(1) A person may not send, cause to be sent, or conspire with a third party to send a communication to a contact point or domain that has been registered for more than 30 calendar days with the division under Section 13-39-201 if the communication:

1. (a) has the primary purpose of advertising or promoting a product or service that a minor is prohibited by law from purchasing; or
2. (b) contains or has the primary purpose of advertising or promoting material that is harmful to minors, as defined in Section 76-10-1201.

(4)

1. (a) Notwithstanding Subsection (1), a person may send a communication to a contact point if, before sending the communication, the person sending the communication receives consent from an adult who controls the contact point.

2. (b) Any person who proposes to send a communication under Subsection (4)(a) shall:

   1. (i) verify the age of the adult who controls the contact point by inspecting the adult's government-issued identification card in a face-to-face transaction;
   2. (ii) obtain a written record indicating the adult's consent that is signed by the adult;

   3. (iii) include in each communication:

      1. (A) a notice that the adult may rescind the consent; and
      2. (B) information that allows the adult to opt out of receiving future communications; and
   4. (iv) notify the division that the person intends to send communications under this Subsection (4).
3. (c) The division shall implement rules to verify that a person providing notification under Subsection (4)(b)(iv) complies with this Subsection (4).