Children's online privacy protection; release of personal information prohibited.

Children's online privacy protection. Prohibits any person who operates a website for commercial purposes and who collects or maintains personal information from or about the users of or visitors to such website or online service from releasing personal information collected from minors for any purpose, except where the personal information is provided to a person other than an operator that provides support for the internal operations of the website, online service, online application, or mobile application of the operator, excluding any activity relating to targeted marketing directed to minors, and does not disclose or use that personal information for any other purpose. The measure also requires operators to establish and maintain reasonable procedures to protect the confidentiality, security, and integrity of personal information collected from children. A violation is a prohibited practice under the Virginia Consumer Protection Act. The measure has a delayed effective date of January 1, 2021.