US SB836

Extends COPPA protections to teens ages 13-16 by requiring operators to obtain verifiable consent from teens before collecting, using, or disclosing their personal information online

Prohibits individual-specific targeted advertising to children and teens, banning the use of personal information to deliver ads based on profiling, unique identifiers, or data about similar demographic groups

Expands the definition of "personal information" to include biometric data (fingerprints, facial templates, voice prints, DNA), geolocation information, and persistent identifiers that track users across platforms

Requires operators to delete children's and teens' personal information upon request, allow correction of inaccurate data, and retain data only as long as reasonably necessary to fulfill the requested service

Mandates FTC enforcement reports to Congress annually and a GAO study on teen privacy and mental health risks from financial technology products