An app store provider shall protect personal age verification data by doing both of the following:
(1) Limiting the collection and processing to data necessary to: (i) verify a user’s age; (ii) obtain parental consent; or (iii) maintain compliance records.
(2) Transmitting personal age verification data using industry-standard encryption protocols that ensure data integrity and data confidentiality.