Companies Turn to State-Specific Responses to Kids’ Privacy Laws

Companies are pivoting to a state-by-state approach to comply with a growing mix of ways that states are applying mandates to protect kids’ privacy online.

Colorado and Montana on Wednesday became the latest states to change how they regulate the processing of data belonging to anyone 18 years and younger. The updates to their state privacy statutes create stronger consent requirements, mandate new risk assessments and mitigating measures, and curtail how companies can process or sell kids’ data.

The amendments come as states such as Vermont, Nebraska, and Arkansas continue to pass new laws restricting how companies can collect and ...