Bill > S836

This bill, titled the Children and Teens’ Online Privacy Protection Act, aims to strengthen existing online privacy protections for individuals under 17 by amending the Children's Online Privacy Protection Act of 1998 (COPPA). Key provisions include expanding the definition of "operator" to include those who operate online or mobile applications and clarifying what constitutes "personal information" to encompass persistent identifiers like IP addresses and unique device identifiers, as well as biometric data and geolocation information. The bill also introduces specific protections for "teens" (individuals aged 13 to 16), granting them rights similar to those previously afforded only to parents of younger children, such as the right to access, correct, and delete their personal information. It further restricts the collection and use of personal information for "individual-specific advertising" targeted at children and teens, which is defined as advertising based on personal information or profiling of the child or teen. The bill also includes provisions for operators working with educational agencies or institutions, allowing for exceptions to verifiable consent requirements under certain conditions, and mandates that the Federal Trade Commission (FTC) study and report on oversight and enforcement of online and mobile application privacy. Additionally, it requires a study by the Government Accountability Office (GAO) on the privacy and mental health risks associated with teens using financial technology products.