Requires Social Media Research Center to research and make recommendations concerning addictive social media behaviors.*
What changed between versions
The definition of 'online service' was completely rewritten. It no longer covers any internet service that collects or processes personal data. Instead, it now requires four elements: accessible via the Internet, displays user-generated content, has an account holder in New Jersey, and allows interaction with other users' content as a central feature.
In the 25,000-user processing threshold, 'users' was replaced with 'consumers,' aligning terminology with the broader data protection statute.
New exclusions from 'online service': telecommunications services, broadband internet access services, email services, and the sale/delivery/use of physical products. These carve out major categories of internet services that were previously covered.
A new exclusion was added: an entity that solely provides a direct messaging service or product is not a covered online service provider.
The definition of 'covered online service provider' was changed so that the key criterion is now whether the service is 'reasonably likely to be accessed by a child or minor,' replacing the prior requirement about employing personally identifiable information to select, recommend, or prioritize media and determining purposes and means of data processing.
The revenue threshold now explicitly says 'annual gross revenue' (previously just 'gross revenue'), clarifying the measurement period.
The requirement that rules be adopted no later than 30 months after the effective date of the companion bill was removed, eliminating the regulatory deadline.