Bill > SB232

This bill, titled the Consumer Data Protection Act; prohibitions and duties relating to minors, aims to enhance protections for minors' data online. It prohibits companies, referred to as "controllers," from entering into agreements with a known minor for online services, products, or features unless they obtain verified consent from the minor's parent. The bill also imposes specific duties on controllers regarding advertising to minors, the use of algorithms that affect minors, and exercising reasonable care to prevent harm to minors online, such as self-harm, substance abuse, bullying, and sexual exploitation. Furthermore, it expands the consumer rights of parents, allowing them to obtain a copy of all data associated with their minor child, including details about who that data was shared with and how it is being used. The bill defines a "minor" as anyone under 18 years old and clarifies that a "controller" is the entity that determines the purpose and means of processing personal data. This legislation will take effect on January 1, 2027.

Justice

https://lis.virginia.gov/bill-details/20261/SB232