SB 495

As introduced: - Applies to "covered online service" providers that offer services reasonably likely to be accessed by minors, and collect or control the processing of consumers’ personal data, either directly or through a processor. - Prohibits a covered entity from certain practices with minors, including collecting, selling, sharing, or retaining personal data that is not necessary, use previously collected data for a new purpose, allow the user to be monitored online without a conspicuous signal, prioritize content unless requested, send overnight push notifications, or use features that includes auto-play, variable reward schedules, infinite scroll, or causes compulsive use. - Requires covered entities to conduct a risk assessment for compulsive use before deploying new online features, provide the safest design as the default for minors, and set all privacy settings to the highest level by default, including disabling settings that allow unknown adult users to connect, and disabling search engine indexing. - Authorizes enforcement by the Attorney General, creates a private right of action for individuals to sue for violations, and requires covered entities to provide a tool for minors to request the deletion of their personal data.