Changes in law aim to protect kids' online data