Summary

Prohibits covered online platforms from allowing users known to be under age 16 to create or keep accounts, requires platforms to find and remove known minor accounts on a set timetable, and mandates deletion of those minors' personal data while allowing limited data portability. Gives the Federal Trade Commission authority to enforce the rule as an unfair or deceptive practice and permits state attorneys general to sue in certain circumstances. The main compliance deadlines include account identification within 60 days, notification within 180 days, and termination soon after notification, with the law generally taking effect one year after enactment.

• Bans covered platforms from allowing accounts for users known to be under age 16.
• Requires platforms to identify known minor accounts within 60 days and notify those users within 180 days of enactment.
• Platforms must terminate notified minor accounts within 30 days and immediately delete the minor's personal data.
• Platforms must provide terminated minors a copy of their personal data on request (readable and portable formats), subject to technical feasibility and licensing limits.
• Violations are treated as unfair or deceptive practices under the FTC Act; the FTC has enforcement authority and remedies.
• State attorneys general may bring parens patriae suits but must notify the FTC and the FTC can intervene; federal actions can preclude concurrent state actions.
• The substantive requirements take effect generally one year after enactment.
• The law preempts state or local laws that relate to its requirements.
• Definitions clarify covered platforms, "minor" as under 16, and a knowledge standard of actual knowledge or willful disregard.