What's Happening?
New Jersey has enacted a new Age Appropriate Design Code (AADC), known as the New Jersey Kids Code Act, which is set to take effect on September 1, 2027. This legislation is notable for its broad scope, applying not only to online services specifically
directed at children but also to those 'reasonably likely to be accessed by a child or minor.' This broader definition includes online services where at least 2% of the audience consists of individuals aged 2 through 17. The act mandates stringent privacy settings, requiring online service providers to configure default privacy settings for minors to the highest level of privacy. Key requirements include prohibiting the display of a minor’s account or content to adults (unless specific conditions are met), restricting direct messaging between minors and adults, disabling search engine indexing of minor accounts, and limiting interaction counts. Additionally, the law imposes advertising limitations, prohibiting targeting minors with ads for specific harmful products and banning the use of 'dark patterns.'
Why It's Important?
This legislation marks a significant step in online child protection within the U.S., potentially impacting a wide array of businesses that operate online and have users in New Jersey. Unlike previous AADCs, New Jersey's law extends its reach to many online services that may not have previously considered themselves primarily child-focused. The stringent privacy and data usage requirements will necessitate substantial changes in how online service providers design their platforms, manage user data, and implement advertising strategies. Businesses will need to invest in robust age verification mechanisms and privacy-by-design principles to comply. The law also introduces a private right of action, allowing minors or their parents to sue for damages, including $5,000 per violation or treble damages, whichever is greater, significantly increasing the legal risk for non-compliance. This could set a precedent for other states to adopt similar, broader child online protection laws.
What's Next?
Online service providers conducting business in New Jersey will need to begin preparing for the September 1, 2027, effective date. This preparation will involve a comprehensive review of their current privacy policies, data handling practices, and platform design to ensure compliance with the new requirements. Companies will likely need to develop or enhance age-gating mechanisms, reconfigure default privacy settings, and implement new tools for reporting harms and managing algorithmic recommendations for minor users. Legal and technical teams will be crucial in navigating these changes. The New Jersey Attorney General is empowered to bring actions against violators under the Consumer Fraud Act, and the threat of private lawsuits will likely drive proactive compliance efforts. The broad scope of this act may also influence legislative discussions in other states considering similar protections for children online.
Beyond the Headlines
The New Jersey Kids Code Act highlights a growing national concern regarding children's online safety and privacy. The inclusion of the 'reasonably likely to be accessed by a child or minor' standard reflects a legislative shift towards holding online platforms more accountable for the indirect impact of their services on younger users. This could lead to a broader re-evaluation of how online content and services are designed and delivered, pushing for a more child-centric approach across the digital landscape. The emphasis on preventing 'compulsive use' and limiting algorithmic recommendations for minors also touches upon the ethical implications of technology design and its potential effects on developing minds. This law could foster innovation in privacy-enhancing technologies and user-friendly parental controls, ultimately shaping a safer digital environment for the next generation.
