SC H3400

Requires entities offering online products targeted at users under 18 in South Carolina to complete data protection impact assessments analyzing data collection practices, potential harms to children, security protections, and health impacts

Prohibits collecting, retaining, processing, or selling children's personal data unless necessary to provide the service, and bans targeted digital advertising to minors without parental consent

Mandates "privacy by default" settings on all child-targeted online products, requiring the strictest privacy settings be applied automatically without manual input from users

Requires privacy policies and terms of service to be written in child-appropriate language and agreed to by both the child and their parent or guardian before use

Authorizes the Attorney General to impose civil penalties up to $20,000 per violation (capped at $250 million total), and allows private lawsuits by or on behalf of children harmed by violations, with 90-day cure period before enforcement actions