This bill aims to enhance the protection of minors' personal data by prohibiting controllers and processors from selling the personal data of individuals identified as minors. A "covered minor" is defined as a consumer that the controller or processor knows to be under 18 years of age. This legislation builds upon existing laws regarding consumer data protection, specifically referencing definitions from P.L.2023, c.266.
Additionally, the bill mandates that controllers and processors must establish a mechanism that allows covered minors or their parents to request the deletion of personal data related to the minor. This provision ensures that families have the ability to manage and protect the personal information of minors in the digital landscape. The act is set to take effect six months after its enactment.