United States of America: Signed New York Child Data Protection Act (SB 7695)

On 20 June 2024, the Child Data Protection Act (SB 7695) was signed into law. The Bill aims to safeguard the privacy of children and young adults under the age of 18 by regulating digital services' use of their personal data. The Bill applies to any related activities occurring fully or partly within the New York State. Furthermore, the Bill prevents online platforms from collecting, using, or disclosing any personal data of users under 18 without informed consent. In particular, the Bill mandates written agreements for any data disclosed to third parties. In addition, digital services must adopt privacy as the default setting and can only use a minor's data when absolutely necessary or with explicit consent. Furthermore, the Bill requires third-party service providers to comply with data handling and security measures. Minors have the right to revoke consent at any time, and platforms must respect device or browser signals indicating a user is a minor. The Attorney General is empowered to enforce compliance.