HB 633

As introduced: - Requires covered online services, defined as businesses that handle the data of at least 100,000 consumers annually or derives at least 50% of its gross revenue from selling or sharing personal data, to configure all default settings for users under 18 to the highest level of privacy, including disabling public interaction counts and most push notifications. - Requires providing tools to delete accounts, opt out of algorithmic feeds and in-app purchases, limit screen time, and manage privacy settings. - Requires limiting data collection and retention, clearly signaling geolocation tracking and parental monitoring, providing parental oversight, and mechanisms to report harms. - Prohibits default settings using algorithmic recommendations to connect minors with unknown adults, displaying a minor’s friends or contacts, enabling search engine indexing, sharing a minor’s location without consent, sending push notifications, or providing a single setting that enables all push notifications. - Requires providing minors with tools that let them prevent specific users from viewing or interacting with them. - Requires tools to allow minors to set content preferences, review and edit the personal data used for recommendations, and choose a feed limited to sources they affirmatively follow. - Prohibits profiling minors beyond what is necessary, targeted advertising, ads for prohibited products, dark patterns, weakening multiple privacy settings at once, prompting minors to reduce protections, misusing age-verification data, and sending push notifications during overnight or school-day hours.