An Act providing for duties of covered entities to protect the best interests of children that use online services, products or features and for data protection impact assessments; prohibiting certain actions by covered entities; and imposing penalties.

This bill, known as the Online Safety Protection Act, requires businesses that provide online services likely to be used by children to prioritize the privacy, safety, and well-being of minors over commercial interests. Companies covered by the law must conduct data protection impact assessments to ensure their products do not cause foreseeable physical, financial, or psychological harm, nor engage in discriminatory practices or use deceptive design tricks called dark patterns. The legislation also defines specific rules for how personal information can be collected and sold, while excluding deidentified data and publicly available information from these restrictions. Penalties are imposed on entities that fail to comply with these duties to protect children's best interests.