Protection of Personal Age Verification Data. (Effective January 1, 2027)

An app store provider shall protect personal age verification data by doing both of the following: (1) Limiting the collection and processing to data necessary to: (i) verify a user’s age; (ii) obtain parental consent; or (iii) maintain compliance records. (2) Transmitting personal age verification data using industry-standard encryption protocols that ensure data integrity and data confidentiality. (Act 2026-59, §6.)