Consumers at Least 13 Years of Age and Less Than 16 Years of Age

What it requires

A business with actual knowledge that it sells or shares the personal information of consumers aged 13 to 15 must have a documented, reasonable process that lets those consumers opt in to the sale or sharing themselves, following the § 7028 two-step opt-in. When one of them opts in, the business must tell them of their ongoing right to opt out at any time and how to do it.

Regulation text

(a) A business that has actual knowledge that it sells or shares the personal information of consumers at least 13 years of age and less than 16 years of age shall establish, document, and comply with a reasonable process for allowing such consumers to opt-in to the sale or sharing of their personal information, pursuant to section 7028. (b) When a business receives a request to opt-in to the sale or sharing of personal information from a consumer at least 13 years of age and less than 16 years of age, the business shall inform the consumer of their ongoing right to opt-out of sale/sharing at any point in the future and of the process for doing so pursuant to section 7026.

California Consumer Privacy Act / California Privacy Rights Act, § 7071Read the full section from California Privacy Protection Agency (CalPrivacy)