Wake me when that actually leads to enforcement penalties. This law is vague enough as it is, no company is going to get slammed for "accidentally" skipping a user permission check, and having their FunPad app offer up your age info to one of Palantir's long fingers.