CAADCA Section 1798.99.31(b)(5)-(6) - Precise geolocation: off by default
Do not collect or use precise geolocation of children by default; allow only when strictly necessary and for the minimum time required
Where this comes from
Provision: Section 1798.99.31(b)(5)-(6) - Precise geolocation: off by default; obvious sign while collected
Instrument: California Age-Appropriate Design Code Act (AB 2273)
Citation: Cal. Civ. Code § 1798.99.31(b)(5) and (b)(6); AB 2273, Stats. 2022 ch. 320, as amended by SB 1525, Stats. 2024 ch. 80
Text version: Cal. Civ. Code §§ 1798.99.28-1798.99.40 (AB 2273, Stats. 2022 ch. 320; § 1798.99.31 as amended by SB 1525, Stats. 2024 ch. 80, effective 1 January 2025), leginfo.legislature.ca.gov text retrieved 2026-09-21. Partly enjoined: NetChoice, LLC v. Bonta, No. 25-2366 (9th Cir. 12 Mar. 2026) — see confidenceNotes.
Who it applies to
It applies when all of these are true:
- Service is likely to be accessed by children under 18
- Data categories collected includes Location / Address
- Youngest user age is Under 13, 13-15 or 16-17
…unless:
- Precise geolocation of children may be collected by default where strictly necessary for the business to provide the service, product, or feature requested, and then only for the limited time that collection is necessary; the § 1798.99.31(b)(6)... (Cal. Civ. Code § 1798.99.31(b)(5))
Scope in the source's own terms
- Service collects precise geolocation data
- Location data collected from children
- Service available to California residents
What engineering work it implies
Sample acceptance criteria Landfall generates for this obligation:
- Prohibited action is technically blocked
- Users cannot bypass the restriction
- Clear messaging explains why action is blocked
- Attempts are logged for compliance monitoring
- Test that prohibited action fails gracefully
Evidence an auditor expects
- Technical controlTechnical audit
Geolocation collection controls
Technical implementation showing precise geolocation disabled by default for children
- User-interface evidenceUser testing
Location permission prompts
Child-appropriate location permission requests with clear explanation
Questions people ask
- Does CAADCA Section 1798.99.31(b)(5)-(6) - Precise geolocation: off by default apply to my service?
- It applies when Service is likely to be accessed by children under 18; Data categories collected includes Location / Address; Youngest user age is Under 13, 13-15 or 16-17. It does not apply where Precise geolocation of children may be collected by default where strictly necessary for the business to provide the service, product, or feature requested, and then only for the limited time that collection is necessary; the § 1798.99.31(b)(6)... (Cal. Civ. Code § 1798.99.31(b)(5)).
- From when does this apply?
- CAADCA Section 1798.99.31(b)(5)-(6) - Precise geolocation: off by default applies from 1 July 2024. Its current status is: in force.
- What evidence does an auditor expect?
- Geolocation collection controls; Location permission prompts.
Find out whether this one lands on you
Landfall's pre-scan answers the applicability question above for your product in minutes, then turns every obligation that applies into traceable engineering tickets with a citation chain your auditors can follow.
Not legal advice. Landfall maps regulatory obligations to engineering work for planning purposes. Its verdicts are not legal advice and create no attorney-client relationship — verify with qualified counsel before relying on them.