SC S0268

Requires covered online services (websites/apps meeting revenue or data thresholds of $25 million+ annual revenue or 50,000+ users) to exercise reasonable care in design and use of minors' personal data to prevent harms including compulsive usage, psychological harm, and identity theft

Mandates easily accessible tools for minors to limit communications from other users, control design features like infinite scroll and notifications, opt out of personalized recommendations, and restrict geolocation tracking

Prohibits targeted advertising to minors, bars notifications/push alerts to known minors between 10 PM-6 AM and during school hours (8 AM-3 PM, August-May), and limits data collection to the minimum necessary

Requires parental tools that are on by default for children under 13, allowing parents to manage account settings, restrict purchases, view time spent, and limit usage during specified hours

Mandates annual public reports by independent auditors detailing minor user statistics, design features, data practices, and algorithm descriptions, with enforcement by the Attorney General and treble damages for violations