Instruments
Each one links to its
LexLint note, which carries what it requires and what it flags on.
Adult content age verification (AV)
Requires commercial entities that publish or distribute material harmful to minors, where a substantial portion (one third or more) of the site is such material, to perform reasonable age verification before granting access, using a commercial age verification system or transactional data method.
Note and primary source →
Age-appropriate design code
Requires parental consent before a minor under 18 can hold an account on an interactive computer service, bars platforms from knowingly exposing minors to material harmful to minors, and treats design features that make a service addictive to minors as a defective product for state product liability purposes. Signed April 8, 2026.
Note and primary source →
Breach notification
cite Miss. Code Ann. § 75-24-29(2)-(3)
stage IN FORCE in force since 2011-07-01
source official Mississippi Legislature enrolled act text, as sent to the Governor, billstatus.ls.state.ms.us
A person who conducts business in Mississippi and whose data includes personal information must disclose a breach of security to all affected individuals without unreasonable delay, subject to completing an investigation; notification is not required if the person reasonably determines, after investigation, that the breach will not likely result in harm.
Personal information is an individual's name combined with a Social Security number, a driver's license, state identification card, or tribal identification card number, or an account or credit or debit card number with a required access credential, and excludes publicly available information lawfully made available from government records or widely distributed media; it has no biometric element.
Enacted as HB 583 (2010), effective July 1, 2011, and amended by HB 277 (2021, effective July 1, 2021), which added the tribal identification card number as a qualifying element; every other subsection, including the enforcement clause, is unchanged since 2010.
What it asks of an app →
Enforcement supervision
cite Miss. Code Ann. § 75-24-29(8)
stage IN FORCE in force since 2011-07-01
source official Mississippi Legislature enrolled act text, as sent to the Governor, billstatus.ls.state.ms.us
Failure to comply with Mississippi's breach notification duty constitutes an unfair trade practice enforced by the Attorney General, but the same sentence that deems the violation an unfair trade practice expressly forecloses any private right of action: this closes, in one clause, the exact route that opens a private action in other states whose breach statutes deem a violation an unfair trade practice without an express carve-out.
What it asks of an app →
The Insurance Data Security Law expressly may not be construed to create or imply a private cause of action for its violation, nor to curtail a private cause of action that would otherwise exist absent the law, the same two-part structure as Michigan's parallel statute. The law establishes the exclusive Mississippi standards for a licensee's data security and notification to the Commissioner of Insurance, who enforces it.
What it asks of an app →
Sensitive categories
Mississippi adopted the NAIC Insurance Data Security Model Law as SB 2831 (2019 Regular Session), signed April 3, 2019 and effective July 1, 2019, codified at Miss. Code Ann. Sections 83-5-801 to 83-5-825.
Nonpublic information (Section 3(k)) includes electronic information that is not publicly available and that, combined with an identifying element, includes a Social Security number, driver's license or nondriver identification card number, financial account or card number, a financial-account access credential, or biometric records.
Biometric records is a bare, undefined term with no elaboration anywhere in Section 3's definitions and no photograph, video, or audio-recording exclusion or clawback clause, the same shape found in Michigan's parallel adoption of the same model law; excludes_recording_derived cannot be tested against this text and is not recorded. This law binds insurance licensees only, not a general private-sector actor.
What it asks of an app →
Social media and minors
Requires digital service providers that let users socially interact, create profiles, and post content to verify the age of all users and obtain express parental or guardian consent before a known minor (under 18) may hold an account, with default privacy protections for minor accounts.
Note and primary source →
