SB 232

Consumer Data Protection Act; prohibitions and duties relating to minors. Prohibits a controller of an online service, product, or feature from entering into certain agreements with a known minor, unless such controller obtains verified consent from the minor's parent as specified in the bill. The bill imposes certain duties on a controller of an online service, product, or feature related to advertising, algorithm use, and reasonable care toward known minors. The bill expands the consumer rights of a parent to minors and adds a provision allowing a parent to obtain a copy of the minor's data. Current law offers certain consumer rights to the parents of children younger than age 13. The bill has a delayed effective date of January 1, 2027.