The New Jersey Kids Code Act establishes the Age-Appropriate Design Code, which requires online service providers to implement measures aimed at protecting the privacy of minors. This legislation responds to concerns about the impact of social media on youth mental health and emphasizes the need for tailored privacy protections for different age groups. Key provisions include defining terms such as "personal data" and "sensitive data," limiting data collection, obtaining consent for processing sensitive data, and conducting assessments for activities that may pose risks to minors. The Act mandates that online service providers must not process the data of known minors without adhering to the established guidelines.

Additionally, the bill requires that default privacy settings for minors be configured to the highest level of protection, prohibits the use of dark patterns to manipulate minors into lowering their privacy settings, and mandates the provision of tools for minors to request account deletion. It also requires annual public reports from service providers detailing their practices related to minors, with the Attorney General responsible for enforcing compliance. The bill amends existing data privacy laws, clarifying that violations will be considered unfair and deceptive acts under the New Jersey Consumer Fraud Act, and ensures that the law providing the greatest protection for minors prevails in case of conflicts. The act is set to take effect on July 1 of the calendar year following its enactment.

Statutes affected:
Introduced: 56:8-166.4, 56:8-166.12