A 4015

Summary

As substituted on 6/8/2026: - Creates the New Jersey Age-Appropriate Design Code, applying to a covered online service provider that has more than $25 million in annual gross revenue, or processes the personal data of at least 50,000 consumers or households per year, excluding services where adults make up more than 98% of the users. - Requires providers to apply minors’ accounts to the highest privacy settings by default, including restricting adult access to their accounts and content, disabling unsolicited direct messaging and location sharing, hiding social connections, preventing search-engine indexing, and turning off public engagement metrics unless the minor affirmatively opts in. - Prohibits offering a single setting that weakens all protections, or prompting minors to reduce privacy settings. - Requires an interface to allow reporting of harms. - Prohibits covered online services from sending notifications to minors by default or during overnight and school-day hours, targeting them with ads for drugs, tobacco, gambling, or alcohol, and using dark patterns to influence their behavior. - Prohibits covered online services from using minors' personal data for purposes beyond those for which it was collected, restricts algorithmic recommendations to limited user-directed or age-appropriate uses, and requires providers to minimize the collection, processing, and retention of minors' personal data. - Minimizes data collection, requires geolocation notices, and requires easy account deletion within 15 days. Requires providing a deletion mechanism. - Requires a signal when precise geolocation information is collected. - Requires reasonable steps to ensure the provider's use of a child's personal data and covered design feature do not result in compulsive behavior. - Creates a private right of action.

Sponsor

Legislative History

Companion Bills

Quick Actions

Details

Related Legislation