Bill > HR6291

This bill aims to strengthen protections for children and teens' online privacy by amending the Children's Online Privacy Protection Act of 1998. The bill expands the definition of personal information to include a wide range of identifiable data such as geolocation information, biometric data, and persistent identifiers. It introduces new definitions, including a "teen" (ages 13-16) and "high-impact social media company" with specific revenue and user thresholds. The bill prohibits operators from collecting, using, or disclosing personal information of children and teens for individual-specific advertising, and requires operators to obtain verifiable consent from parents or teens before collecting or using their personal information. It also mandates that operators provide clear notice about data collection practices, offer opportunities for parents and teens to review, delete, and correct personal information, and implement reasonable security practices to protect this data. The bill applies to websites, online services, applications, and mobile applications, and includes provisions for educational institutions. Additionally, the bill requires the Federal Trade Commission to submit oversight and enforcement reports to Congress and establishes that the law preempts any conflicting state regulations.

Business and Industry

https://www.congress.gov/bill/119th-congress/house-bill/6291/all-info