Children & Minors Online Safety
New Jersey Kids Code Act (New Jersey Age-Appropriate Design Code)
New Jersey · Not yet effective — signed Aug 11, 2026, effective Sep 1, 2027 (the act runs from "the first day of the 13th month following" enactment)
Newly enacted design code, not yet in force, and broader in reach than most: it applies to a "covered online service provider" whose service is reasonably likely to be accessed by a covered child (under 13) or covered minor (13–17) and that either has annual gross revenue above $25,000,000 (inflation-adjusted biennially from Jan 1, 2029) or annually processes personal data of 25,000+ consumers or households. Duties include defaulting minors' privacy settings to the highest level, blocking adult-to-minor direct messaging unless the adult is a parent or the minor opts in, not displaying a minor's location to other users by default, and no notifications by default or between 10 p.m. and 6 a.m. The enforcement design is the part to watch: a violation is an unlawful practice under the Consumer Fraud Act AND the act carries its own private right of action — an injured minor may sue directly, and a parent or the Attorney General may sue on the minor's behalf, with $5,000 per violation or treble damages (whichever is greater) for negligent or worse violations, plus punitive damages for reckless or knowing ones. Signed Aug 11, 2026 as one of three kids' online-safety bills; the other two fund research rather than impose duties. Thresholds, duties, enforcement and the effective-date formula were read off the enacted third-reprint bill text, but the eventual N.J. Stat. section numbers were not confirmed from a primary source — reconfirm the citation before quoting it.
This is a general reference, not legal advice or a determination that this law applies to your specific business. Run the full questionnaire to check against your actual revenue, data volume, and data types.