Children and Teens’ Online Privacy Protection Act

Expanded Protections for Teens: By including "teens" (individuals aged 13 to under 17) in the definitions and protections, the bill extends privacy rights beyond just young children. (Sec. 2)

Ban on Targeted Advertising: The bill prohibits operators from collecting or using personal information for individual-specific advertising directed at children or teens. (Sec. 2)

Greater Control Over Personal Data: Teens are granted the right to request a description of their collected data, the ability to challenge the accuracy of that data, and the option to delete their information or refuse further collection. (Sec. 2)

Enhanced Data Security Requirements: Operators are required to establish and maintain reasonable security practices to protect the confidentiality and integrity of the personal information they collect. (Sec. 2)

Increased Transparency for Parents and Teens: The act requires clear and conspicuous notice regarding data collection practices and requires operators to notify users if their information is being stored or transferred outside of the United States. (Sec. 2)

Insights into Financial Technology Risks: The mandated GAO study aims to identify risks to the privacy and mental health of teens using financial technology products. (Sec. 4)

Service Termination Risks: The regulations allow an operator to terminate services provided to a child or teen if a parent or the teen refuses to permit further use or collection of their personal information. (Sec. 2)

Regulatory Burdens on Operators: Operators must implement new processes for obtaining verifiable consent, providing notice, and managing requests for data deletion or correction. (Sec. 2)