California Civil Code

§ 1798.99.31

CIV § 1798.99.31 Effective Jan 1, 2025Div. 3 · Title 1.81.47 · Part 4

Statute text

(a)A business that provides an online service, product, or feature likely to be accessed by children shall take all of the following actions:

(1)(A) Before any new online services, products, or features are offered to the public, complete a Data Protection Impact Assessment for any online service, product, or feature likely to be accessed by children and maintain documentation of this assessment as long as the online service, product, or feature is likely to be accessed by children. A business shall biennially review all Data Protection Impact Assessments.

(B)The Data Protection Impact Assessment required by this paragraph shall identify the purpose of the online service, product, or feature, how it uses children’s personal information, and the risks of material detriment to children that arise from the data management practices of the business. The Data Protection Impact Assessment shall address, to the extent applicable, all of the following:

…

Legislative history

Amended by Stats. 2024, Ch. 80, Sec. 21. (SB 1525) Effective January 1, 2025.