online services, or online or mobile applications from collecting or using the personal data of users they know are younger than the age of 18 without consent. It also prohibits the sale or disclosure of the personal data of such users. The Bill aims to strengthen data protection for children and clarify the responsibilities of companies.
Original source