This bill updates the Children's Online Privacy Protection Act of 1998 to expand protections for both children under 13 and a newly defined group of teens aged 13 to 16. It broadens the definition of personal information to include biometric data and geolocation, extends coverage to mobile apps, online services, and connected devices, and prohibits companies from using teens' or children's data for targeted advertising. Websites and apps directed at kids or teens must let users delete their information, correct inaccuracies, and access what data has been collected about them, while also being barred from conditioning service on excessive data collection. The Federal Trade Commission gains new enforcement authority, including the creation of a dedicated Youth Privacy and Marketing Division, and state attorneys general can also sue companies that violate the law, with most provisions taking effect within 90 to 180 days after enactment. The bill additionally requires FTC studies on app oversight and a GAO study on teen privacy risks in financial technology products, both due within one to three years of enactment.