Data protections

(a) Prohibition on child-Targeted advertising and the sale or sharing of data of minor users without parental consent (1) Targeted advertising A covered entity shall not engage in targeted advertising to a minor user based on the conversational content, inferred emotional state, or behavioral profiling collected during an interaction between such minor user and a companion AI chatbot. (2) Sale or sharing of data of minors A covered entity shall not sell, share, or otherwise transfer the data of a minor user to any third party without verifiable parental consent. (b) Documentation maintenance Each covered entity that makes available a tier III companion AI chatbot shall— (1) maintain documentation regarding— (A) the data utilized to train such chatbot; and (B) how such chatbot collects data from a minor user; and (2) require such chatbot to comply with requirements and safeguards regarding health privacy, as determined to be appropriate by the Commission. (c) Deletion of conversation history Each covered entity shall provide to a minor user— (1) a simple, accessible mechanism within a companion AI chatbot through which the minor user can delete the conversation history between the minor user and the companion AI chatbot; (2) clear instructions for using such mechanism; and (3) a confirmation within a reasonable period of time that the entity has deleted the conversation history of the minor user pursuant to paragraph (1).