a minor, knowing it will be used for marketing or advertising certain restricted products such as alcohol, guns, tobacco, drug paraphernalia, etc. The removal requirements apply to any website or mobile app that is “directed to minors” (as opposed to general audiences) or if the operator has actual knowledge that a user is a minor. The law does not require the operator of the website to collect or maintain age information. It may therefore be advisable for a website operator to not collect age information as part of a general audience website or mobile app. Student Privacy Protections. California’s Student Online Personal Information Protection Act regulates the collection, use, and disclosure of personal information from K-12 students. Cal. Bus. & Prof. Code §§ 22584 – 22585. The similar Early Learning Personal Information Protection Act, effective July 1, 2017, applies to preschool and prekindergarten-aged children. Cal. Bus. & Prof. Code §§ 22586 – 22587. These laws prohibit website and application operators from engaging in targeted advertising, amassing profiles on students, or disclosing student information unless in furtherance of school purposes. California Consumer Privacy Act. Effective January 1, 2020, the California Consumer Privacy Act (CCPA) became the United States’ broadest and most stringent privacy law to date. The CCPA regulates the collection, use, and disclosure of personal information from California residents. The CCPA defines personal information broadly and applies to any business that collects personal information from California residents and (i) has annual gross revenues of $25 million or more; (ii) buys, receives, sells, or shares the personal information of at least 50,000 California residents, households, or devices annually; or (iii) derives a minimum of 50 percent of its annual revenue from selling California residents’ personal information. Under the CCPA consumers have the right to opt out of the sale of their personal information and businesses are required to notify consumers of that right in their online privacy notice and via a conspicuous link on the website reading “Do Not Sell My Personal Information.” Notices may also be required at the time of collection of any data if such collection is made at the location and not
112
Made with FlippingBook - Online Brochure Maker