By Grace Gedye. CalMatters.
When does a child become an adult? It's an elusive question that developmental psychologists, philosophers and parents might answer differently.
But lawmakers can't work with ambiguity. So in the late 1990s, Congress decided that, at least when it comes to surfing the web, children are those people under the age of 13.
Last week, California lawmakers said: No. Children are people under 18. And if Gov. Gavin Newsom signs a children's internet privacy bill, which they just passed, children under 18 in California will get many more online privacy rights.
What young people encounter on apps and the web has become a source of growing concern for parents, fueled by alarming headlines and new research. So a bipartisan group of lawmakers pushed through the California Age-Appropriate Design Code Act, also known as AB 2273.
The bill could become a model for other states, or provide a road map for Congress, which is considering its own privacy bill.
"Social media is something that was not designed with kids in mind," said Emily "Emi" Kim, an 18-year-old who lives in Porter Ranch, near Los Angeles.
Kim splits her time as legislative director for the Log Off Movement, a youth-led organization that advocated for the bill, while taking college classes and working at Chipotle.
This is what the bill would do
If signed into law, California businesses that provide online services or products likely to be accessed by children under 18 would be required to provide enhanced privacy protections by default starting in July 2024.
Specifically, the bill:
– Requires companies to assess the potential harm in how they use children’s data in new services or features, and create a plan to reduce the risk before the feature is implemented.
– Prohibits companies from using children’s information in ways the company knows – or has reason to know – is “materially harmful” to their well-being, such as pushing children to look at photos of extremely thin supermodels after searching for information on how to lose weight.
– Generally prohibits companies from collecting, selling, sharing or retaining any personal information about a child unless it is necessary to provide the service that the child is directly using.
– Prohibits companies from collecting, selling, or sharing precise location data for children by default unless strictly necessary for the feature, and only for a limited time.
– Requires the product to be obvious to children when they are being tracked, if the company allows parents or adults to track children online.
If some of those requirements sound vague, the bill also creates a new working group, made up of experts in children's data privacy, computing, mental health and more, to make recommendations to the Legislature.
The bill would be enforced by the state attorney general, who could file civil lawsuits that could result in fines of up to $7,500 per child for willful violations.
Karla Garcia, a mother of an 11-year-old boy in the Palms neighborhood of West Los Angeles, supports the bill because she hopes it will rein in the algorithms that suck her son, Alessandro Greco, into YouTube. “He knows it’s an addiction,” she said of her son’s America’s Got Talent binges, which prevent him from doing his homework. “Honestly, I have this fight every night with my son.”
"I want him to have his independence, but this is stronger than him," Garcia said.
How Internet Privacy Laws for Children Have Worked Elsewhere
The idea was borrowed from a UK law, which came into effect in September 2021. Since the law was passed, tech companies have made changes, including the following:
– YouTube has disabled autoplay, the feature that plays videos continuously, for users under 18.
– Google made SafeSearch the default for users under 18 and stopped tracking children’s location data.
– TikTok stopped sending push notifications to teens late at night. Teens ages 13 to 15 don’t get push notifications after 9 p.m., and 16 and 17-year-olds don’t get push notifications after 10 p.m. The company also disabled direct messages for users under 16.
Who becomes a child?
The bill faced pushback from lobbying organizations representing tech companies and other businesses, including the California Chamber of Commerce, the Entertainment Software Association and TechNet.
TechNet counts Amazon, Google, Meta — formerly known as Facebook — and Uber among its members. The organizations argued that the bill would apply to more sites than necessary.
"It's another example of why we need a federal privacy law that includes universal standards to protect children online rather than a patchwork of state laws that creates confusion and compliance complications for businesses," said Dylan Hoffman, executive director of TechNet who oversees California and the Southwest.
One of the main changes the groups pushed for was to narrow the bill's definition of a child from 18 to 13, as in federal law. They then advocated for 16, which is a threshold in a California privacy law, Hoffman said. But the business groups were unsuccessful in that push.
“Any parent, to be honest, any grandparent, any sister, brother, would tell you that a 13-year-old is not an adult,” said Baroness Beeban Kidron, a member of the U.K. House of Lords who led the effort to pass the U.K. law and founded the 5Rights Foundation, which sponsored the California bill. “You can’t ask a 13-year-old to make adult decisions,” Kidron said.
What happens next?
First, Newsom will decide whether he wants to sign the bill into law or veto it. If he signs it, most of the measure's requirements would not take effect until 2024.
But companies would have to start identifying and mitigating risks to children immediately, said Nichole Rocha, director of U.S. affairs at the 5Rights Foundation. In other words, if the bill becomes law, companies could begin implementing changes well before 2024.
What if companies don't want to comply? Would the threat of a potential lawsuit from the California attorney general be enough to spur them into action?
“I’ll be watching that very closely,” said Buffy Wicks, a Democratic state assemblywoman from Oakland and one of the bill’s authors. The legislature could pass another bill if it needs to refine how the law is enforced, she said. “We can sit here and make policy all day, but if it’s not implemented, it’s not enforced, what’s the point?”
To read the original note from click here.
You may be interested in: In digital matters "the biggest problem is that we all consume garbage": Alex Fink
