EdLaw
California — CAADCA (AB 2273), duties section (enforcement enjoined)
California's copy of the UK Children's Code for businesses providing online services likely to be accessed by children (under 18).
Litigation status — read first
Enforcement is subject to the NetChoice v. Bonta injunction (N.D. Cal. / 9th Cir.): the DPIA provisions were preliminarily enjoined on First Amendment grounds, and as at last_checked the operative duties remain unenforced pending the litigation. The text is curated because (a) the design expectations survive as the de-facto bar via the UK code, and (b) if the injunction narrows, duties revive on the statutory timetable. Verify the current litigation posture before treating any duty as live.
Applicability to EdTech
If revived, §1798.99.31 requires: DPIAs before launching features likely accessed by children, age estimation or applying high privacy to all users, high-privacy default settings, policy language children can understand, and prohibitions on dark patterns, detrimental use, and unnecessary geolocation — materially the same bar as the ICO code our UK surfaces already meet.
Contents
| Document | Covers |
|---|---|
| DPIA-AND-DUTIES.md | Civ. Code §1798.99.31 in full |
Related
- UK ICO Children's Code — the operative model
- AU Privacy Act s 26GC — the Australian sibling
Sources
Meta
Statute text reproduced verbatim from leginfo by tools/us-states/build_ca.py; verify re-checks every source paragraph. The enjoined status is a README-level annotation — the statutory text itself remains on the books.