Bill > SB201

This bill amends the Consumer Data Protection Act to establish new protections for children. Specifically, it requires any entity that controls or processes personal data (referred to as a "controller" or "processor") to obtain verifiable parental consent before registering a child under 18 years old for their product or service, or before collecting, using, or disclosing that child's personal data. "Verifiable parental consent" is defined as authorization from a parent or guardian, and the bill outlines reasonable methods for obtaining this consent, such as a signed form, credit card transaction with notification, or providing government-issued identification. The bill also gives parents the option to consent to data collection and use without consenting to its disclosure to third parties. This change aims to enhance the privacy of minors online by strengthening the requirements for obtaining parental permission for data handling.

Justice

https://lis.virginia.gov/bill-details/20261/SB201