Comprehensive state data privacy laws have been sprouting across the U.S. in the past couple of years, making privacy compliance increasingly challenging for companies trying to keep up. And soon they might have to add one more to their list.

California lawmakers have passed the first bill in the U.S. that would require companies to add specific protections for children under the age of 18—and industry experts expect the impact of the bill to soon ripple across the country.