Notices to Consumers Less Than 16 Years of Age

What it requires

A business subject to the under-13 or 13-to-15 opt-in rules in §§ 7070 and 7071 must describe those processes in its privacy policy. A business that targets its offers only at consumers under 16 and never sells or shares their personal information without the required opt-in consent does not have to provide the Notice of Right to Opt-out of Sale/Sharing.

Regulation text

(a) A business subject to sections 7070 and/or 7071 shall include a description of the processes set forth in those sections in its privacy policy. (b) A business that exclusively targets offers of goods or services directly to consumers under 16 years of age and does not sell or share the personal information without the consent of consumers at least 13 years of age and less than 16 years of age, or the consent of their parent or guardian for consumers under 13 years of age, is not required to provide the Notice of Right to Opt-out of Sale/Sharing.

California Consumer Privacy Act / California Privacy Rights Act, § 7072Read the full section from California Privacy Protection Agency (CalPrivacy)