I 
119TH CONGRESS 
1ST SESSION H. R. 6291 
To amend the Children’s Online Privacy Protection Act of 1998 to strengthen 
protections relating to the online collection, use, and disclosure of per-
sonal information of children and teens, and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
NOVEMBER 25, 2025 
Mr. WALBERG (for himself and Ms. LEE of Florida) introduced the following 
bill; which was referred to the Committee on Energy and Commerce 
A BILL 
To amend the Children’s Online Privacy Protection Act of 
1998 to strengthen protections relating to the online 
collection, use, and disclosure of personal information 
of children and teens, and for other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE; TABLE OF CONTENTS. 
(a) SHORT TITLE.—This Act may be cited as the 
‘‘Children and Teens’ Online Privacy Protection Act’’. 
(b) TABLE OF CONTENTS.—The table of contents for 
this Act is as follows: 
Sec. 1. Short title; table of contents. 
Sec. 2. Amendments to Children’s Online Privacy Protection Act of 1998. 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6211
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
Sec. 3. Reports. 
Sec. 4. Severability. 
SEC. 2. AMENDMENTS TO CHILDREN’S ONLINE PRIVACY 
PROTECTION ACT OF 1998. 
(a) DEFINITIONS.—Section 1302 of the Children’s 
Online Privacy Protection Act of 1998 (15 U.S.C. 6501) 
is amended— 
(1) by amending paragraph (2) to read as fol-
lows: 
‘‘(2) OPERATOR.—The term ‘operator’— 
‘‘(A) means any person— 
‘‘(i) who, for commercial purposes, op-
erates or provides a website, an online 
service, an online application, or a mobile 
application; and 
‘‘(ii) who— 
‘‘(I) collects or maintains, either 
directly or through a service provider, 
personal information of users of the 
website, service, or application; 
‘‘(II) allows another person to 
collect personal information directly 
from users of the website, service, or 
application (in which case, the oper-
ator is deemed to have collected the 
information); or 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
‘‘(III) allows users of the website, 
service, or application to publicly dis-
close personal information (in which 
case, the operator is deemed to have 
collected the information); and 
‘‘(B) does not include any organization de-
scribed in section 501(c)(3) of the Internal Rev-
enue Code of 1986 and exempt from taxation 
under section 501(a) of such Code.’’; 
(2) in paragraph (4)— 
(A) by amending subparagraph (A) to read 
as follows: 
‘‘(A) the release of personal information 
collected from a child or teen by an operator for 
any purpose, except if the personal information 
is provided to a person other than an operator 
who— 
‘‘(i) provides support for the internal 
operations of the website, online service, 
online application, or mobile application of 
the operator, excluding any activity relat-
ing to individual-specific advertising pro-
vided to children or teens; and 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
‘‘(ii) does not disclose or use the per-
sonal information for any other purpose; 
and’’; and 
(B) in subparagraph (B)— 
(i) in the matter preceding clause 
(i)— 
(I) by inserting ‘‘or teen’’ after 
‘‘child’’ each place the term appears; 
(II) by striking ‘‘website or on-
line service’’ and inserting ‘‘website, 
online service, online application, or 
mobile application’’; and 
(III) by striking ‘‘actual knowl-
edge’’ and inserting ‘‘knowledge’’; and 
(ii) in clause (i), by striking ‘‘a 
website’’ and inserting ‘‘such a website, 
service, or application’’; 
(3) by amending paragraph (8) to read as fol-
lows: 
‘‘(8) PERSONAL INFORMATION.— 
‘‘(A) IN GENERAL.—The term ‘personal in-
formation’ means individually identifiable infor-
mation about an individual collected online, in-
cluding— 
‘‘(i) a first and last name; 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
‘‘(ii) a home or other physical address, 
including a street name and a name of a 
city or town; 
‘‘(iii) an e-mail address; 
‘‘(iv) a telephone number; 
‘‘(v) a Social Security number; 
‘‘(vi) a persistent identifier that can 
be used to recognize a specific child or teen 
over time and across different websites, on-
line services, online applications, or mobile 
applications, that— 
‘‘(I) includes— 
‘‘(aa) a customer number 
held in a cookie; 
‘‘(bb) an Internet Protocol 
(IP) address; 
‘‘(cc) a processor or device 
serial number; and 
‘‘(dd) a unique device identi-
fier; and 
‘‘(II) excludes an identifier that 
is used by an operator solely for pro-
viding support for the internal oper-
ations of a website, online service, on-
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
line application, or mobile application 
of the operator; 
‘‘(vii) a photograph, video, or audio 
file that contains the image or voice of a 
child or teen; 
‘‘(viii) geolocation information; 
‘‘(ix) information generated from the 
measurement or technological processing of 
the biological, physical, or physiological 
characteristics of an individual, includ-
ing— 
‘‘(I) fingerprints; 
‘‘(II) voice prints; 
‘‘(III) iris or retina imagery 
scans; 
‘‘(IV) facial templates; 
‘‘(V) 
deoxyribonucleic 
acid 
(DNA) information; and 
‘‘(VI) gait; 
‘‘(x) information linked or reasonably 
linkable to a child or teen or a parent of 
a child or teen (including any unique iden-
tifier) that an operator collects online from 
the child or teen and combines with an 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
identifier described in this subparagraph; 
and 
‘‘(xi) any other identifier that the 
Commission determines permits the phys-
ical or online contacting of an individual. 
‘‘(B) EXCLUSION.—The term ‘personal in-
formation’ does not include an audio file that 
contains the voice of a child or teen if the oper-
ator— 
‘‘(i) does not request information via 
voice that would otherwise be considered 
personal information under this paragraph; 
‘‘(ii) provides clear notice in the pri-
vacy policy of a website, online service, on-
line application, or mobile application of 
the operator regarding— 
‘‘(I) the collection and use of 
such an audio file; and 
‘‘(II) the deletion policy relating 
to such an audio file; 
‘‘(iii) only uses the voice contained in 
the audio file as a replacement for written 
words to perform a task or otherwise en-
gage with such website, service, or applica-
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
tion, including by conducting a search or 
fulfilling a verbal instruction or request; 
‘‘(iv) only maintains the audio file 
during the period necessary to complete 
the relevant task or engagement; 
‘‘(v) does not make any other use of 
the audio file during such period; and 
‘‘(vi) deletes the audio file at the end 
of such period. 
‘‘(C) SUPPORT FOR THE INTERNAL OPER-
ATIONS OF A WEBSITE, ONLINE SERVICE, ON-
LINE APPLICATION, OR MOBILE APPLICATION.— 
‘‘(i) IN
GENERAL.—For purposes of 
subparagraph (A)(vi)(II), the term ‘sup-
port for the internal operations of a 
website, online service, online application, 
or mobile application’ means the activities 
necessary to such website, service, or appli-
cation to— 
‘‘(I) maintain or analyze func-
tioning; 
‘‘(II) perform network commu-
nications; 
‘‘(III) authenticate users; 
‘‘(IV) personalize content; 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
‘‘(V) serve contextual advertising 
to users (if any persistent identifier is 
only used as necessary for technical 
purposes to serve the contextual ad-
vertisement or cap the frequency of 
contextual advertising); 
‘‘(VI) protect— 
‘‘(aa) the integrity of the 
website, service, or application; or 
‘‘(bb) the personal informa-
tion or security of users; 
‘‘(VII) ensure compliance with 
Federal or State law; and 
‘‘(VIII) fulfill a request of a child 
or teen under subparagraph (A), (B), 
or (C) of section 1303(b)(2). 
‘‘(ii) CONDITION.—Except as per-
mitted under clause (i), information col-
lected through the activities described in 
clause (i) may not be used or disclosed to 
contact an individual (including through 
individual-specific advertising provided to 
children or teens), to amass a profile on an 
individual, in connection with processes 
that encourage or prompt use of a website 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
or online service, or for any other pur-
pose.’’; 
(4) by amending paragraph (9) to read as fol-
lows: 
‘‘(9) 
VERIFIABLE
CONSENT.—The 
term 
‘verifiable consent’ means any reasonable effort (tak-
ing into consideration available technology) by an 
operator, including a request for authorization for 
future collection, use, and disclosure of personal in-
formation, to ensure that a parent of a child (in the 
case of a child) or a teen (in the case of a teen)— 
‘‘(A) receives direct notice of the collection, 
use, and disclosure practices of the operator 
with respect to personal information; and 
‘‘(B) before the personal information of the 
child or teen is collected, freely and unambig-
uously authorizes— 
‘‘(i) the collection, use, and disclosure, 
as applicable, of the personal information; 
and 
‘‘(ii) any subsequent use of the per-
sonal information.’’; 
(5) in paragraph (10)— 
(A) in the heading, by striking ‘‘WEBSITE 
OR ONLINE SERVICE DIRECTED TO CHILDREN’’ 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00010
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
and inserting ‘‘WEBSITE, ONLINE SERVICE, ON-
LINE
APPLICATION, OR
MOBILE
APPLICATION 
DIRECTED TO CHILDREN’’; 
(B) by striking ‘‘website or online service 
directed to children’’ each place it appears and 
inserting ‘‘website, online service, online appli-
cation, or mobile application directed to chil-
dren’’; 
(C) by striking ‘‘commercial website or on-
line service’’ each place it appears and inserting 
‘‘website, online service, online application, or 
mobile application’’; and 
(D) by adding at the end the following new 
subparagraph: 
‘‘(C) RULE
OF
CONSTRUCTION.—In con-
sidering whether a website, online service, on-
line application, or mobile application, or a por-
tion thereof, is directed to children, the Com-
mission shall apply a totality of circumstances 
test considering competent and reliable evidence 
regarding the intended audience of the website, 
service, or application.’’; and 
(6) by adding at the end the following: 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00011
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
‘‘(13) ONLINE APPLICATION.—The term ‘online 
application’ means an internet-connected software 
program. 
‘‘(14) MOBILE APPLICATION.—The term ‘mo-
bile application’ means a software program that 
runs on the operating system of— 
‘‘(A) a cellular telephone; 
‘‘(B) a tablet computer; or 
‘‘(C) a similar portable computing device 
that transmits data over a wireless connection. 
‘‘(15) GEOLOCATION INFORMATION.—The term 
‘geolocation information’ means information suffi-
cient to identify a street name and name of a city 
or town. 
‘‘(16) TEEN.—The term ‘teen’ means an indi-
vidual over the age of 12 and under the age of 17. 
‘‘(17) HIGH-IMPACT SOCIAL MEDIA COMPANY.— 
The term ‘high-impact social media company’ means 
a website, online service, online application, or mo-
bile application of an operator that— 
‘‘(A) generates $3,000,000,000 or more in 
annual revenue, including any revenue gen-
erated by any affiliate of such operator; 
‘‘(B) has 300,000,000 or more monthly ac-
tive users for not fewer than 3 of the preceding 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00012
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
12 months on the website, online service, online 
application, or mobile application of such oper-
ator; and 
‘‘(C) constitutes an online product or serv-
ice that is primarily used by users to access or 
share user-generated content. 
‘‘(18) KNOWLEDGE.—The term ‘knowledge’ 
means— 
‘‘(A) with respect to a high-impact social 
media company, the operator has actual knowl-
edge, or willfully disregarded information that 
would lead a reasonable and prudent person to 
determine, that a user is a child or teen; and 
‘‘(B) with respect to an operator that does 
not meet the requirements of subparagraph (A), 
actual knowledge. 
‘‘(19) INDIVIDUAL-SPECIFIC
ADVERTISING
TO 
CHILDREN OR TEENS.— 
‘‘(A) IN GENERAL.—The term ‘individual- 
specific advertising to children or teens’ means 
advertising or any other effort to market a 
product or service that is directed to a child or 
teen based on— 
‘‘(i) personal information of— 
‘‘(I) the child or teen; or 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00013
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
‘‘(II) a group of children or teens 
who are similar in sex, age, household 
income level, race, or ethnicity to the 
child or teen to whom the product or 
service is marketed; or 
‘‘(ii) profiling of such child or teen or 
group of children or teens. 
‘‘(B) EXCLUSIONS.—The term ‘individual- 
specific advertising to children or teens’ does 
not include— 
‘‘(i) advertising or marketing to an in-
dividual or to a device of an individual in 
response to a request by the individual for 
information or feedback, such as a search 
query by a child or teen; 
‘‘(ii) contextual advertising, including 
if an advertisement is displayed based on 
the content of the website, online service, 
online application, or mobile application on 
which the advertisement appears and does 
not vary based on personal information of 
an individual who views the advertisement; 
‘‘(iii) processing personal information 
solely for measuring or reporting adver-
tising or content performance, reach, or 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00014
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
frequency, including through independent 
measurement; or 
‘‘(iv) advertising or marketing di-
rected to a device used by both adult and 
child or teen members of a household, if 
such advertising or marketing is directed 
only to services accessible through an adult 
user profile. 
‘‘(C) RULE OF CONSTRUCTION.—Nothing 
in subparagraph (A) may be construed to pro-
hibit an operator with knowledge that a user is 
a child or teen from delivering advertising or 
marketing that is age-appropriate and intended 
for a child or teen audience, if the operator 
does not use any personal information other 
than whether the user is a child or teen. 
‘‘(20) EDUCATIONAL
AGENCY
OR
INSTITU-
TION.—The term ‘educational agency or institution’ 
means— 
‘‘(A) a State educational agency or a local 
educational agency (as such terms are defined 
in section 8101 of the Elementary and Sec-
ondary Education Act of 1965 (20 U.S.C. 
7801)); and 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00015
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
‘‘(B) an elementary school or secondary 
school (as such terms are defined in section 
8101 of the Elementary and Secondary Edu-
cation Act of 1965 (20 U.S.C. 7801)).’’. 
(b) ONLINE COLLECTION, USE, DISCLOSURE, AND 
DELETION OF PERSONAL INFORMATION OF CHILDREN 
AND TEENS.—Section 1303 of the Children’s Online Pri-
vacy Protection Act of 1998 (15 U.S.C. 6502) is amend-
ed— 
(1) by striking the heading and inserting the 
following: ‘‘ONLINE COLLECTION, USE, DISCLO-
SURE, AND DELETION OF PERSONAL INFORMA-
TION OF CHILDREN AND TEENS.’’; 
(2) in subsection (a)— 
(A) by amending paragraph (1) to read as 
follows: 
‘‘(1) IN GENERAL.—It is unlawful for an oper-
ator of a website, online service, online application, 
or mobile application directed to children or for any 
operator of a website, online service, online applica-
tion, or mobile application with knowledge that a 
user of such website, service, or application is a child 
or teen— 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00016
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
‘‘(A) to collect personal information from a 
child or teen in a manner that violates the regu-
lations promulgated under subsection (b); 
‘‘(B) to collect, use, disclose to third par-
ties, or maintain personal information of a child 
or teen for the purpose of providing individual- 
specific advertising to children or teens (or to 
allow another person to collect, use, disclose, or 
maintain such information for such purpose); 
‘‘(C) to collect personal information of a 
child or teen, except if the collection of the per-
sonal information is— 
‘‘(i) consistent with the context of a 
particular transaction or service or the re-
lationship of the child or teen with the op-
erator, including any collection necessary 
to fulfill a transaction or provide a product 
or service requested by the child or teen; or 
‘‘(ii) authorized or required by Fed-
eral or State law; 
‘‘(D) to retain the personal information of 
a child or teen for longer than is reasonably 
necessary to fulfill a transaction or provide a 
service requested by the child or teen, except as 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00017
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
authorized or required by Federal or State law; 
or 
‘‘(E) with respect to the personal informa-
tion of a child or teen— 
‘‘(i) to store such information in a 
covered nation (as defined in section 
4872(f) of title 10, United States Code), 
unless notice of such storage is provided to 
the parent of such child or to such teen, as 
the case may be; 
‘‘(ii) to transfer such information to 
such a nation, unless notice of such trans-
fer is provided to the parent of such child 
or to such teen, as the case may be; or 
‘‘(iii) to provide such a nation with ac-
cess to such information, unless notice of 
such access is provided to the parent of 
such child or to such teen, as the case may 
be.’’; and 
(B) in paragraph (2)— 
(i) in the heading, by striking ‘‘PAR-
ENT’’ and inserting ‘‘PARENT OR TEEN’’; 
(ii) by striking ‘‘an operator of such a 
website or online service nor the operator’s 
agent’’ and inserting ‘‘an operator of such 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00018
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
a website, service, or application nor an 
agent of such an operator’’; and 
(iii) 
by 
striking 
‘‘subsection 
(b)(1)(B)(iii) to the parent of a child’’ and 
inserting ‘‘subsection (b)(1)(B)(iv) to a 
parent of a child or under subsection 
(b)(1)(C)(iv) to a teen’’; 
(3) in subsection (b)— 
(A) in paragraph (1)— 
(i) in subparagraph (A)— 
(I) in the matter preceding clause 
(i), by striking ‘‘the operator of any 
website’’ and all that follows through 
‘‘from a child’’ and inserting ‘‘an op-
erator of a website, online service, on-
line application, or mobile application 
directed to children or that has knowl-
edge that a user is a child or teen’’; 
(II) in clause (i)— 
(aa) by striking ‘‘notice on 
the website’’ and inserting ‘‘clear 
and conspicuous notice on the 
website, service, or application’’; 
(bb) by inserting ‘‘or teens’’ 
after ‘‘children’’; 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00019
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
(cc) by striking ‘‘, and the 
operator’s disclosure practices’’ 
and inserting ‘‘, the disclosure 
practices of the operator’’; and 
(dd) by striking ‘‘; and’’ and 
inserting ‘‘, the rights and oppor-
tunities available to a parent of a 
child or teen and a teen under 
subparagraphs (B) and (C), and 
the procedures or mechanisms 
the operator uses to ensure that 
personal information is not col-
lected from children or teens (ex-
cept as permitted by the regula-
tions promulgated under this 
subsection);’’; 
(III) in clause (ii)— 
(aa) by striking ‘‘parental’’; 
(bb) by inserting ‘‘or teens’’ 
after ‘‘children’’; and 
(cc) by striking the semi-
colon at the end and inserting ‘‘; 
and’’; and 
(IV) by inserting after clause (ii) 
the following new clause: 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00020
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
‘‘(iii) to obtain verifiable consent from 
a parent of a child (in the case of a child) 
or from a teen (in the case of a teen) be-
fore using or disclosing personal informa-
tion of the child or teen for any purpose 
that is a material change from how the op-
erator uses such information or from the 
disclosure practices specified to the parent 
of the child or the teen under clause (i);’’; 
(ii) in subparagraph (B)— 
(I) in the matter preceding clause 
(i), by striking ‘‘that website or online 
service’’ and inserting ‘‘the operator’’; 
(II) in clause (i), by striking 
‘‘that operator’’ and inserting ‘‘the 
operator, the method by which the op-
erator obtains the personal informa-
tion, and the purposes for which the 
operator collects, uses, discloses, and 
retains the personal information’’ be-
fore the semicolon; 
(III) in clause (ii)— 
(aa) by inserting ‘‘to delete 
personal 
information 
collected 
from the child or content or in-
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00021
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
formation submitted by the child 
to a website, online service, on-
line application, or mobile appli-
cation of the operator and’’ after 
‘‘the opportunity at any time’’; 
and 
(bb) by striking ‘‘from that 
child; and’’ and inserting ‘‘of the 
child;’’; 
(IV) by redesignating clause (iii) 
as clause (iv) and inserting after 
clause (ii) the following new clause: 
‘‘(iii) the opportunity to challenge the 
accuracy of the personal information and, 
if the parent of the child establishes the in-
accuracy of the personal information, to 
have the inaccurate personal information 
corrected; and’’; and 
(V) in clause (iv), as so redesig-
nated, by striking ‘‘from that child;’’ 
and inserting ‘‘of the child, if such in-
formation is available to the operator 
at the time the parent makes the re-
quest;’’; 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00022
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
(iii) by redesignating subparagraphs 
(C) and (D) as subparagraphs (D) and 
(E), respectively; 
(iv) by inserting after subparagraph 
(B) the following new subparagraph: 
‘‘(C) require the operator, upon the re-
quest of a teen (or a parent of the teen) who 
has provided personal information to the oper-
ator, to provide to the teen or parent (upon au-
thentication of the teen or parent through rea-
sonable means)— 
‘‘(i) a description of the specific types 
of personal information collected from the 
teen by the operator, the method by which 
the operator obtains the personal informa-
tion, and the purposes for which the oper-
ator collects, uses, discloses, and retains 
the personal information; 
‘‘(ii) the opportunity at any time to 
delete personal information collected from 
the teen or content or information sub-
mitted by the teen to a website, online 
service, online application, or mobile appli-
cation of the operator; 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00023
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
‘‘(iii) the ability to refuse to permit 
the operator any further use or mainte-
nance, in retrievable form or online collec-
tion, of personal information of the teen; 
‘‘(iv) the opportunity to challenge the 
accuracy of the personal information and, 
if the teen or parent establishes the inaccu-
racy of the personal information, to have 
such inaccurate personal information cor-
rected; and 
‘‘(v) notwithstanding any other provi-
sion of law, a means that is reasonable 
under the circumstances for the teen or 
parent to obtain any personal information 
collected from the teen, if such information 
is available to the operator at the time the 
teen or parent makes the request;’’; 
(v) in subparagraph (D), as so redes-
ignated— 
(I) by striking ‘‘a child’s partici-
pation’’ and inserting ‘‘the participa-
tion of a child or teen’’; and 
(II) by inserting ‘‘or teen’’ after 
‘‘the child’’; and 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00024
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB
(vi) by amending subparagraph (E), 
as so redesignated, to read as follows: 
‘‘(E) require the operator— 
‘‘(i) to establish, implement, and 
maintain reasonable security practices to 
protect the confidentiality, integrity, and 
accessibility of personal information of 
children or teens collected by the operator; 
and 
‘‘(ii) to protect such personal informa-
tion against unauthorized access.’’; 
(B) in paragraph (2)— 
(i) in the matter preceding subpara-
graph (A), by striking ‘‘verifiable parental 
consent’’ and inserting ‘‘verifiable con-
sent’’; 
(ii) in subparagraph (A)— 
(I) by inserting ‘‘or teen’’ after 
‘‘collected from a child’’; 
(II) by inserting ‘‘or teen’’ after 
‘‘request from the child’’; and 
(III) by inserting ‘‘or teen or to 
contact another child or teen’’ after 
‘‘to recontact the child’’; 
(iii) in subparagraph (B)— 
VerDate Sep 11 2014 
00:25 Nov 26, 2025
Jkt 069200
PO 00000
Frm 00025
Fmt 6652
Sfmt 6201
E:\BILLS\H6291.IH
H6291
kjohnson on DSK7ZCZBW3PROD with $$_JOB