HB 1762 Summary

• Requires covered entities offering online products to children under 18 to complete data protection impact assessments evaluating compliance with "best interest of children" standards and submit assessments to the Attorney General within 7 business days upon request.

• Mandates default privacy settings at high levels, age-appropriate public disclosures, and prohibits profiling, processing unnecessary personal data, collecting precise geolocation data by default, and using dark patterns to manipulate children.

• Establishes civil penalties of up to $2,500 per affected child for negligent violations and up to $7,500 per affected child for intentional violations, with enforcement limited to the Attorney General and private right of action prohibited.

• Applies to for-profit entities processing personal data of at least 100,000 consumers or 25,000 consumers deriving 25% or more revenue from personal data sales; excludes health information, telecommunications services, and physical products.

• Effective November 1, 2025, with initial data protection impact assessments due by January 1, 2026.