LexLint

Know the law where your app runs.

Law / United States / Puerto Rico

Ley para la Protección de la Privacidad Cibernética de los Niños y Jóvenes (children's online privacy)

Ley Núm. 185 de 27 de agosto de 2024

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

In force since 1 March 2025.

A sensitive categories rule binding private bodies.

As of 5 September 2026.

What it requires

  • Do not publish or disclose a known minor user's personal information beyond their name and city of residence without the minor's and a parent's or guardian's consent.
  • Do not store, sell, share, or retain a known minor's personal information beyond what is reasonably necessary to provide the service the minor is actively using.
  • Do not profile a known minor through fully automated processing of their personal information unless the profiling is reasonably necessary to the service or serves a compelling, minor-protective purpose, and safeguards are in place.
  • Do not store, sell, or share a known minor's precise geolocation beyond what is reasonably necessary, and only for as long as necessary.
  • Give every minor user resident in Puerto Rico a simple, understandable process to set their privacy options as part of account registration.
  • Delete a minor user's account, or their personal information at a parent's or guardian's request, within forty-five calendar days of the request.

If you get it wrong

Criminal exposureNo

Private right of actionNo

Penalty structure

The compiled statutory text prints the figure as "veinticinco mil diez mil dólares ($25,0000.00)", an apparent duplicated-numeral error carrying an extra zero; contemporaneous press coverage of the enacted Act (WAPA.tv, Metro Puerto Rico, NotiUno) uniformly reports the penalty as $25,000 per violation, which this record follows.

Rule
Per violation only
As of
5 September 2026
Currency
USD
Per violation unit
Violation
Per violation amount
25,000

Who enforces it

Enforcement body

Negociado de Telecomunicaciones de Puerto Rico (NET), exclusive jurisdiction

What it reaches

Obligation class

Consent, Data subject rights, Retention, Disclosure

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Every social-media website or app that permits registration of a user eighteen or younger and resident in Puerto Rico must not publish or disclose that user's personal information (beyond name and city) without the parent's or guardian's consent, must not store, sell, share, or retain a known minor's personal information beyond what is reasonably necessary to the service, and must not profile a known minor absent a compelling, minor-protective purpose.

Precise geolocation of a known minor may not be stored, sold, or shared beyond what the service reasonably requires. The platform must give every minor user a simple privacy-settings process at registration and must honor an account-deletion or data-removal request within forty-five days. The law is designed not to conflict with the federal Children's Online Privacy Protection Act for users under thirteen.

The Negociado de Telecomunicaciones de Puerto Rico (NET) has exclusive enforcement authority and may impose a civil penalty of up to $25,000 per violation.

When LexLint raises it

  • operates_social_platform
  • serves_minors

Read the law

official codified text, Puerto Rico Office of Management and Budget (OGP) Virtual Library

Back to the example  ·  Lint your app