HOUSE DOCKET, NO. 3668        FILED ON: 1/18/2019

HOUSE  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  No. 1403

The Commonwealth of Massachusetts

_________________

PRESENTED BY:

Carolyn C. Dykema

_________________

To the Honorable Senate and House of Representatives of the Commonwealth of Massachusetts in General
Court assembled:

The undersigned legislators and/or citizens respectfully petition for the adoption of the accompanying bill:

An Act relative to the online privacy of minors.

_______________

PETITION OF:

HOUSE DOCKET, NO. 3668        FILED ON: 1/18/2019

HOUSE  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  No. 1403

The Commonwealth of Massachusetts

_______________

In the One Hundred and Ninety-First General Court
(2019-2020)

_______________

An Act relative to the online privacy of minors.

Be it enacted by the Senate and House of Representatives in General Court assembled, and by the authority of the same, as follows:
 

Chapter 93 of the General Laws, as appearing in the 2016 Official Edition, is hereby amended by inserting after section 114 the following section:-

Section 115. (a) For the purposes of this section, the following terms shall have the following meanings:-

“Minor”, a person under 18 years of age who resides in the commonwealth.

“Minor user”, a person of any age who posted on an operator’s site while a minor and while registered to use such operator’s site.

“Operator”, any person or entity that owns a site. Operator does not include any third party that operates, hosts or manages, but does not own, a site on the owner’s behalf or processes information on the owner’s behalf.

“Post”, content or information stored on a site that can be accessed by any user of a site, regardless of whether an accessing user is a registered user of the site where the content or information was provided, or the act of generating the content or information.

“Register”, to provide credentials or unique identifying information to a site in the form of, at a minimum, a user ID, or email address, and a password in order to post on such site.

“Site”, a website, online service, online application, mobile application or other server or software application that enables user access via an internet connection.

(b) An operator shall permit minor users to independently remove or, at a minimum, to request and obtain the removal of all posts by the minor user, while a minor, on the operator’s site.

(c) An operator shall provide notice to registered users that they may remove, or request and obtain the removal of, all posts made while a minor. Such notice shall provide clear instructions on how a minor user may remove, or request and obtain the removal of, such a post. Such notice shall also include a disclaimer that the removal of a post pursuant to this section may not ensure complete or comprehensive removal of the post if any of the circumstances described in subsections (d) and (e) apply.

(d) An operator shall not be required to erase or otherwise eliminate, or to enable erasure or elimination of, a post by a minor user, while a minor, in any of the following circumstances:

(1) Any other provision of federal or state law requires the operator to maintain the post.

(2) The operator anonymizes the post, such that the minor user cannot be individually identified.

(3) The minor user has received the notice and instructions required by subsection (c) but has failed to follow such instructions.

(4) The minor user has received compensation or other consideration for the post.

(e) An operator shall be considered compliant with this section; provided, that:

(1) The operator renders the post of a minor-user, posted while a minor, no longer visible to other users of the site, even if the post remains on the operator’s servers in some form; or

(2) Despite making the original post of the minor user, posted while a minor, invisible, such post remains visible because it was stored, republished or reposted by a third party on the operator’s site.

(f) This section shall not be construed to require an operator to collect or retain information about the age of any user.

(g) This section shall not be construed to limit the authority of a law enforcement agency to obtain any post from an operator as authorized by law or pursuant to an order of a court of competent jurisdiction.

(h) A minor user aggrieved by a violation of this section may notify the office of the attorney general. The attorney general may bring an action on behalf of the commonwealth to enforce the provisions of this section, and may promulgate rules or regulations necessary for enforcement.