This web page documents state laws in a limited number of areas: website privacy policies, privacy of online book downloads and reader browsing information, personal information held by Internet service providers, online marketing of certain products directed to minors, and employee email monitoring. Additional digital privacy resources also are available from NCSL. In addition, other types of state laws address privacy issues and can also apply to online activities.
Children's Online Privacy
Globe with keyboardCalifornia
Calif. Bus. & Prof. Code §§ 22580-22582
California's Privacy Rights for California Minors in the Digital World Act, also called …show more content…
Bus. & Prof. Code § 22575
Requires the operator of a commercial web site or online service to disclose in its privacy policy how it responds to a web browser 'Do Not Track' signal or similar mechanisms providing consumers with the ability to exercise choice about online tracking of their personal information across sites or services and over time. It also requires the operator to disclose whether third parties are or may be conducting such tracking on the operator’s site or service.
Calif. Bus. & Prof. Code §§ 22575-22578
California's Online Privacy Protection Act requires an operator, defined as a person or entity that collects personally identifiable information from California residents through an Internet Web site or online service for commercial purposes, to post a conspicuous privacy policy on its Web site or online service (which may include mobile apps) and to comply with that policy. The law, among other things, requires that the privacy policy identify the categories of personally identifiable information that the operator collects about individual consumers who use or visit its Web site or online service and third parties with whom the operator may share the …show more content…
Pennsylvania
18 Pa. C.S.A. § 4107(a)(10)
Pennsylvania includes false and misleading statements in privacy policies published on Web sites or otherwise distributed in its deceptive or fraudulent business practices statute.
Notice of Monitoring of Employee E-mail Communications and Internet Access
Connecticut and Delaware require employers to give notice to employees prior to monitoring e-mail communications or Internet access.
Colorado and Tennessee require states and other public entities to adopt a policy related to monitoring of public employees' e-mail.
Connecticut Gen. Stat.§ 31-48d
Employers who engage in any type of electronic monitoring must give prior written notice to all employees, informing them of the types of monitoring which may occur.
If an employer has reasonable grounds to believe that employees are engaged in illegal conduct and electronic monitoring may produce evidence of this misconduct, the employer may conduct monitoring without giving prior written