Extract to table

Before collecting, using, or disclosing personal information from a child under thirteen, the operator must obtain verifiable consent from the child's parent

The operator must provide direct notice to parents regarding the information collected, the purposes of collection, and the parent's rights

The operator must post a clear, prominent, and complete privacy policy describing its information practices with respect to children

The operator must establish and maintain reasonable procedures to protect the confidentiality, security, and integrity of personal information collected from children

Upon request from a parent, the operator must delete the child's personal information

The DPIA must be maintained by the business and made available to the California Attorney General upon request