Bill > S0903

This bill requires companies that develop online services, products, or features that children are likely to access to prioritize children's best interests in their design and development. The legislation, known as the Age-Appropriate Design Code, establishes comprehensive requirements for how covered entities must handle children's personal data, including mandating data protection impact assessments, setting high-privacy default settings, and prohibiting practices that could harm children. Key provisions include preventing targeted advertising to children, restricting data collection and processing, banning the use of manipulative design techniques called "dark patterns," and requiring clear, age-appropriate privacy information. The bill applies to entities that meet certain revenue or data processing thresholds, with exceptions for healthcare and clinical trial data. Enforcement is through the Attorney General, who can impose civil penalties of up to $2,500 per affected child for negligent violations and $7,500 per affected child for intentional violations. The law will take effect on January 1, 2026, and aims to create stronger protections for children's privacy and safety in online environments by requiring companies to proactively consider potential risks in their digital products and services.

Justice

https://status.rilegislature.gov/