HB 2772

As introduced: - Enacts the Kansas Age-Appropriate Design Code Act, applying to online businesses whose online products, services or features are reasonably likely to be accessed by a minors. Prohibits high-risk data practices or design features unless requested by an adult. - Limits the collection, sale, sharing, or retention of data to what is necessary. Prohibits a user from being tracked without a conspicuous signal. Prohibits prioritization of content unless requested. - Prohibits overnight push notifications, auto-play, variable reward schedules, infinite scroll, compulsive use features, prohibited data practices or design features, a setting that makes more than one setting less protective, or prompting a user to make settings less protective unless strictly necessary. - Requires a covered business to assess risk that a design will encourage compulsive use in minor users. - Requires default privacy settings for a minor to be set at the highest level, including prohibiting an algorithmic recommendation system from allowing unknown adult users to contact or follow the minor, and disabling search engine indexing, prohibiting displaying the location of a minor. - Prohibits sending push notifications to a minor by default. - Requires covered businesses to disable all interaction counts such as likes, comments, and reactions on a minor’s content by default, while allowing minors to turn on specific interaction types individually, and only offering a global “turn all on” option if it is no more prominent than the granular controls. - Requires platforms to give the minor a clear, accessible way to set content preferences, block certain media, review and edit the personal data used for recommendations. - Creates a private right of action against the unauthorized creation and distribution of an individual's digital likeness. - Requires clear disclosure that a user is interacting with a chatbot and prohibits providers from selling user chat logs or using them for advertising. - Imposes strict limits on chatbot providers’ use of personal data and chat logs. Requires parental consent to train on data from minors. Grants users a right to access chat logs. - Prohibits chatbots from implying endorsement by licensed professionals or suggesting confidentiality protections. - Defines chatbots as products for product liability purposes and holds providers strictly liable for injuries caused by their use.