A BILL TO AMEND THE SOUTH CAROLINA CODE OF LAWS BY ENACTING THE "CHILD DATA PRIVACY AND PROTECTION ACT" BY ADDING ARTICLE 9 TO CHAPTER 5, TITLE 39 SO AS TO PROVIDE DEFINITIONS, TO PROVIDE FOR CERTAIN DATA PROTECTION IMPACT ASSESSMENTS, TO PROVIDE THAT CERTAIN ENTITIES MAY NOT COLLECT, RETAIN, PROCESS, OR SELL CERTAIN PERSONAL DATA, TO PROVIDE THAT CERTAIN ENTITIES SHALL UTILIZE PRIVACY BY DEFAULT, TO PROVIDE THAT USERS MUST HAVE ACCESS TO THEIR ACCOUNTS, TO PROVIDE THAT CERTAIN CIVIL AND CRIMINAL SUBPOENAS AND WARRANTS MUST BE EXPEDITED, TO PROVIDE THAT PRIVACY POLICIES MUST BE PROMINENTLY DISPLAYED, TO PROVIDE FOR METHODS FOR NOTIFICATIONS, TO PROVIDE FOR A PUBLIC AWARENESS CAMPAIGN, TO REQUIRE A REPORT, AND TO PROVIDE FOR A CAUSE OF ACTION.
Impact
This bill has a significant impact on state laws regarding data privacy and digital marketing targeted at minors. By implementing stringent requirements for consent and data handling, the act hopes to mitigate risks associated with data breaches and unauthorized data sharing. The authority to enforce compliance is vested in the Office of the Attorney General, which can impose substantial penalties on businesses that violate the act. This framework not only intends to safeguard children but also imposes accountability on businesses advertising to this demographic, thereby shaping the overall digital environment in the state.
Summary
House Bill 3400, known as the 'Child Data Privacy and Protection Act', aims to enhance the protection of children's personal data in South Carolina. The legislation establishes stringent guidelines for entities that collect, retain, or process data of child users, defined as individuals under 18. It specifically prohibits the collection and sale of personal data unless it is necessary for the provision of an online product. Moreover, companies are required to conduct data protection impact assessments to evaluate risks associated with their data handling practices. The act prioritizes children's privacy, requiring 'privacy by default' settings in applications designed for young users, thereby limiting unnecessary data collection.
Contention
Notable points of contention may arise concerning the balance between data privacy and the interests of businesses. While supporters argue that the bill is a necessary step in protecting vulnerable populations, critics might express concerns that the regulations could hinder innovation and limit the availability of certain online services directed towards children. The bill's definitions and stipulations, such as the need for parental consent for targeted advertising, raise questions about the feasibility and practicality of compliance for smaller companies, which may struggle with the administrative burden imposed by the act.