United States of America: Passed Bill amending Consumer Data Protection Act to Include Protections for Children (SB 361) by Senate of Virginia

On 9 February 2024, the Bill amending the Consumer Data Protection Act to include protections for children (SB 361), was passed by the Senate in the Virginia Legislature. The Bill aims to protect children's data and defines key terms such as "biometric data", "child", and "consumer". It provides specific requirements for data controllers and processors regarding the protection of children's privacy, including restrictions on data processing, processing of sensitive data, and prohibition of specific processing activities. The Bill prohibits operators of websites, online services, or online or mobile applications from collecting or using the personal data of users they know are younger than the age of 13 without consent. It also prohibits the sale or disclosure of the personal data of such users.