HOUSE DOCKET, NO. 3210        FILED ON: 1/18/2019

HOUSE  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  No. 350

The Commonwealth of Massachusetts

_________________

PRESENTED BY:

William M. Straus

_________________

To the Honorable Senate and House of Representatives of the Commonwealth of Massachusetts in General
Court assembled:

The undersigned legislators and/or citizens respectfully petition for the adoption of the accompanying bill:

An Act relative to the online collection of personal information from children and minors.

_______________

PETITION OF:

HOUSE DOCKET, NO. 3210        FILED ON: 1/18/2019

HOUSE  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  No. 350

[SIMILAR MATTER FILED IN PREVIOUS SESSION
SEE HOUSE, NO. 2827 OF 2017-2018.]

The Commonwealth of Massachusetts

_______________

In the One Hundred and Ninety-First General Court
(2019-2020)

_______________

An Act relative to the online collection of personal information from children and minors.

Whereas, The deferred operation of this act would tend to defeat its purpose, which is to safeguard children, therefore it is hereby declared to be an emergency law, necessary for the immediate preservation of the public safety.
 

Be it enacted by the Senate and House of Representatives in General Court assembled, and by the authority of the same, as follows:
 

SECTION 1.  The General Laws, as appearing in the 2014 Official Edition, are hereby amended by adding the following new chapter:-

Chapter 93L.  Online Collection of Personal Information from Children and Minors.

Section 1.  As used in this chapter, the following terms shall have the following meanings, unless the context clearly requires otherwise:-

“Child”, an individual under the age of 13.

“Minor”, an individual over the age of 12 and under the age of 16.

“Targeted marketing”, advertising or other efforts to market a product or service that are directed to a specific individual or device: (i) based on the personal information of the individual or a unique identifier of the device; and (ii) as a result of use by the individual, or access by the device, of a website, online service, online application, or mobile application.

Section 2. (a) An operator of a website, online service, online application, or mobile application directed to children, or an operator having actual knowledge that personal information being collected is from a child, shall not use, disclose to third parties, or compile personal information for targeted marketing purposes without verifiable parental consent. 

(b) An operator of a website, online service, online application, or mobile application directed to minors, or an operator having actual knowledge that personal information being collected is from a minor, shall not use, disclose to third parties, or compile personal information for targeted marketing purposes without the consent of the minor.

Section 3.  (a) An operator of a website, online service, online application, or mobile application directed to children or minors, or an operator having actual knowledge that geolocation information being collected is from a child or minor, shall provide clear and conspicuous notice in clear and plain language of any geolocation information the operator collects, how the operator uses such information, and whether the operator discloses such information. 

(b) Prior to collecting geolocation information from a child, an operator of a website, online service, online application, or mobile application shall obtain verifiable parental consent; provided, that the parent may at any time thereafter refuse to permit the further use or maintenance in retrievable form, or future collection, by the operator of geolocation information from the child. 

(c) Prior to collecting geolocation information from a minor, an operator of a website, online service, online application, or mobile application shall obtain affirmative express consent from such minor or the parent of such minor; provided, that the minor or parent may at any time thereafter refuse to permit the further use or maintenance in retrievable form, or future collection, by the operator of geolocation information from the minor.

(d) Upon request by a minor, the parent of a minor, or the parent of a child, an operator of a website, online service, online application, or mobile application shall provide to the person making the request: (i) a description of the geolocation information collected from the minor or child by the operator; and (ii) a means that is reasonable under the circumstances for the minor, parent of a minor, or parent of a child to obtain any geolocation information collected from the minor or child, if such information is available to the operator at the time the request is made; provided, that neither an operator nor the operator’s agent shall be held to be liable under any federal or state law for any disclosure made in good faith and following reasonable procedures in responding to a request for disclosure of geolocation information.  

(e) An operator of a website, online service, online application, or mobile application shall be prohibited from discontinuing service provided to a minor or child on the basis of a refusal by a minor, parent of a minor, or parent of a child to permit the further use or maintenance in retrievable form, or future online collection, of geolocation information from the minor or child to the extent that the operator is capable of providing such service without such information.  

Section 4.  The Office of Consumer Affairs and Business Regulation shall adopt rules and regulations necessary to implement this chapter.