Online Services, Products or Features Offered to Minors (heightened-risk duty of care)

Requires online services that know or wilfully disregard that users are minors to use reasonable care to avoid a heightened risk of harm to them, document data protection assessments, and limit how minors' data is used. From July 1, 2026 (P.A. 25-113), targeted advertising and sale of minors' data are flatly banned regardless of consent, adult-to-minor unsolicited messaging must be blocked by default, and engagement-maximizing design features are restricted.