Requiring a business that offers an online product likely to be accessed by children to complete a certain data protection impact assessment by April 1, 2025, under certain circumstances; prohibiting a business from offering a certain online product before completing a data protection impact assessment; requiring businesses to document certain risks associated with certain online products; requiring certain privacy protections for certain online products; prohibiting certain data collection and sharing practices; etc.