Children and Teens’ Online Privacy Protection Act

This bill amends the Children's Online Privacy Protection Act of 1998 to strengthen protections for the online collection, use, and disclosure of personal information of children (under 13) and teens (ages 13-16). It expands the definition of operators, personal information, and covered platforms, and establishes new rules for consent, data deletion, and restrictions on targeted advertising.

Sec. 2, Online collection, use, disclosure, and deletion of personal information of children and teens: This section updates key definitions. 'Operator' now includes those who allow others to collect personal information or allow users to publicly disclose it. 'Personal information' is expanded to include geolocation information, biometric data, and information linked to a child or teen. 'Teen' is defined as an individual over 12 and under 17. It is unlawful for operators to collect personal information from children or teens for individual-specific advertising, to collect data except as necessary for a service or as required by law, to store data outside the U.S. without disclosure, or to retain data longer than necessary. Operators must obtain verifiable consent from a parent (for children) or the teen before collecting data, and must provide rights to access, delete, and correct personal information. Operators must also maintain reasonable security practices.

Sec. 3, Study and reports of mobile and online application oversight and enforcement: The Federal Trade Commission (FTC) must submit a report within 3 years on how platforms ensure child-directed apps comply with this Act and FTC rules. The FTC must also submit an annual enforcement report detailing the number of actions, investigations, complaints, and policy recommendations.

Sec. 4, GAO study: The Government Accountability Office (GAO) must study the privacy of teens using financial technology products, identifying the products used, potential privacy risks, and whether existing laws are sufficient. A report with recommendations must be submitted to Congress within 1 year.