Bill > S2406

This bill, titled the Age-Appropriate Design Code, mandates that any company ("covered entity") that develops or provides online services, products, or features that children (defined as individuals under 18) are likely to access must prioritize the best interests of children in their design and development. This includes conducting data protection impact assessments to identify and mitigate risks of harm to children, such as financial injury, privacy intrusions, or discrimination. Companies must also configure default privacy settings for children to be highly protective, communicate privacy information clearly and age-appropriately, and provide tools for children or their parents to manage privacy rights and report concerns. The bill prohibits certain practices, such as profiling children by default or processing unnecessary personal data, and requires conspicuous warnings if precise geolocation is collected. The Attorney General is empowered to enforce these provisions through civil penalties, with fines of up to $2,500 per negligent violation and $7,500 per intentional violation per affected child, and the act will take effect on January 1, 2027.

Justice

https://status.rilegislature.gov/