(2)(a)–(c) 1 In this subsection, "emotional distressEmotional distress"Emotional distress" means significant mental suffering or distress that may, but does not necessarily, require medical or other professional treatment or counseling.Wis. Stat. § 100.80(2)(a)" means significant mental suffering or distress that may, but does not necessarily, require medical or other professional treatment or counseling. (b) A covered businessCovered business"Covered business" means a business entity to which all of the following apply: 1. The business entity conducts business in this state. 2. The business entity generates a majority of its annual revenue from online services. 3. The business entity's online services, products, or features are reasonably likely to be accessed by a minor. 4. The business entity collects consumers' personal data or has consumers' personal data collected on its behalf by a processor. 5. The business entity, alone or jointly with others, determines the purposes and means of the processing of consumers' personal data.Wis. Stat. § 100.80(1)(g) that processesProcess"Process" or "processing" means any operation performed, whether by manual or automated means, on personal data, such as the collection, use, storage, disclosure, analysis, deletion, modification, or other handling of personal data.Wis. Stat. § 100.80(1)(s) a covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h)'s personal dataPersonal data1. Except as provided in subd. 2., "personal data" means any information, including derived data and unique identifiers, that is linked or reasonably linkable, alone or in combination with other information, to any of the following: a. An identified or identifiable individual. b. A device that identifies, is linked to, or is reasonably linkable to one or more identified or identifiable individuals in a household. 2. "Personal data" does not include de-identified data or publicly available information.Wis. Stat. § 100.80(1)(r) in any capacity owes a minimum duty of care to the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h). (c) A covered businessCovered business"Covered business" means a business entity to which all of the following apply: 1. The business entity conducts business in this state. 2. The business entity generates a majority of its annual revenue from online services. 3. The business entity's online services, products, or features are reasonably likely to be accessed by a minor. 4. The business entity collects consumers' personal data or has consumers' personal data collected on its behalf by a processor. 5. The business entity, alone or jointly with others, determines the purposes and means of the processing of consumers' personal data.Wis. Stat. § 100.80(1)(g) does not satisfy the minimum duty of care under par. (b) unless its use of the personal data of the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) and the design of its online service, product, or featureOnline service, product, or feature1. Except as provided in subd. 2., "online service, product, or feature" means a digital product that is accessible to the public by means of the Internet, including through a website or mobile application. 2. "Online service, product, or feature" does not include any of the following: a. Telecommunications service, as defined in 47 USC 153 (53). b. A broadband Internet access service, as defined in 47 CFR 54.400. c. A physical product.Wis. Stat. § 100.80(1)(q) will not result in any of the following: 1. Reasonably foreseeable emotional distressEmotional distress"Emotional distress" means significant mental suffering or distress that may, but does not necessarily, require medical or other professional treatment or counseling.Wis. Stat. § 100.80(2)(a) to the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h). 2. Reasonably foreseeable compulsive use of the online service, product, or featureOnline service, product, or feature1. Except as provided in subd. 2., "online service, product, or feature" means a digital product that is accessible to the public by means of the Internet, including through a website or mobile application. 2. "Online service, product, or feature" does not include any of the following: a. Telecommunications service, as defined in 47 USC 153 (53). b. A broadband Internet access service, as defined in 47 CFR 54.400. c. A physical product.Wis. Stat. § 100.80(1)(q) by the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h). 3. Discrimination against the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) based upon race, ethnicity, sex, disability, sexual orientation, gender identity, gender expression, religion, or national origin.

(2)(d)–(e) The content of the media viewed by a covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) does not establish emotional distressEmotional distress"Emotional distress" means significant mental suffering or distress that may, but does not necessarily, require medical or other professional treatment or counseling.Wis. Stat. § 100.80(2)(a), compulsive useCompulsive use"Compulsive use" means a covered minor's repetitive use of a covered business's online service, product, or feature that materially disrupts one or more major life activities of the covered minor, including sleeping, eating, learning, reading, concentrating, communicating, or working.Wis. Stat. § 100.80(1)(e), or discrimination under par. (c). (e) Nothing in this subsection requires a covered businessCovered business"Covered business" means a business entity to which all of the following apply: 1. The business entity conducts business in this state. 2. The business entity generates a majority of its annual revenue from online services. 3. The business entity's online services, products, or features are reasonably likely to be accessed by a minor. 4. The business entity collects consumers' personal data or has consumers' personal data collected on its behalf by a processor. 5. The business entity, alone or jointly with others, determines the purposes and means of the processing of consumers' personal data.Wis. Stat. § 100.80(1)(g) to prevent or preclude a covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) from accessing or viewing any piece or category of media.

(3)(a)(1)–(8) 2 A covered businessCovered business"Covered business" means a business entity to which all of the following apply: 1. The business entity conducts business in this state. 2. The business entity generates a majority of its annual revenue from online services. 3. The business entity's online services, products, or features are reasonably likely to be accessed by a minor. 4. The business entity collects consumers' personal data or has consumers' personal data collected on its behalf by a processor. 5. The business entity, alone or jointly with others, determines the purposes and means of the processing of consumers' personal data.Wis. Stat. § 100.80(1)(g) shall configure all defaultDefault"Default" means a preselected option adopted by a covered business for an online service, product, or feature.Wis. Stat. § 100.80(1)(i) privacy settings provided to a covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) through the covered businessCovered business"Covered business" means a business entity to which all of the following apply: 1. The business entity conducts business in this state. 2. The business entity generates a majority of its annual revenue from online services. 3. The business entity's online services, products, or features are reasonably likely to be accessed by a minor. 4. The business entity collects consumers' personal data or has consumers' personal data collected on its behalf by a processor. 5. The business entity, alone or jointly with others, determines the purposes and means of the processing of consumers' personal data.Wis. Stat. § 100.80(1)(g)'s online service, product, or featureOnline service, product, or feature1. Except as provided in subd. 2., "online service, product, or feature" means a digital product that is accessible to the public by means of the Internet, including through a website or mobile application. 2. "Online service, product, or feature" does not include any of the following: a. Telecommunications service, as defined in 47 USC 153 (53). b. A broadband Internet access service, as defined in 47 CFR 54.400. c. A physical product.Wis. Stat. § 100.80(1)(q) to the highest level of privacy, including all of the following defaultDefault"Default" means a preselected option adopted by a covered business for an online service, product, or feature.Wis. Stat. § 100.80(1)(i) settings: 1. Not displaying the existence of the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h)'s account on a social media platformSocial media platform1. Except as provided in subd. 2., "social media platform" means a public or semipublic Internet-based service or application that is primarily intended to connect users and allow users to socially interact within the service or application and that enables a user to do any of the following: a. Construct a public or semipublic profile for the purpose of signing into and using the service or application. b. Populate a public list of other users with whom the user shares a social connection within the service or application. c. Create or post content that is viewable by other users, including content on message boards and in chat rooms, and receive content generated by other users. 2. "Social media platform" does not include a public or semipublic Internet-based service or application to which any of the following applies: a. It exclusively provides email or direct messaging services. b. It is used by and under the direction of an educational institution, including a learning management system or a student engagement program.Wis. Stat. § 100.80(1)(w) to any known adultKnown adult"Known adult" is a consumer who a covered business actually knows is an adult or labels as an adult in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(o) user unless the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) has expressly and unambiguously allowed a specific known adultKnown adult"Known adult" is a consumer who a covered business actually knows is an adult or labels as an adult in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(o) user to view the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h)'s account or has expressly and unambiguously chosen to make public the existence of the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h)'s account. 2. Not displaying media created or posted by the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) on a social media platformSocial media platform1. Except as provided in subd. 2., "social media platform" means a public or semipublic Internet-based service or application that is primarily intended to connect users and allow users to socially interact within the service or application and that enables a user to do any of the following: a. Construct a public or semipublic profile for the purpose of signing into and using the service or application. b. Populate a public list of other users with whom the user shares a social connection within the service or application. c. Create or post content that is viewable by other users, including content on message boards and in chat rooms, and receive content generated by other users. 2. "Social media platform" does not include a public or semipublic Internet-based service or application to which any of the following applies: a. It exclusively provides email or direct messaging services. b. It is used by and under the direction of an educational institution, including a learning management system or a student engagement program.Wis. Stat. § 100.80(1)(w) to any known adultKnown adult"Known adult" is a consumer who a covered business actually knows is an adult or labels as an adult in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(o) user unless the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) has expressly and unambiguously allowed a specific known adultKnown adult"Known adult" is a consumer who a covered business actually knows is an adult or labels as an adult in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(o) user to view the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h)'s media or has expressly and unambiguously chosen to make the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h)'s media publicly available. 3. Not permitting any known adultKnown adult"Known adult" is a consumer who a covered business actually knows is an adult or labels as an adult in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(o) user to like, comment on, or otherwise provide feedback on the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h)'s media on a social media platformSocial media platform1. Except as provided in subd. 2., "social media platform" means a public or semipublic Internet-based service or application that is primarily intended to connect users and allow users to socially interact within the service or application and that enables a user to do any of the following: a. Construct a public or semipublic profile for the purpose of signing into and using the service or application. b. Populate a public list of other users with whom the user shares a social connection within the service or application. c. Create or post content that is viewable by other users, including content on message boards and in chat rooms, and receive content generated by other users. 2. "Social media platform" does not include a public or semipublic Internet-based service or application to which any of the following applies: a. It exclusively provides email or direct messaging services. b. It is used by and under the direction of an educational institution, including a learning management system or a student engagement program.Wis. Stat. § 100.80(1)(w) unless the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) has expressly and unambiguously enabled this function. 4. Not permitting direct messaging on a social media platformSocial media platform1. Except as provided in subd. 2., "social media platform" means a public or semipublic Internet-based service or application that is primarily intended to connect users and allow users to socially interact within the service or application and that enables a user to do any of the following: a. Construct a public or semipublic profile for the purpose of signing into and using the service or application. b. Populate a public list of other users with whom the user shares a social connection within the service or application. c. Create or post content that is viewable by other users, including content on message boards and in chat rooms, and receive content generated by other users. 2. "Social media platform" does not include a public or semipublic Internet-based service or application to which any of the following applies: a. It exclusively provides email or direct messaging services. b. It is used by and under the direction of an educational institution, including a learning management system or a student engagement program.Wis. Stat. § 100.80(1)(w) between the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) and any known adultKnown adult"Known adult" is a consumer who a covered business actually knows is an adult or labels as an adult in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(o) user unless the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) expressly and unambiguously chooses to allow direct messaging with a specific known adultKnown adult"Known adult" is a consumer who a covered business actually knows is an adult or labels as an adult in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(o) user. 5. Not displaying the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h)'s location to other users unless the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) expressly and unambiguously shares the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h)'s location with a specific user. 6. Not displaying the users connected to the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) on a social media platformSocial media platform1. Except as provided in subd. 2., "social media platform" means a public or semipublic Internet-based service or application that is primarily intended to connect users and allow users to socially interact within the service or application and that enables a user to do any of the following: a. Construct a public or semipublic profile for the purpose of signing into and using the service or application. b. Populate a public list of other users with whom the user shares a social connection within the service or application. c. Create or post content that is viewable by other users, including content on message boards and in chat rooms, and receive content generated by other users. 2. "Social media platform" does not include a public or semipublic Internet-based service or application to which any of the following applies: a. It exclusively provides email or direct messaging services. b. It is used by and under the direction of an educational institution, including a learning management system or a student engagement program.Wis. Stat. § 100.80(1)(w) unless the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) expressly and unambiguously chooses to share the information. 7. Disabling search engine indexing of the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h)'s account profile. 8. Not sending push notifications to the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h).

(3)(b)(1)–(2) 2 A covered businessCovered business"Covered business" means a business entity to which all of the following apply: 1. The business entity conducts business in this state. 2. The business entity generates a majority of its annual revenue from online services. 3. The business entity's online services, products, or features are reasonably likely to be accessed by a minor. 4. The business entity collects consumers' personal data or has consumers' personal data collected on its behalf by a processor. 5. The business entity, alone or jointly with others, determines the purposes and means of the processing of consumers' personal data.Wis. Stat. § 100.80(1)(g) may not do any of the following: 1. Provide a covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) with a single setting that makes all of the defaultDefault"Default" means a preselected option adopted by a covered business for an online service, product, or feature.Wis. Stat. § 100.80(1)(i) privacy settings less protective at once. 2. Request or prompt a covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) to make the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h)'s privacy settings less protective unless the change is strictly necessary for the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) to access an online service, product, or featureOnline service, product, or feature1. Except as provided in subd. 2., "online service, product, or feature" means a digital product that is accessible to the public by means of the Internet, including through a website or mobile application. 2. "Online service, product, or feature" does not include any of the following: a. Telecommunications service, as defined in 47 USC 153 (53). b. A broadband Internet access service, as defined in 47 CFR 54.400. c. A physical product.Wis. Stat. § 100.80(1)(q) the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) has expressly and unambiguously requested.

(3)(c)(1)–(2) 3 A covered businessCovered business"Covered business" means a business entity to which all of the following apply: 1. The business entity conducts business in this state. 2. The business entity generates a majority of its annual revenue from online services. 3. The business entity's online services, products, or features are reasonably likely to be accessed by a minor. 4. The business entity collects consumers' personal data or has consumers' personal data collected on its behalf by a processor. 5. The business entity, alone or jointly with others, determines the purposes and means of the processing of consumers' personal data.Wis. Stat. § 100.80(1)(g) shall do all of the following: 1. Provide a prominent, accessible, and responsive tool to allow a covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) to request that the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h)'s account on a social media platformSocial media platform1. Except as provided in subd. 2., "social media platform" means a public or semipublic Internet-based service or application that is primarily intended to connect users and allow users to socially interact within the service or application and that enables a user to do any of the following: a. Construct a public or semipublic profile for the purpose of signing into and using the service or application. b. Populate a public list of other users with whom the user shares a social connection within the service or application. c. Create or post content that is viewable by other users, including content on message boards and in chat rooms, and receive content generated by other users. 2. "Social media platform" does not include a public or semipublic Internet-based service or application to which any of the following applies: a. It exclusively provides email or direct messaging services. b. It is used by and under the direction of an educational institution, including a learning management system or a student engagement program.Wis. Stat. § 100.80(1)(w) be unpublished or deleted. 2. Honor a request under subd. 1. not later than 15 days after the covered businessCovered business"Covered business" means a business entity to which all of the following apply: 1. The business entity conducts business in this state. 2. The business entity generates a majority of its annual revenue from online services. 3. The business entity's online services, products, or features are reasonably likely to be accessed by a minor. 4. The business entity collects consumers' personal data or has consumers' personal data collected on its behalf by a processor. 5. The business entity, alone or jointly with others, determines the purposes and means of the processing of consumers' personal data.Wis. Stat. § 100.80(1)(g) receives the request.

(4)(a)–(d) 4 TRANSPARENCY. A covered businessCovered business"Covered business" means a business entity to which all of the following apply: 1. The business entity conducts business in this state. 2. The business entity generates a majority of its annual revenue from online services. 3. The business entity's online services, products, or features are reasonably likely to be accessed by a minor. 4. The business entity collects consumers' personal data or has consumers' personal data collected on its behalf by a processor. 5. The business entity, alone or jointly with others, determines the purposes and means of the processing of consumers' personal data.Wis. Stat. § 100.80(1)(g) shall prominently and clearly provide on its website or mobile application all of the following: (a) The covered businessCovered business"Covered business" means a business entity to which all of the following apply: 1. The business entity conducts business in this state. 2. The business entity generates a majority of its annual revenue from online services. 3. The business entity's online services, products, or features are reasonably likely to be accessed by a minor. 4. The business entity collects consumers' personal data or has consumers' personal data collected on its behalf by a processor. 5. The business entity, alone or jointly with others, determines the purposes and means of the processing of consumers' personal data.Wis. Stat. § 100.80(1)(g)'s terms of service, privacy policies and information, and community standards. (b) The purpose of each algorithmic recommendation systemAlgorithmic recommendation system"Algorithmic recommendation system" means a system that uses an algorithm to select, filter, and arrange media on a covered business's website or mobile application for the purpose of selecting, recommending, or prioritizing media for a user.Wis. Stat. § 100.80(1)(a) in use by the covered businessCovered business"Covered business" means a business entity to which all of the following apply: 1. The business entity conducts business in this state. 2. The business entity generates a majority of its annual revenue from online services. 3. The business entity's online services, products, or features are reasonably likely to be accessed by a minor. 4. The business entity collects consumers' personal data or has consumers' personal data collected on its behalf by a processor. 5. The business entity, alone or jointly with others, determines the purposes and means of the processing of consumers' personal data.Wis. Stat. § 100.80(1)(g). (c) Inputs used by each algorithmic recommendation systemAlgorithmic recommendation system"Algorithmic recommendation system" means a system that uses an algorithm to select, filter, and arrange media on a covered business's website or mobile application for the purpose of selecting, recommending, or prioritizing media for a user.Wis. Stat. § 100.80(1)(a) and all of the following about each input: 1. How it is measured or determined. 2. How it uses the personal dataPersonal data1. Except as provided in subd. 2., "personal data" means any information, including derived data and unique identifiers, that is linked or reasonably linkable, alone or in combination with other information, to any of the following: a. An identified or identifiable individual. b. A device that identifies, is linked to, or is reasonably linkable to one or more identified or identifiable individuals in a household. 2. "Personal data" does not include de-identified data or publicly available information.Wis. Stat. § 100.80(1)(r) of covered minorsCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h). 3. How it influences the recommendations issued by the system. 4. How it is weighed relative to the other inputs reported in this paragraph. (d) For each feature of any service that uses the personal dataPersonal data1. Except as provided in subd. 2., "personal data" means any information, including derived data and unique identifiers, that is linked or reasonably linkable, alone or in combination with other information, to any of the following: a. An identified or identifiable individual. b. A device that identifies, is linked to, or is reasonably linkable to one or more identified or identifiable individuals in a household. 2. "Personal data" does not include de-identified data or publicly available information.Wis. Stat. § 100.80(1)(r) of covered minorsCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h), a description of all of the following: 1. The purpose of the service feature. 2. The personal dataPersonal data1. Except as provided in subd. 2., "personal data" means any information, including derived data and unique identifiers, that is linked or reasonably linkable, alone or in combination with other information, to any of the following: a. An identified or identifiable individual. b. A device that identifies, is linked to, or is reasonably linkable to one or more identified or identifiable individuals in a household. 2. "Personal data" does not include de-identified data or publicly available information.Wis. Stat. § 100.80(1)(r) collected by the service feature. 3. The personal dataPersonal data1. Except as provided in subd. 2., "personal data" means any information, including derived data and unique identifiers, that is linked or reasonably linkable, alone or in combination with other information, to any of the following: a. An identified or identifiable individual. b. A device that identifies, is linked to, or is reasonably linkable to one or more identified or identifiable individuals in a household. 2. "Personal data" does not include de-identified data or publicly available information.Wis. Stat. § 100.80(1)(r) used by the service feature. 4. How the personal dataPersonal data1. Except as provided in subd. 2., "personal data" means any information, including derived data and unique identifiers, that is linked or reasonably linkable, alone or in combination with other information, to any of the following: a. An identified or identifiable individual. b. A device that identifies, is linked to, or is reasonably linkable to one or more identified or identifiable individuals in a household. 2. "Personal data" does not include de-identified data or publicly available information.Wis. Stat. § 100.80(1)(r) is used by the service feature. 5. Any personal dataPersonal data1. Except as provided in subd. 2., "personal data" means any information, including derived data and unique identifiers, that is linked or reasonably linkable, alone or in combination with other information, to any of the following: a. An identified or identifiable individual. b. A device that identifies, is linked to, or is reasonably linkable to one or more identified or identifiable individuals in a household. 2. "Personal data" does not include de-identified data or publicly available information.Wis. Stat. § 100.80(1)(r) transferred to or shared with a processorProcessor"Processor" means a person who processes personal data on behalf of any of the following: 1. A covered business. 2. Another processor.Wis. Stat. § 100.80(1)(t) or 3rd party by the service feature, the identity of the processorProcessor"Processor" means a person who processes personal data on behalf of any of the following: 1. A covered business. 2. Another processor.Wis. Stat. § 100.80(1)(t) or 3rd party, and the purpose of the transfer or sharing. 6. How long the personal dataPersonal data1. Except as provided in subd. 2., "personal data" means any information, including derived data and unique identifiers, that is linked or reasonably linkable, alone or in combination with other information, to any of the following: a. An identified or identifiable individual. b. A device that identifies, is linked to, or is reasonably linkable to one or more identified or identifiable individuals in a household. 2. "Personal data" does not include de-identified data or publicly available information.Wis. Stat. § 100.80(1)(r) is retained.

(5)(a) 5 CollectCollect"Collect," with respect to data, means buying, renting, gathering, obtaining, receiving, or accessing any data by any means, including receiving data from the consumer, either actively or passively, or by observing the consumer's behavior.Wis. Stat. § 100.80(1)(d), sell, share, or retain any personal data of a covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) that is not necessary to provide an online service, product, or featureOnline service, product, or feature1. Except as provided in subd. 2., "online service, product, or feature" means a digital product that is accessible to the public by means of the Internet, including through a website or mobile application. 2. "Online service, product, or feature" does not include any of the following: a. Telecommunications service, as defined in 47 USC 153 (53). b. A broadband Internet access service, as defined in 47 CFR 54.400. c. A physical product.Wis. Stat. § 100.80(1)(q) with which the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) is actively and knowingly engaged.

(5)(b) 6 Use previously collected personal data of a covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) for any purpose other than a purpose for which the personal dataPersonal data1. Except as provided in subd. 2., "personal data" means any information, including derived data and unique identifiers, that is linked or reasonably linkable, alone or in combination with other information, to any of the following: a. An identified or identifiable individual. b. A device that identifies, is linked to, or is reasonably linkable to one or more identified or identifiable individuals in a household. 2. "Personal data" does not include de-identified data or publicly available information.Wis. Stat. § 100.80(1)(r) was collected, unless doing so is necessary to comply with any obligation under this section.

(5)(c) 7 Permit any individual, including a parent or guardian of a covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h), to monitor the online activity of a covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) or to track the location of the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) without providing a conspicuous signal to the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) when the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) is being monitored or tracked.

(5)(d)(1)–(3) 8 Use the personal data of a covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) to select, recommend, or prioritize media for the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) unless the personal dataPersonal data1. Except as provided in subd. 2., "personal data" means any information, including derived data and unique identifiers, that is linked or reasonably linkable, alone or in combination with other information, to any of the following: a. An identified or identifiable individual. b. A device that identifies, is linked to, or is reasonably linkable to one or more identified or identifiable individuals in a household. 2. "Personal data" does not include de-identified data or publicly available information.Wis. Stat. § 100.80(1)(r) is any of the following: 1. The express and unambiguous request of the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) to receive any of the following: a. Media from a specific account, feed, or user, or to receive more or less media from that account, feed, or user. b. A specific category or genre of media or to see more or less of that category or genre of media. c. More or less media with similar characteristics as the media the covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) is currently viewing. 2. User-selected privacy or accessibility settings. 3. A search query if the search query is used only to select and prioritize media in response to the search.

(5)(e) 9 Send push notifications to a covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) between midnight and 6 a.m.

(6)(a)(1)–(2) In this subsection: 1. "Age assuranceAge assurance"Age assurance" means methods, including a range of methods, used to determine, estimate, or communicate the age or an age range of an online user.Wis. Stat. § 100.80(6)(a)(1)" means methods, including a range of methods, used to determine, estimate, or communicate the age or an age range of an online user. 2. "Age range" means either an interval with an upper and lower age limit or a label indicating age above or below a specific age.

(6)(b)(1)–(6) 10 During the process of conducting age assuranceAge assurance"Age assurance" means methods, including a range of methods, used to determine, estimate, or communicate the age or an age range of an online user.Wis. Stat. § 100.80(6)(a)(1), all of the following apply to covered businessesCovered business"Covered business" means a business entity to which all of the following apply: 1. The business entity conducts business in this state. 2. The business entity generates a majority of its annual revenue from online services. 3. The business entity's online services, products, or features are reasonably likely to be accessed by a minor. 4. The business entity collects consumers' personal data or has consumers' personal data collected on its behalf by a processor. 5. The business entity, alone or jointly with others, determines the purposes and means of the processing of consumers' personal data.Wis. Stat. § 100.80(1)(g) and processorsProcessor"Processor" means a person who processes personal data on behalf of any of the following: 1. A covered business. 2. Another processor.Wis. Stat. § 100.80(1)(t): 1. They may collectCollect"Collect," with respect to data, means buying, renting, gathering, obtaining, receiving, or accessing any data by any means, including receiving data from the consumer, either actively or passively, or by observing the consumer's behavior.Wis. Stat. § 100.80(1)(d) only the personal data of a user that is strictly necessary for age assuranceAge assurance"Age assurance" means methods, including a range of methods, used to determine, estimate, or communicate the age or an age range of an online user.Wis. Stat. § 100.80(6)(a)(1). 2. Upon determining whether a user is a covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h), they shall immediately delete any personal dataPersonal data1. Except as provided in subd. 2., "personal data" means any information, including derived data and unique identifiers, that is linked or reasonably linkable, alone or in combination with other information, to any of the following: a. An identified or identifiable individual. b. A device that identifies, is linked to, or is reasonably linkable to one or more identified or identifiable individuals in a household. 2. "Personal data" does not include de-identified data or publicly available information.Wis. Stat. § 100.80(1)(r) about the user that they collected for age assuranceAge assurance"Age assurance" means methods, including a range of methods, used to determine, estimate, or communicate the age or an age range of an online user.Wis. Stat. § 100.80(6)(a)(1), except the determination of the user's age range. 3. They may not use any personal dataPersonal data1. Except as provided in subd. 2., "personal data" means any information, including derived data and unique identifiers, that is linked or reasonably linkable, alone or in combination with other information, to any of the following: a. An identified or identifiable individual. b. A device that identifies, is linked to, or is reasonably linkable to one or more identified or identifiable individuals in a household. 2. "Personal data" does not include de-identified data or publicly available information.Wis. Stat. § 100.80(1)(r) about a user that they collected for age assuranceAge assurance"Age assurance" means methods, including a range of methods, used to determine, estimate, or communicate the age or an age range of an online user.Wis. Stat. § 100.80(6)(a)(1) for any purpose other than age assuranceAge assurance"Age assurance" means methods, including a range of methods, used to determine, estimate, or communicate the age or an age range of an online user.Wis. Stat. § 100.80(6)(a)(1). 4. They may not combine the personal dataPersonal data1. Except as provided in subd. 2., "personal data" means any information, including derived data and unique identifiers, that is linked or reasonably linkable, alone or in combination with other information, to any of the following: a. An identified or identifiable individual. b. A device that identifies, is linked to, or is reasonably linkable to one or more identified or identifiable individuals in a household. 2. "Personal data" does not include de-identified data or publicly available information.Wis. Stat. § 100.80(1)(r) about a user that they collected for age assuranceAge assurance"Age assurance" means methods, including a range of methods, used to determine, estimate, or communicate the age or an age range of an online user.Wis. Stat. § 100.80(6)(a)(1) with any other personal dataPersonal data1. Except as provided in subd. 2., "personal data" means any information, including derived data and unique identifiers, that is linked or reasonably linkable, alone or in combination with other information, to any of the following: a. An identified or identifiable individual. b. A device that identifies, is linked to, or is reasonably linkable to one or more identified or identifiable individuals in a household. 2. "Personal data" does not include de-identified data or publicly available information.Wis. Stat. § 100.80(1)(r) about the user, except with respect to the determination of the user's age range. 5. They may not disclose the personal dataPersonal data1. Except as provided in subd. 2., "personal data" means any information, including derived data and unique identifiers, that is linked or reasonably linkable, alone or in combination with other information, to any of the following: a. An identified or identifiable individual. b. A device that identifies, is linked to, or is reasonably linkable to one or more identified or identifiable individuals in a household. 2. "Personal data" does not include de-identified data or publicly available information.Wis. Stat. § 100.80(1)(r) about a user that they collected for age assuranceAge assurance"Age assurance" means methods, including a range of methods, used to determine, estimate, or communicate the age or an age range of an online user.Wis. Stat. § 100.80(6)(a)(1) to a 3rd party that is not a processorProcessor"Processor" means a person who processes personal data on behalf of any of the following: 1. A covered business. 2. Another processor.Wis. Stat. § 100.80(1)(t). 6. They shall implement a review procedure to allow users to appeal their age determination.

(7)(a)–(c) RULE MAKING RELATED TO AGE ASSURANCEAge assurance"Age assurance" means methods, including a range of methods, used to determine, estimate, or communicate the age or an age range of an online user.Wis. Stat. § 100.80(6)(a)(1) PRIVACY. (a) In this subsection, "age assuranceAge assurance"Age assurance" means methods, including a range of methods, used to determine, estimate, or communicate the age or an age range of an online user.Wis. Stat. § 100.80(6)(a)(1)" has the meaning given in sub. (6) (a) 1. (b) 1. Subject to subd. 2., the department of justice shall promulgate rules with respect to all of the following: a. Identifying commercially reasonable and technically feasible methods for covered businessesCovered business"Covered business" means a business entity to which all of the following apply: 1. The business entity conducts business in this state. 2. The business entity generates a majority of its annual revenue from online services. 3. The business entity's online services, products, or features are reasonably likely to be accessed by a minor. 4. The business entity collects consumers' personal data or has consumers' personal data collected on its behalf by a processor. 5. The business entity, alone or jointly with others, determines the purposes and means of the processing of consumers' personal data.Wis. Stat. § 100.80(1)(g) and processorsProcessor"Processor" means a person who processes personal data on behalf of any of the following: 1. A covered business. 2. Another processor.Wis. Stat. § 100.80(1)(t) to determine if a user is a covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h). b. Describing appropriate review processesProcess"Process" or "processing" means any operation performed, whether by manual or automated means, on personal data, such as the collection, use, storage, disclosure, analysis, deletion, modification, or other handling of personal data.Wis. Stat. § 100.80(1)(s) for users appealing their age designations. c. Providing privacy protections for age assuranceAge assurance"Age assurance" means methods, including a range of methods, used to determine, estimate, or communicate the age or an age range of an online user.Wis. Stat. § 100.80(6)(a)(1) data. d. Labeling individuals as covered minorsCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) or known adultsKnown adult"Known adult" is a consumer who a covered business actually knows is an adult or labels as an adult in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(o) as determined under methods of age assuranceAge assurance"Age assurance" means methods, including a range of methods, used to determine, estimate, or communicate the age or an age range of an online user.Wis. Stat. § 100.80(6)(a)(1) identified under subd. 1. a. 2. In promulgating rules under subd. 1., the department of justice shall do all of the following: a. Prioritize user privacy and accessibility over the accuracy of methods of age assuranceAge assurance"Age assurance" means methods, including a range of methods, used to determine, estimate, or communicate the age or an age range of an online user.Wis. Stat. § 100.80(6)(a)(1). b. Consider the size, financial resources, and technical capabilities of covered businessesCovered business"Covered business" means a business entity to which all of the following apply: 1. The business entity conducts business in this state. 2. The business entity generates a majority of its annual revenue from online services. 3. The business entity's online services, products, or features are reasonably likely to be accessed by a minor. 4. The business entity collects consumers' personal data or has consumers' personal data collected on its behalf by a processor. 5. The business entity, alone or jointly with others, determines the purposes and means of the processing of consumers' personal data.Wis. Stat. § 100.80(1)(g) and processorsProcessor"Processor" means a person who processes personal data on behalf of any of the following: 1. A covered business. 2. Another processor.Wis. Stat. § 100.80(1)(t). c. Consider the costs and effectiveness of available methods of age assuranceAge assurance"Age assurance" means methods, including a range of methods, used to determine, estimate, or communicate the age or an age range of an online user.Wis. Stat. § 100.80(6)(a)(1). d. Consider the impact of methods of age assuranceAge assurance"Age assurance" means methods, including a range of methods, used to determine, estimate, or communicate the age or an age range of an online user.Wis. Stat. § 100.80(6)(a)(1) on users' safety, utility, and experience. e. Consider whether and to what extent transparency measures would increase consumerConsumer1. Except as provided in subd. 2., "consumer" means an individual who is a resident of this state. 2. "Consumer" does not include any of the following: a. An individual acting in a commercial or employment context. b. An individual acting as an employee, owner, director, officer, or contractor of a business entity, nonprofit organization, or government agency whose communications or transactions with a covered business occur solely within the context of that individual's role with the business entity, nonprofit organization, or government agency.Wis. Stat. § 100.80(1)(f) trust in a method of age assuranceAge assurance"Age assurance" means methods, including a range of methods, used to determine, estimate, or communicate the age or an age range of an online user.Wis. Stat. § 100.80(6)(a)(1). f. Consider the efficacy of requiring covered businessesCovered business"Covered business" means a business entity to which all of the following apply: 1. The business entity conducts business in this state. 2. The business entity generates a majority of its annual revenue from online services. 3. The business entity's online services, products, or features are reasonably likely to be accessed by a minor. 4. The business entity collects consumers' personal data or has consumers' personal data collected on its behalf by a processor. 5. The business entity, alone or jointly with others, determines the purposes and means of the processing of consumers' personal data.Wis. Stat. § 100.80(1)(g) and processorsProcessor"Processor" means a person who processes personal data on behalf of any of the following: 1. A covered business. 2. Another processor.Wis. Stat. § 100.80(1)(t) to use previously collected data to determine user age. g. Consider the efficacy of requiring covered businessesCovered business"Covered business" means a business entity to which all of the following apply: 1. The business entity conducts business in this state. 2. The business entity generates a majority of its annual revenue from online services. 3. The business entity's online services, products, or features are reasonably likely to be accessed by a minor. 4. The business entity collects consumers' personal data or has consumers' personal data collected on its behalf by a processor. 5. The business entity, alone or jointly with others, determines the purposes and means of the processing of consumers' personal data.Wis. Stat. § 100.80(1)(g) and processorsProcessor"Processor" means a person who processes personal data on behalf of any of the following: 1. A covered business. 2. Another processor.Wis. Stat. § 100.80(1)(t) to adopt interoperable methods of age assuranceAge assurance"Age assurance" means methods, including a range of methods, used to determine, estimate, or communicate the age or an age range of an online user.Wis. Stat. § 100.80(6)(a)(1). h. Consider the efficacy of requiring covered businessesCovered business"Covered business" means a business entity to which all of the following apply: 1. The business entity conducts business in this state. 2. The business entity generates a majority of its annual revenue from online services. 3. The business entity's online services, products, or features are reasonably likely to be accessed by a minor. 4. The business entity collects consumers' personal data or has consumers' personal data collected on its behalf by a processor. 5. The business entity, alone or jointly with others, determines the purposes and means of the processing of consumers' personal data.Wis. Stat. § 100.80(1)(g) and processorsProcessor"Processor" means a person who processes personal data on behalf of any of the following: 1. A covered business. 2. Another processor.Wis. Stat. § 100.80(1)(t) to provide users with multiple options for age assuranceAge assurance"Age assurance" means methods, including a range of methods, used to determine, estimate, or communicate the age or an age range of an online user.Wis. Stat. § 100.80(6)(a)(1). (c) The department of justice shall periodically review and update the rules promulgated under par. (b) 1. as necessary to keep pace with emerging technology.

(8)(a)–(b) ENFORCEMENT. (a) A covered businessCovered business"Covered business" means a business entity to which all of the following apply: 1. The business entity conducts business in this state. 2. The business entity generates a majority of its annual revenue from online services. 3. The business entity's online services, products, or features are reasonably likely to be accessed by a minor. 4. The business entity collects consumers' personal data or has consumers' personal data collected on its behalf by a processor. 5. The business entity, alone or jointly with others, determines the purposes and means of the processing of consumers' personal data.Wis. Stat. § 100.80(1)(g) or processorProcessor"Processor" means a person who processes personal data on behalf of any of the following: 1. A covered business. 2. Another processor.Wis. Stat. § 100.80(1)(t) that violates this section or rules promulgated under this section commits an unfair trade practice in violation of s. 100.20. (b) In addition to any enforcement authority provided under s. 100.20, the department of justice may investigate an alleged violation of this section and may commence an action in the name of the state to restrain by temporary or permanent injunction a violation of this section.

(9)(a)(1)–(6) EXCLUSIONS; LIMITATIONS; RIGHTS AND FREEDOMS OF COVERED MINORSCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h). (a) This section does not apply to any of the following: 1. A government agency in the ordinary course of its operation. 2. Protected health information that a covered entity, as defined in 45 CFR 160.103, or a business associate, as defined in 45 CFR 160.103, processesProcess"Process" or "processing" means any operation performed, whether by manual or automated means, on personal data, such as the collection, use, storage, disclosure, analysis, deletion, modification, or other handling of personal data.Wis. Stat. § 100.80(1)(s) in accordance with the provisions of P.L. 104-191 or documents that a covered entity or business associate creates for the purpose of complying with the provisions of P.L. 104-191. 3. Information used only for public health activities and purposes described in 45 CFR 164.512. 4. Information that identifies a consumerConsumer1. Except as provided in subd. 2., "consumer" means an individual who is a resident of this state. 2. "Consumer" does not include any of the following: a. An individual acting in a commercial or employment context. b. An individual acting as an employee, owner, director, officer, or contractor of a business entity, nonprofit organization, or government agency whose communications or transactions with a covered business occur solely within the context of that individual's role with the business entity, nonprofit organization, or government agency.Wis. Stat. § 100.80(1)(f) in connection with any of the following: a. Activities that are subject to 45 CFR 46. b. Research on human subjects undertaken in accordance with good clinical practice guidelines issued by the International Council for Harmonisation of Technical Requirements for Pharmaceuticals for Human Use. c. Activities that are subject to the protections provided in 21 CFR 50 and 56. d. Research conducted in accordance with the requirements set forth in subd. 4. a. to c. or otherwise in accordance with state or federal law. 5. An entity whose primary purpose is journalism and a majority of whose employees engage in journalism. 6. A financial institution identified in 15 USC 6805 (a).

(9)(b)(1)–(3) Nothing in this section does any of the following: 1. Imposes liability in a manner that is inconsistent with 47 USC 230. 2. Prevents or precludes any covered minorCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) from deliberately or independently searching for, or specifically requesting, any media. 3. Infringes on the existing rights and freedoms of covered minorsCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) or discriminates against covered minorsCovered minor"Covered minor" is a consumer who a covered business actually knows is a minor or labels as a minor in accordance with rules promulgated under sub. (7) (b).Wis. Stat. § 100.80(1)(h) based on race, ethnicity, sex, disability, sexual orientation, gender identity, gender expression, religion, or national origin.