Technology

Consumer Data Protection Act; prohibitions and duties relating to minors. Prohibits a controller of an online service, product, or feature from entering into certain agreements with a known minor, unless such controller obtains verified consent from the minor's parent as specified in the bill. The bill imposes certain duties on a controller of an online service, product, or feature related to advertising, algorithm use, and reasonable care toward known minors. The bill expands the consumer rights of a parent to minors and adds a provision allowing a parent to obtain a copy of the minor's data. Current law offers certain consumer rights to the parents of children younger than age 13. The bill has a delayed effective date of January 1, 2027.

Consumer Data Protection Act; online device pricing; prohibition. Provides that no controller or processor shall, in connection with a consumer transaction, generate, in whole or in part, a price offered to a consumer through the consumer's online device based on (i) the hardware or hardware state of the online device, as those terms are defined in the bill, (ii) the presence or absence of any software on the online device, or (iii) precise geolocation data of the online device when used to set a price based on inferences about the consumer made from such data. The bill provides for exemptions in certain instances.