SECTION 1.  The General Laws, as appearing in the 2014 Official Edition, are hereby amended by adding the following new chapter:-

Chapter 93L.  Online Collection of Personal Information from Children and Minors.

Section 1.  As used in this chapter, the following terms shall have the following meanings, unless the context clearly requires otherwise:-

“Child”, an individual under the age of 13.

“Minor”, an individual over the age of 12 and under the age of 16.

“Targeted marketing”, advertising or other efforts to market a product or service that are directed to a specific individual or device: (i) based on the personal information of the individual or a unique identifier of the device; and (ii) as a result of use by the individual, or access by the device, of a website, online service, online application, or mobile application.

Section 2. (a) An operator of a website, online service, online application, or mobile application directed to children, or an operator having actual knowledge that personal information being collected is from a child, shall not use, disclose to third parties, or compile personal information for targeted marketing purposes without verifiable parental consent. 

(b) An operator of a website, online service, online application, or mobile application directed to minors, or an operator having actual knowledge that personal information being collected is from a minor, shall not use, disclose to third parties, or compile personal information for targeted marketing purposes without the consent of the minor.

Section 3.  (a) An operator of a website, online service, online application, or mobile application directed to children or minors, or an operator having actual knowledge that geolocation information being collected is from a child or minor, shall provide clear and conspicuous notice in clear and plain language of any geolocation information the operator collects, how the operator uses such information, and whether the operator discloses such information. 

(b) Prior to collecting geolocation information from a child, an operator of a website, online service, online application, or mobile application shall obtain verifiable parental consent; provided, that the parent may at any time thereafter refuse to permit the further use or maintenance in retrievable form, or future collection, by the operator of geolocation information from the child. 

(c) Prior to collecting geolocation information from a minor, an operator of a website, online service, online application, or mobile application shall obtain affirmative express consent from such minor or the parent of such minor; provided, that the minor or parent may at any time thereafter refuse to permit the further use or maintenance in retrievable form, or future collection, by the operator of geolocation information from the minor.

(d) Upon request by a minor, the parent of a minor, or the parent of a child, an operator of a website, online service, online application, or mobile application shall provide to the person making the request: (i) a description of the geolocation information collected from the minor or child by the operator; and (ii) a means that is reasonable under the circumstances for the minor, parent of a minor, or parent of a child to obtain any geolocation information collected from the minor or child, if such information is available to the operator at the time the request is made; provided, that neither an operator nor the operator’s agent shall be held to be liable under any federal or state law for any disclosure made in good faith and following reasonable procedures in responding to a request for disclosure of geolocation information.  

(e) An operator of a website, online service, online application, or mobile application shall be prohibited from discontinuing service provided to a minor or child on the basis of a refusal by a minor, parent of a minor, or parent of a child to permit the further use or maintenance in retrievable form, or future online collection, of geolocation information from the minor or child to the extent that the operator is capable of providing such service without such information.  

Section 4.  The Office of Consumer Affairs and Business Regulation shall adopt rules and regulations necessary to implement this chapter.