S 3413

As introduced: - Creates the New Jersey Kids Code Act, applying to a covered online service provider that has more than $25 million in annual gross revenue, or processes the personal data of at least 50,000 consumers or households per year, excluding services where adults make up more than 98% of the users. - Requires providers to apply minors’ accounts to the highest privacy settings by default, including limiting adult contact and visibility and disabling search engine indexing. - Prohibits offering a single setting that weakens all protections, or prompting minors to reduce privacy settings. - Prohibits targeted advertising to minors, restricts late-night and school-day notifications, prohibits most profiling and dark patterns, bars ads for prohibited products such as narcotics, tobacco, gambling, and alcohol, and limits algorithmic recommendations unless based on the minor’s express request, privacy settings, or a search query. - Minimizes data collection, requires geolocation notices, and requires easy account deletion within 15 days. - Requires offering implement harm-reporting tools for minors and parents. - Requires annual independent audits with detailed public reporting on minors’ data practices, age assurance methods, algorithm use, and design features. - Expands the definitions of "personal data" and "sensitive data" under the state's existing data privacy law.