The proposed Minnesota Age-Appropriate Design Code Act seeks to enhance consumer data privacy for children by imposing specific obligations on businesses that develop online products likely to be accessed by minors. These obligations include conducting data protection impact assessments, maintaining documentation, and ensuring that privacy settings are designed to protect children's data. The bill emphasizes that businesses must prioritize the best interests of children in their data handling practices, providing clear and accessible privacy information tailored to both children and their guardians.
Additionally, the bill outlines enforcement mechanisms, allowing the attorney general to oversee compliance and impose civil penalties for violations, ranging from $2,500 for negligent breaches to $7,500 for intentional violations per affected child. It prohibits businesses from processing children's personal data in ways that do not align with their best interests, including profiling without safeguards and using deceptive practices to collect data. The legislation does not create a private right of action or impose liability inconsistent with federal law, aiming to create a safer online environment for children while balancing the rights of businesses.
Statutes affected: Introduction: 13.6505