Consumer Data Protection Act; protections for children, definitions.

Consumer Data Protection Act; protections for children; definitions. Requires a controller or processor, as such terms are defined in relevant law, to obtain verifiable parental consent, defined in the bill, prior to registering any child younger than 18 years of age with the controller's or processor's product or service or before collecting, using, or disclosing such child's personal data.

Source: OpenStates · fetched February 4, 2026

• Parent / guardiandirectModerate impactHigh certainty

  Requires verifiable parental consent before a child under 18 can be registered for a product/service or have their data collected, used, or disclosed.

  “Requires a controller or processor, as such terms are defined in relevant law, to obtain verifiable parental consent, defined in the bill, prior to registering any child younger than 18 years of age with the controller's or processor's product or service or before collecting, using, or disclosing such child's personal data.”· Consumer Data Protection Act; protections for children; definitions.

• Student / education borrowerindirectModerate impactHigh certainty

  Children under 18, who may be students, will have their personal data collection, use, and disclosure restricted, requiring parental consent.

  “prior to registering any child younger than 18 years of age with the controller's or processor's product or service or before collecting, using, or disclosing such child's personal data.”· Consumer Data Protection Act; protections for children; definitions.