Netchoice, LLC v. Bonta
A federal court partially blocked the California Age-Appropriate Design Code Act (CAADCA), which imposed strict data privacy obligations on businesses likely to be accessed by minors. The ruling halts enforcement of key provisions, including data impact assessments and default privacy settings for minors, pending further litigation.
Aforeworn detected this change in the US State Data-Privacy Laws space on July 7, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated High urgency. Multistate retailers, adtech/data brokers, SaaS platforms, and privacy consultants operating online services likely accessed by minors in California. should confirm how it applies to their specific situation before acting. There is a time constraint attached: Immediately; no specific deadline for compliance pause, but prepare for potential reinstatement if ruling is overturned.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors US State Data-Privacy Laws continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
Enforcement of CAADCA's core requirements (e.g., data impact assessments, heightened privacy defaults for minors, and restrictions on profiling) is temporarily blocked. However, other California privacy laws (CCPA/CPRA) remain in effect.
Who it affects
Multistate retailers, adtech/data brokers, SaaS platforms, and privacy consultants operating online services likely accessed by minors in California.
What you must do
Review current compliance measures for CAADCA; pause implementation of CAADCA-specific requirements but continue CCPA/CPRA compliance. Monitor for final ruling or legislative changes.
Deadline
Immediately; no specific deadline for compliance pause, but prepare for potential reinstatement if ruling is overturned.
Source: https://www.courtlistener.com/opinion/10807860/netchoice-llc-v-bonta/
Never miss a change like this again
Aforeworn watches US State Data-Privacy Laws around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in US State Data-Privacy Laws
- Brandon Briskin v. Shopify, Inc.
- Agency Information Collection Activities; Proposals, Submissions, and Approvals: Crash Reporting Sampling System, Non-Traffic Surveillance, and Special Study Data Collection
- FTC Requires Amazon to Pay $2.25 Million to Resolve Charges It Knowingly Violated the Fair Credit Reporting Act
- Client Alert: California Invasion of Privacy Act Reform Gains Momentum: Legislature Advances Bill That Could Significantly Curtail Website Tracking Litigation - JD Supra
- Privacy Act of 1974; System of Records