Bill > SB495

This bill, titled the "Age-Appropriate Design Code Act," aims to protect minors online by establishing new rules for "covered entities" – businesses that generate most of their revenue from online services and are likely to be accessed by minors. Key provisions include prohibiting "high-risk data practices" and design features that could lead to compulsive use or negatively impact a minor's autonomy, such as automatically playing videos or using variable reward schedules. Covered entities must conduct risk assessments before deploying new designs or making significant changes, document these assessments, and have them independently audited. Default privacy settings for minors must be set to the highest level of privacy, and algorithmic feeds must meet certain criteria, with options for minors to control the media they see and access their personal data. The bill also requires covered entities to provide clear public notices about their privacy policies and terms of service, and grants minors the ability to request the deletion of their personal data. Enforcement will be handled by the Attorney General under the "Fair Business Practices Act," with penalties for violations, and the bill includes specific definitions for terms like "minor," "personal data," and "algorithmic feed" to clarify its scope. The law will take effect on January 1, 2027, with provisions for rule-making to begin earlier.

Health and Social Services

https://www.legis.ga.gov/legislation/73129