CA AB1949

Raises the age threshold for consumer data protection from under 16 years to under 18 years of age under the California Consumer Privacy Act of 2020.

Requires affirmative authorization from consumers aged 13-17 (or their parent/guardian for those under 13) before businesses can collect, sell, or share their personal information.

Mandates businesses treat consumers as under 18 years of age if the consumer sends a signal through any platform, technology, or mechanism indicating they are less than 18 years old.

Updates regulatory requirements for opt-out preference signals to include specifications allowing consumers or parents/guardians to indicate a child is less than 13 years old or between 13-18 years old.

Applies the same restrictions on collection and use of minors' personal information without affirmative authorization, with penalties for businesses that willfully disregard a consumer's age.