NJ A4015

Establishes the "New Jersey Kids Code Act" requiring online services likely accessed by minors to configure default privacy settings to the highest level, including hiding minor accounts from adult users, disabling direct messaging with adults, and preventing location sharing unless explicitly enabled by the minor

Applies to businesses with gross revenue over $25 million, or that process personal data of at least 50,000 consumers annually, and where adults do not make up more than 98% of users

Defines "covered design features" that encourage increased platform usage, including infinite scroll, auto-playing video/audio, gamification elements like streaks and badges, notification clustering, and features creating illusions of human interaction

Expands definitions of "personal data" and "sensitive data" under existing state privacy law (P.L.2023, c.266) to include derived data, unique identifiers, social security numbers, driver's license numbers, and passport numbers

Prohibits covered online service providers from processing minor data for targeted advertising, profiling, or sales without following stricter requirements than those applicable to general consumers under current privacy law