HB2108

Providing for duties of covered entities to protect the best interests of children that use online services, products or features and for data protection impact assessments; prohibiting certain actions by covered entities; and imposing penalties.

Introduced·12/18/25
Introduced Text

Pennsylvania HB2108 mandates data protection impact assessments for entities processing children's personal information online, prohibiting certain.

HB2108, known as the Online Safety Protection Act, requires entities processing children's personal information online to conduct data protection impact assessments. These assessments must evaluate the necessity and proportionality of processing operations, risks to children's rights and freedoms, and measures to mitigate these risks. Entities must also prioritize children's best interests over commercial interests, avoiding actions that could cause harm or infringe on children's privacy.

Included in complete analysis

  • Overview
  • Core Provisions
  • Implementation
  • Impact
  • Legal Framework
  • Critical Issues

See what it does, who it affects, and the critical issues in plain language. Free, 30 seconds.

Where it stands

Current
Children & Youth Committee
Next
Committee decision

Sponsors

DDDDDDDDDDDDD
13
0
Democratic CaucusRepublican Caucus

History

Dec 18, 2025

House

Referred to Children & Youth