Legislation

§ 899-jj. Protections for third-party operators. Sections eight
hundred ninety-nine-ff and eight hundred ninety-nine-gg of this article
shall not apply where a third-party operator is processing the personal
data of a covered user of another website, online service, online
application, mobile application, or connected device, or portion
thereof, provided that the third-party operator received reasonable
written representations that the covered user provided informed consent
for such processing, or:

1. the operator does not have actual knowledge that the covered user
is a minor; and

2. the operator does not have actual knowledge that the other website,
online service, online application, mobile application, or connected
device, or portion thereof, is primarily directed to minors.