New York Child Data Protection Act: What Parents Should Know

Parents have gotten used to school portals, learning apps, game platforms and social media asking for one more permission. Often, it is not clear what happens to the information after your child clicks “I agree.”

That is the problem lawmakers are trying to address with the New York Child Data Protection Act (S7695). While bills can change as they move through the legislative process, the core idea is straightforward: children and teens should not have to trade their privacy to participate in modern life, school or online social spaces.

If you are wondering what this could mean for your family, here is a parent-focused guide to the likely protections, the warning signs to watch for now and practical steps you can take today, even before any new law takes effect.

Understanding the New York Child Data Protection Act (S7695)

The New York Child Data Protection Act (S7695) is proposed state legislation aimed at restricting how businesses collect, use, share and profit from data tied to minors. Child data protection bills typically focus on “covered data,” meaning information that can identify a child or be linked back to them, such as:

• Name, email address, phone number
• Precise location data
• Online identifiers like device IDs and cookies
• Photos, videos and voice recordings
• Behavioral data, including browsing history and in-app activity
• Inferences about a child, like interests, learning level or mental health signals

In plain terms, the New York Child Data Protection Act is meant to reduce the ability of platforms to track kids, build profiles about them and use that information for targeted advertising or other commercial purposes.

How it fits with existing laws

Even without S7695, several laws already affect children’s privacy:

• COPPA (Children’s Online Privacy Protection Act) is a federal law that generally requires parental consent before collecting personal information from children under 13 in many online services.
• FERPA (Family Educational Rights and Privacy Act) protects student education records held by schools that receive federal funding.
• New York’s SHIELD Act sets security and breach-notification requirements for private data.

The gap many parents feel is that COPPA is limited mainly to under-13 users and FERPA is focused on education records, not the broader online ecosystem. The New York Child Data Protection Act (S7695) is part of a wider national trend to cover teens more directly and to curb modern “surveillance” business models that depend on tracking and profiling.

Important note: I cannot check the latest legislative status or the most recent bill text from here. If you want the most current version of S7695, the New York State Senate’s bill page is the best official source. The guidance below focuses on the most common features of child data protection bills and how parents can respond.

Recognizing the Signs or When to Be Concerned

Even before any new protections, many families can spot when a service is collecting more data than it needs. Concerns are not just about “strangers online.” They are also about how a company uses your child’s data behind the scenes.

Common red flags

• A learning or tutoring app asks for access to contacts, photos or precise location with no clear reason
• Your child sees ads that feel “too specific,” based on private worries, school topics or late-night searches
• A platform makes it hard to turn off personalization or targeted ads
• The privacy policy is written so broadly that “partners” could mean almost anyone
• The service asks for a selfie, voice sample or government ID for routine use
• Opt-out links are buried, confusing or do not work

Age breakdown: what tends to matter most

Ages 5–10

• Risk often comes from “free” games and video apps that run frequent ad trackers
• Children may click through pop-ups quickly and accidentally agree to sharing

Ages 11–13

• Preteens start using social features: messaging, group chats, community posts
• Data collection expands to social graphs and behavior patterns

Ages 14–17

• Teens interact with targeted advertising at a level similar to adults
• Platforms can infer sensitive traits: stress, body image concerns, sexual orientation exploration, substance content exposure
• “College and career” tools may collect data about grades, interests and personality-style questionnaires

When to push harder

Consider stronger action if you notice:

• School-required tools that share data for marketing
• Apps collecting sensitive data (health, mental health, biometrics) without clear limits
• Platforms that nudge teens to keep accounts public or location services on
• A company refusing to explain what data it sells or shares

The Research or Science Behind It

Children and teens are not just “small adults” online. Their brains are still developing in ways that make data-driven design more powerful.

Research on adolescent development shows teens are more sensitive to social rewards, more likely to take risks in emotionally charged contexts and more influenced by peer feedback than adults. That matters because many platforms use data to predict what will keep a young person engaged, then feed them content and notifications designed to pull them back in.

When companies collect large amounts of behavioral data, they can:

• Personalize feeds to maximize time on the app
• Test which content triggers stronger reactions
• Target ads based on vulnerabilities and identity exploration
• Build long-term profiles that follow a child across devices and services

Long-term outcomes are still being studied, but many experts worry about how profiling can shape what kids see and how they see themselves. Even when harm is not intentional, the combination of tracking, targeted content and persuasive design can worsen sleep loss, distraction, compulsive use and exposure to harmful material.

That is why timing matters. Once data is collected, it can be difficult to retrieve, delete or control. A law like the New York Child Data Protection Act (S7695) aims to prevent risky collection and use in the first place, especially for minors who may not understand the trade-offs.

How to Access Support or Take Action

You do not have to wait for the New York Child Data Protection Act to take effect to protect your child’s privacy. Here are practical steps that work under current rules and can also prepare you for stronger rights if S7695 becomes law.

Step-by-step: what to do this week

1. Inventory the apps your child uses
   • Include school platforms, browser extensions, games, social media and “study help” tools.
2. Turn off ad tracking where you can
   • On phones and tablets, disable ad personalization and limit tracking settings.
   • In major platforms, look for “ads,” “privacy” and “data” settings.
3. Tighten location and microphone permissions
   • Use “While Using” for location or turn it off entirely unless needed.
   • Deny microphone and camera access unless there is a clear purpose.
4. Ask schools direct questions
   • What data does the vendor collect?
   • Is data used for targeted ads or shared with third parties?
   • How long is student data kept and how is it deleted?
   • Is there a signed student data privacy agreement?
5. Request deletion or access where available
   • Many companies offer data access and deletion tools.
   • Keep screenshots and copies of requests.
6. Document concerns
   • If you suspect misuse, save dates, settings and examples.
   • This helps if you need to complain to a regulator later.

Parent rights to know about

Depending on the service and context, parents may have rights through:

• FERPA for school-held education records
• COPPA for online services directed to children under 13
• Platform-specific privacy tools, including opt-outs and deletion requests
• State consumer protection laws enforced by the New York attorney general

Timeline expectations

• School privacy questions can take days to weeks to resolve, especially in large districts.
• Vendor data requests often take time. Save confirmation emails and follow up.
• If S7695 or a similar law passes, there may be a delayed effective date to give companies time to comply.

What Happens Next or Transition Planning

If the New York Child Data Protection Act (S7695) advances, parents can expect clearer boundaries for child data and more straightforward controls. In many child privacy proposals, “what happens next” includes some combination of:

• Limits on targeted advertising to minors
• Stronger requirements to minimize data collection
• Restrictions on selling or sharing minors’ data
• Clearer rules for obtaining meaningful consent
• Enforcement through state agencies, often the attorney general

School transitions and planning

For parents navigating school supports, privacy often comes up during transitions:

• Preschool to elementary: new learning platforms, parent portals and assessment tools
• Middle school: more student accounts, independent device use, group communication tools
• High school: college and career platforms, scholarship tools and test prep apps

If your child has an IEP or 504 plan, ask how disability-related information is stored, who can access it and whether any vendors process sensitive data. Request that accommodations information be shared only with staff who need it and that online tools follow the district’s privacy standards.

Long-term perspective

A strong child data law can help, but it will not eliminate every risk. The most effective approach is layered:

• Stronger legal guardrails
• Better school procurement policies
• Family-level settings and habits
• Ongoing conversations with kids about privacy and persuasion online

Frequently Asked Questions (FAQ)

What is the New York Child Data Protection Act (S7695)?
The New York Child Data Protection Act (S7695) is proposed legislation intended to limit how businesses collect, use and share data connected to minors. It is designed to reduce tracking, profiling and monetization of kids’ information.

Does the New York Child Data Protection Act cover teens or only young children?
Many modern child privacy proposals aim to protect both children and teens, not just kids under 13. Check the latest S7695 text for the exact age range because definitions can change during the legislative process.

How is this different from COPPA?
COPPA is a federal law focused mainly on children under 13 and parental consent in certain online services. The New York Child Data Protection Act is generally discussed as a broader approach that may limit uses like targeted advertising and profiling for minors.

What happens if my child’s school requires an app that collects too much data?
Start by asking the district what data the vendor collects, whether it is used for advertising and what contract limits exist. If you are not satisfied, ask about alternative access or comparable tools that meet privacy expectations.

Is it free to request my child’s data be deleted?
Many companies offer free deletion tools, though the process can be confusing. For school records, FERPA requests are generally free, but districts may have procedures for identity verification and response timelines.

When should I be most concerned about targeted ads?
Be more concerned when ads appear related to sensitive topics like mental health, body image, sexuality, substances or school struggles. That can be a sign that a platform is using behavioral data or inferences tied to your child.

How can I report a child data privacy concern in New York?
You can document what happened, save evidence and consider filing a complaint with the New York State Office of the Attorney General or the Federal Trade Commission. If it involves a school vendor, also report it to your district’s privacy or technology office.

Why This Matters for Parents

Even small pieces of information can add up to a detailed profile of your child: what they watch, when they sleep, what they struggle with at school and what they feel insecure about. The New York Child Data Protection Act (S7695) reflects a growing push to treat children’s privacy as a safety issue, not a personal preference. For parents, the stakes are practical: fewer manipulative ads, fewer hidden profiles and more control over tools your kids must use for school and everyday life.

References

Centers for Disease Control and Prevention: Youth Risk Behavior Surveillance System
Federal Trade Commission: Children’s Online Privacy Protection Rule (COPPA)
U.S. Department of Education: Family Educational Rights and Privacy Act (FERPA) Overview
National Institute of Mental Health: The Teen Brain and Development
New York State Office of the Attorney General: Data Security and Privacy Guidance
Parent Center Hub: IEPs and 504 Plans Overview for Families