Requires that websites, edtech apps, and other digital vendors protect the privacy of children 13 years old and younger. Personal data must be masked and cannot be harvested for sale to other companies or vendors.