United States of America: Introduced Age-Appropriate Design Code (SB 196)

On 13 January 2023, the Age-Appropriate Design Code Act (SB 196) was introduced in the Senate of Oregon. The Act would apply to entities that provide online services or products directed towards children. Before such entities may offer their services or products, they would be obliged to complete a data protection impact assessment, which will examine the harm of the product or service to children. At the request of the Attorney General, covered entities would be required to transfer their data protection impact assessments within 5 days. Covered entities must further publish privacy information on their website or product and enable children or their parents to exercise their privacy rights. Covered entities would be prohibited from profiling children or using the personal information of children in a way that harms the child's health. In case of violations of the Act, covered entities would be liable to injunctive relief as well as civil penalties of up to USD 2500 per negligent violation and up to USD 7500 per intentional violation, with the Attorney General exclusively enforcing the Act. If turned into law, the Act will come into force on 1 July 2024.