On 10 February 2025, the New York Child Data Privacy Protection Act was introduced to the New York Senate, aiming to enhance protections for minors' data in the digital environment. The Act addresses concerns about excessive data collection, targeted advertising, and online risks faced by children under 18 years old. It would require online services providing services to minors to conduct data protection impact assessments, adopt privacy-by-default settings, and prohibit targeted digital advertising without parental consent. The Act also mandates clear privacy policies and strengthens parental oversight. It also imposes strict penalties for violations, including fines of up to USD 250 million for knowing or reckless breaches. Additionally, it empowers the New York Attorney General’s Bureau of Internet and Technology to enforce compliance and oversee public awareness campaigns.
Original source