<section number="13-71-204"><effdate>10/1/2024</effdate><histories><history>Enacted by Chapter <modchap sess="2024GS">206</modchap>, 2024 General Session</history><modyear>2024</modyear></histories><catchline>Parental consent -- Data privacy for Utah minor accounts.</catchline><subsection number="13-71-204(1)">A social media company may not allow a Utah minor account holder to change the default data privacy setting described in Subsection <xref depth="4" refnumber="13-71-202(1)">13-71-202(1)</xref> without first obtaining verifiable parental consent.</subsection><subsection number="13-71-204(2)">A social media company's terms of service related to a Utah minor account holder shall be presumed to include an assurance of confidentiality for the Utah minor account holder's personal information.</subsection><subsection number="13-71-204(3)">The presumption of confidentiality in Subsection (2) may be overcome if the social media company obtains verifiable parental consent.</subsection><subsection number="13-71-204(4)">The presumption of confidentiality in Subsection (2) does not apply to a social media company's internal use or external sharing of a Utah minor account holder's personal information if the use or sharing is necessary to:<subsection number="13-71-204(4)(a)">maintain or analyze functioning of the social media service;</subsection><subsection number="13-71-204(4)(b)">enable network communications;</subsection><subsection number="13-71-204(4)(c)">personalize the user's experience based on the user's age and location;</subsection><subsection number="13-71-204(4)(d)">display a username chosen by the Utah minor account holder;</subsection><subsection number="13-71-204(4)(e)">obtain age assurance information as required under Section <xref depth="3" refnumber="13-71-201">13-71-201</xref>; or</subsection><subsection number="13-71-204(4)(f)">comply with the requirements of this chapter or other federal or state laws.</subsection></subsection></section>