An app store provider shall protect personal age verification data by doing both of the following:
- (1) Limiting the collection and processing to data necessary to: (i) verify a user’s age; (ii) obtain parental consent; or (iii) maintain compliance records.
- (2) Transmitting personal age verification data using industry-standard encryption protocols that ensure data integrity and data confidentiality.
(Act 2026-59, §6.)