United States of America: Implemented Bill amending Consumer Data Protection Act to include protections for children (SB 361)

On 17 May 2024, the Bill amending the Consumer Data Protection Act to include protections for children (SB 361) comes into effect. The Bill aims to protect children's data and defines key terms such as "biometric data", "child", and "consumer". It provides specific requirements for data controllers and processors regarding the protection of children's privacy, including restrictions on data processing, processing of sensitive data, and prohibition of specific processing activities. The Bill prohibits operators of websites, online services, or online or mobile applications from collecting or using the personal data of users they know are younger than the age of 13 without consent. It also prohibits the sale or disclosure of the personal data of such users.