{"name":"State Children's Privacy Law Tracker","url":"https://isaaccalvo.com/child-privacy-laws","license":"https://creativecommons.org/licenses/by/4.0/","attribution":"Isaac A. Calvo — https://isaaccalvo.com/child-privacy-laws (CC BY 4.0)","disclaimer":"Not legal advice. Compiled from primary sources and reviewed monthly; laws and injunctions change fast — confirm against each entry’s sourceUrl before relying on it.","asOfDate":"2026-06-28","states":[{"state":"Alabama","abbr":"AL","rollupStatus":"enacted_future","laws":[{"name":"App Store Accountability Act","billNumber":"HB161 (Act 2026-59)","category":"app_store","status":"enacted_future","signedDate":"2026-02-17","effectiveDate":"2027-01-01","binds":["app_stores","developers"],"ages":"Minors under 18; age categories: under 13, 13-15, 16-17, 18+","appliesToUnder":18,"requires":"App store providers must request and verify each account holder's age category (under 13; 13-15; 16-17; 18+) using commercially reasonable methods or an AG-approved system. For minors (under 18), the store must affiliate the account with a verified parent account and obtain verifiable parental consent before the minor may download an app, purchase an app, or make in-app purchases. App developers receive age-category/consent signals and must re-request consent on significant changes. Existing accounts must be categorized/verified by Oct 1, 2027.","litigation":"None as of 2026-06-27. No suit filed against Alabama HB161; Alabama's law described as facing 'no legal challenge yet.' (Distinct from Texas's App Store Accountability Act, which is preliminarily enjoined, and Utah's, which faced a CCIA challenge.)","sourceUrl":"https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2026RS/HB161-enr.pdf"}]},{"state":"Alaska","abbr":"AK","rollupStatus":"pending","laws":[{"name":"App Stores, Parents, and Minors (App Store Accountability Act)","billNumber":"HB 46","category":"app_store","status":"pending","binds":["app_stores","developers"],"ages":"Under 18 (five tiers: child <13, younger teen 13-15, older teen 16-17, plus young adult / adult)","appliesToUnder":18,"requires":"App store providers would have to verify a user's age, assign an age category, and obtain verifiable parental consent before a minor downloads, purchases, or uses an app or makes in-app purchases; developers must share age-category data. Never advanced.","litigation":"None — never enacted.","sourceUrl":"https://www.akleg.gov/basis/Bill/Detail/34?Root=HB++46"},{"name":"Social Media Platforms and Minors","billNumber":"HB 318","category":"social_media","status":"pending","binds":["platforms"],"ages":"Minors under 18","appliesToUnder":18,"requires":"Would require safer default settings (private-by-default for minors), a non-addictive/chronological feed for known minors, bans on coercive design features (infinite scroll, autoplay), limits on targeted advertising, and stronger parental controls. Never passed a chamber.","litigation":"None — never enacted. Opposed in committee by NetChoice, CCIA, TechNet, TPA on First Amendment / privacy grounds.","sourceUrl":"https://www.akleg.gov/basis/Bill/Detail/34?Root=HB318"},{"name":"Social Media Regulation Act (provisions stripped from CSAM/AI-imagery bill)","billNumber":"HB 47","category":"social_media","status":"pending","binds":["platforms"],"ages":"Minors under 18","appliesToUnder":18,"requires":"House-added provisions would have required social-media age verification, parental consent and full parental account access for minors, a 10:30 p.m.-6:30 a.m. minor curfew, and limits on targeted ads and addictive features. The Senate CRA committee removed all of these in April 2026.","litigation":"None — the social-media provisions were never enacted; they were struck pre-enactment over First Amendment / Alaska privacy-clause concerns flagged by legislative counsel.","sourceUrl":"https://www.akleg.gov/basis/Bill/Detail/34?Root=HB++47"},{"name":"Social Media and Minors","billNumber":"SB 262","category":"social_media","status":"pending","binds":["platforms"],"ages":"Account ban for under 16; algorithmic-feed restriction for under 18","appliesToUnder":18,"requires":"Would prohibit Alaska residents under 16 from holding social-media accounts (with mandatory termination/deletion of existing under-16 accounts) and bar use of any under-18 account holder's personal data in personalized recommendation feeds. Never passed a chamber.","litigation":"None — never enacted. NetChoice testified in opposition, calling it an unconstitutional social-media ban (citing wins vs. similar AR/LA/OH/CA laws).","sourceUrl":"https://www.akleg.gov/basis/Bill/Detail/34?Root=SB262"}]},{"state":"Arizona","abbr":"AZ","rollupStatus":"pending","laws":[{"name":"HB 2920 — Software applications; minors; requirements (App Store Accountability Act)","billNumber":"HB 2920 (2026, 57th Leg., 2nd Reg. Sess.)","category":"app_store","status":"pending","effectiveDate":"Was to be ","binds":["app_stores","developers"],"ages":"Minors (under 18); age-category verification with parental consent for minors.","appliesToUnder":18,"requires":"Would have required app store providers to request and verify the age category of every account holder, affiliate a minor's account with a parent account, and obtain verifiable parental consent before each download, app purchase, or in-app purchase by a minor; developers would have had to verify age-category data via the app store's data-sharing methods and confirm parental consent. Enforced as consumer fraud (private right of action, min. $1,000/violation; AG civil penalties up to $75,000/violation).","litigation":"None. The bill never became law, so there is no injunction or active litigation against it. (Prior pass's 'LIT' flag was incorrect and is removed.)","sourceUrl":"https://www.azleg.gov/legtext/57leg/2R/bills/HB2920P.pdf"},{"name":"HB 2991 — Social media; online content; minors","billNumber":"HB 2991 (2026, 57th Leg., 2nd Reg. Sess.)","category":"social_media","status":"pending","binds":["operators","platforms"],"ages":"Minors under 14 (parental consent to contract); 14-15 (parental approval); platform defined by >=10% of U.S. DAU under 16.","appliesToUnder":16,"requires":"Would have barred a social media platform from forming an account-holder contract with a minor under 14 without parent/guardian consent, required parental approval for 14- and 15-year-olds, and given parents and minors mechanisms to terminate accounts and delete personal data. (A separate, severable provision required adult-content sites with >1/3 'sexual material harmful to minors' to verify visitors are 18+ — that provision is out of scope and dropped.)","litigation":"None. The bill never became law, so there is no injunction or active litigation against it. (NetChoice has enjoined analogous social-media age laws in other states, but not this Arizona bill, which never took effect. Prior pass's 'LIT' flag was incorrect and is removed.)","sourceUrl":"https://www.azleg.gov/legtext/57leg/2R/bills/HB2991P.pdf"}],"alsoOutOfScope":["HB 2112 (2025, Ch. 193) — Internet pornography; minors; age verification","HB 2991 adult-content age-verification provision — the severable 18+ age-gate for sites/apps with >1/3 'material harmful to minors'; the bill is tracked only for its social-media provisions."]},{"state":"Arkansas","abbr":"AR","rollupStatus":"enacted_enjoined","laws":[{"name":"Social Media Safety Act (SB 396 / Act 689 of 2023)","category":"social_media","status":"enacted_enjoined","signedDate":"2023-04-12","effectiveDate":"2023-09-01","binds":["operators","platforms"],"ages":"under 18","appliesToUnder":18,"requires":"Social media platforms must verify the age of account holders via a third-party vendor and obtain parental consent before a minor (under 18) may create an account.","litigation":"NetChoice, LLC v. Griffin, No. 5:23-cv-05105 (W.D. Ark.). PI 2023-08-31; permanent injunction 2025-03-31; on appeal to the 8th Circuit (briefing complete Feb 2026, undecided).","sourceUrl":"https://arkleg.state.ar.us/Bills/Detail?id=SB396&ddBienniumSession=2023%2F2023R"},{"name":"Social Media Safety Act amendment (SB 611 / Act 900 of 2025)","category":"social_media","status":"enacted_enjoined","signedDate":"2025-04-22","effectiveDate":"2026-04-21","binds":["operators","platforms"],"ages":"under 16 (some provisions under 18)","appliesToUnder":18,"requires":"Strengthens age-verification; narrows applicability to users under 16; requires parental consent for minors' accounts; nighttime notification curfew (cease notifications 10pm-6am CST unless modified by a parent); protective default privacy settings; adds a parental private right of action and raises penalties to $10,000 per violation.","litigation":"NetChoice, LLC v. Griffin, No. 5:25-cv-05140 (W.D. Ark.). Preliminary injunction granted 2026-04-20; on appeal to the 8th Circuit (heard with related Griffin appeals), undecided.","sourceUrl":"https://arkleg.state.ar.us/Bills/Detail?id=SB611&ddBienniumSession=2025%2F2025R"},{"name":"Regulation of Social Media Platform Design (SB 612 / Act 901 of 2025)","category":"social_media","status":"enacted_enjoined","signedDate":"2025-04-22","effectiveDate":"2025-08-03","binds":["operators","platforms"],"ages":"under 16","appliesToUnder":16,"requires":"Creates a private right of action and civil penalties for social media platforms that use a design, algorithm, or feature they knew or should have known causes a minor user to purchase a controlled substance, develop an eating disorder, commit/attempt suicide, or develop/sustain an addiction to the platform.","litigation":"NetChoice, LLC v. Griffin, No. 5:25-cv-05140 (W.D. Ark.). Preliminary injunction granted 2025-12-15; on appeal to the 8th Circuit, undecided.","sourceUrl":"https://arkleg.state.ar.us/Bills/Detail?id=SB612&ddBienniumSession=2025%2F2025R"}],"alsoOutOfScope":["Protection of Minors from Distribution of Harmful Material Act (SB 66 / Act 612 of 2023) — adult-content age-verification law; in force since 2023-07-31, unchallenged (unlike Act 689)"]},{"state":"California","abbr":"CA","rollupStatus":"in_force","laws":[{"name":"AB 1043 — Digital Age Assurance Act","billNumber":"AB 1043","category":"app_store","status":"enacted_future","signedDate":"2025-10-13","effectiveDate":"2027-01-01","binds":["app_stores","platforms","developers","operators"],"ages":"minors by age bracket (under 13, 13-15, 16-17)","appliesToUnder":18,"requires":"Requires OS providers to collect a user's birth date/age at account setup and pass an age-bracket signal via a real-time API to apps available in covered app stores; app developers must request and use that signal as a primary age indicator. AG-enforced civil penalties ($2,500 negligent / $7,500 intentional per affected child).","litigation":"No litigation filed or injunction entered as of 2026-06-27.","sourceUrl":"https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260AB1043"},{"name":"SB 976 — Protecting Our Kids from Social Media Addiction Act","billNumber":"SB 976","category":"social_media","status":"in_force","signedDate":"2024-09-20","effectiveDate":"2025-01-01","binds":["operators","platforms"],"ages":"under 18 (minors)","appliesToUnder":18,"requires":"Bars covered platforms from providing algorithmic 'addictive feeds' to known minors without verifiable parental consent; mandates default private mode and other minor-protective default settings; restricts overnight/school-hours notifications to minors; from Jan 1, 2027 requires age-assurance techniques per AG regulations. Enforced solely by the AG.","litigation":"NetChoice, LLC v. Bonta, No. 25-146 (9th Cir.) — Sept 9, 2025 panel UPHELD addictive-feed consent + default-private-mode provisions, enjoined ONLY the like-count/engagement-metrics provision; en banc rehearing DENIED Nov 6, 2025. Underlying case D.C. No. 5:24-cv-07885-EJD (N.D. Cal., J. Davila). NOT to be confused with No. 25-2366 (the CAADCA/AB 2273 case, J. Beth Labson Freeman, decided Mar 12, 2026).","sourceUrl":"https://cdn.ca9.uscourts.gov/datastore/opinions/2025/09/09/25-146.pdf"},{"name":"AB 56 — Social media: warning labels","billNumber":"AB 56","category":"social_media","status":"enacted_future","signedDate":"2025-10-13","effectiveDate":"2027-01-01","binds":["operators","platforms"],"ages":"under 18 (minors)","appliesToUnder":18,"requires":"Requires covered social media platforms to display a black-box mental-health warning to minor users on first daily access (>=25% of screen, >=10 seconds), again after 3 cumulative hours of use (non-dismissible, >=75% of screen, 30 seconds), and at least hourly thereafter, using prescribed Surgeon-General warning text.","litigation":"No suit filed as of 2026-06-27; industry anticipates a likely compelled-speech First Amendment challenge before the Jan 1, 2027 effective date, but none is on file.","sourceUrl":"https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202520260AB56"},{"name":"California Age-Appropriate Design Code Act (CAADCA)","billNumber":"AB 2273 (2021-2022), Chapter 320","category":"aadc","status":"enacted_enjoined","signedDate":"2022-09-15","effectiveDate":"2024-07-01","binds":["operators"],"ages":"Children under 18 (minors)","appliesToUnder":18,"requires":"Businesses offering online products/services likely to be accessed by children under 18 must configure default privacy settings to a high level of privacy for child users, estimate the age of child users or apply child protections to all users, provide age-appropriate privacy notices, and limit collection/use of children's personal data and precise geolocation. Core duties — data protection impact assessments, the 'materially detrimental to well-being'/best-interests data-use limits, profiling-by-default restrictions, and dark-patterns prohibitions — are currently blocked by court injunction and not enforceable.","litigation":"NetChoice, LLC v. Bonta (9th Cir.). On March 12, 2026 the Ninth Circuit vacated the district court's blanket preliminary injunction but held that the DPIA/risk-assessment requirement, the data-use 'materially detrimental'/best-interests limits, profiling-by-default restrictions, and dark-patterns provisions remain enjoined as unconstitutionally vague; the age-estimation, high-default-privacy-settings, child-appropriate privacy-policy, geolocation, and related provisions are no longer enjoined. Remanded to N.D. Cal. for further proceedings on age estimation and severability; the act is partially enjoined, not wholly blocked.","sourceUrl":"https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202120220AB2273"},{"name":"California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA) — minors' provisions","billNumber":"Cal. Civ. Code 1798.120 (CCPA, as amended by Prop 24 / CPRA)","category":"comprehensive","status":"in_force","signedDate":"2018-06-28","effectiveDate":"2020-01-01","binds":["operators"],"ages":"Consumers known to be under 16; teens 13-15 may self-consent, children under 13 require parent/guardian consent","appliesToUnder":16,"requires":"A business that has actual knowledge a consumer is under 16 may not sell or share that consumer's personal information unless it obtains affirmative opt-in consent: a consumer aged 13-15 may authorize the sale/sharing themselves, while for a consumer under 13 the parent or legal guardian must authorize it. Willfully disregarding a consumer's age is treated as actual knowledge, and minors are opted out by default (opt-in) rather than required to opt out.","sourceUrl":"https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.120."}]},{"state":"Colorado","abbr":"CO","rollupStatus":"in_force","laws":[{"name":"SB26-051 — Age Attestation on Computing Devices","category":"app_store","status":"enacted_future","signedDate":"2026-06-03","effectiveDate":"2028-07-01","binds":["app_stores","platforms","developers"],"ages":"minors (under 18; age-bracket signals to apps)","appliesToUnder":18,"requires":"OS providers operating a covered app store must, at account setup, collect the user's birth date/age/age bracket and expose a real-time age-signal API; covered apps must request an age signal at first launch or account creation, to support compliance with minor-data protections under the Colorado Privacy Act. Civil penalty up to $2,500 per violation.","litigation":"None found as of 2026-06-27.","sourceUrl":"https://leg.colorado.gov/bills/SB26-051"},{"name":"HB24-1136 — Healthier Social Media Use by Youth","category":"social_media","status":"enacted_enjoined","signedDate":"2024-06-06","effectiveDate":"2026-01-01","binds":["platforms","operators"],"ages":"under 18","appliesToUnder":18,"requires":"Social media platforms must provide users under 18 either information on social media's effects on developing brains/mental health OR a notification every 30 minutes once a minor has spent 1+ hour in 24 hours or is using the platform between 10 p.m. and 6 a.m. (this notification provision is enjoined). Also directs the Department of Education to build a resource bank for schools/parents.","litigation":"NetChoice v. Weiser, No. 1:25-cv-02538 (D. Colo.): preliminary injunction granted Nov 6, 2025 against the Section 4 notification mandate; Colorado appealed to the 10th Cir. (opening brief May 11, 2026); injunction NOT stayed and remains in force as of 2026-06-27.","sourceUrl":"https://leg.colorado.gov/bills/hb24-1136"},{"name":"HB26-1148 — Protections for Youth on Social Media","category":"social_media","status":"pending","binds":["platforms","operators"],"ages":"minors (under 18)","appliesToUnder":18,"requires":"Would have barred social-media sites from subjecting minors to engagement-maximizing algorithms or sending push notifications between midnight and 6 a.m., required default-highest privacy settings, mandated privacy/algorithm disclosures and a 15-day minor account-deletion tool, and imposed a 5% fee on minors' in-game/add-on transactions. Did not become law.","litigation":"None — bill failed in committee; no litigation.","sourceUrl":"https://leg.colorado.gov/bills/HB26-1148"},{"name":"Colorado Privacy Protections for Children's Online Data (SB24-041) — child data-protection / AADC-style provisions","billNumber":"SB24-041","category":"aadc","status":"in_force","signedDate":"2024-05-31","effectiveDate":"2025-10-01","binds":["operators"],"ages":"Minors under 18 (parental consent required for under-13; 13-17 may self-consent)","appliesToUnder":18,"requires":"A controller offering an online service, product, or feature to a consumer it actually knows or willfully disregards is a minor (under 18) must use reasonable care to avoid a heightened risk of harm to minors and complete a data protection assessment where such risk exists. Absent required consent, it may not process a minor's data beyond what is reasonably necessary, may not collect precise geolocation, and may not use any system design feature to significantly increase, sustain, or extend the minor's use of the service.","sourceUrl":"https://leg.colorado.gov/bills/sb24-041"}],"alsoOutOfScope":["SB25-201 — Require Age Checks for Online Sexual Materials","HB25-1231 — Protect Minors from Sexual or Pornographic Content","HCR26-1002 — Require Age Verification for Pornographic Material"]},{"state":"Connecticut","abbr":"CT","rollupStatus":"enacted_future","laws":[{"name":"An Act Concerning Online Safety (Substitute Senate Bill No. 5 / Public Act No. 26-15), Sec. 39 — social media covered-platform minor protections","billNumber":"SB 5 (2026); Public Act No. 26-15","category":"social_media","status":"enacted_future","signedDate":"2026-05-27","effectiveDate":"2028-01-01","binds":["platforms","operators"],"ages":"under 18 (covered minor)","appliesToUnder":18,"requires":"Covered operators of a 'covered platform' (services that recommend/select/prioritize user-generated media items, i.e., personalized recommender/algorithmic feeds) must use commercially reasonable and technically feasible methods to determine whether a covered user is a covered minor (under 18), and for minors must obtain verifiable parental/guardian consent before serving personalized recommendations; includes default protections (limits on algorithmic-feed access, sensitive-content and unconnected-contact restrictions) and parental controls.","litigation":"No suit filed as of 2026-06-27. NetChoice and CCIA testified against SB 5 during the legislative session; Connecticut is not listed on NetChoice's litigation center as of 2026-06-27. Not enjoined.","sourceUrl":"https://www.cga.ct.gov/2026/ACT/PA/PDF/2026PA-00015-R00SB-00005-PA.PDF"},{"name":"Connecticut minors' online data protection framework (CTDPA §§ 42-529a to 42-529b), as enacted by SB 1295 / Public Act 25-113","billNumber":"SB 1295 (Public Act 25-113)","category":"aadc","status":"enacted_future","signedDate":"2025-06-24","effectiveDate":"2026-07-01","binds":["operators"],"ages":"Minors under 18 (consumers the controller has actual knowledge of, or wilfully disregards, are minors); under-13 parental consent satisfied via COPPA","appliesToUnder":18,"requires":"A controller offering an online service, product or feature to consumers it knows (or wilfully disregards) are minors must use reasonable care to avoid any heightened risk of harm to minors, and may not use any system design feature to significantly increase, sustain or extend a minor's use of the service. It must provide default safeguards preventing adults from sending unsolicited communications to non-connected minors, may not deploy dark-pattern consent mechanisms, must limit precise geolocation collection to what is strictly necessary (with an on-signal), and must conduct data protection and profiling impact assessments addressing foreseeable harm to minors.","sourceUrl":"https://www.cga.ct.gov/2025/ACT/PA/PDF/2025PA-00113-R00SB-01295-PA.PDF"},{"name":"Connecticut Data Privacy Act (CTDPA) — minors' provisions","billNumber":"SB 6 (2022, Public Act 22-15); amended by SB 3 (2023, Public Act 23-56)","category":"comprehensive","status":"in_force","signedDate":"2022-05-10","effectiveDate":"2023-07-01","binds":["operators"],"ages":"Consumers known to be 13–15 (under 16); children under 13 handled per COPPA","appliesToUnder":16,"requires":"Under the currently in-force CTDPA, a controller must obtain opt-in consent before processing for targeted advertising, selling, or profiling the personal data of a consumer the controller knows (or wilfully disregards) is at least 13 but younger than 16. Personal data of a consumer known to be a child (under 13) must be processed in accordance with COPPA. Consent mechanisms may not use dark patterns to subvert user choice. (Effective July 1, 2026, SB 1295 replaces this consent model with a categorical ban on targeted advertising and sale of personal data for all known minors under 18.)","sourceUrl":"https://www.cga.ct.gov/2022/ACT/PA/PDF/2022PA-00015-R00SB-00006-PA.PDF"}]},{"state":"Delaware","abbr":"DE","rollupStatus":"none","laws":[{"name":"Delaware Personal Data Privacy Act — minors' provisions","billNumber":"HB 154","category":"comprehensive","status":"in_force","signedDate":"2023-09-11","effectiveDate":"2025-01-01","binds":["operators"],"ages":"Known minors 13-17; children under 13 per COPPA","appliesToUnder":18,"requires":"A controller must not process the personal data of a consumer for targeted advertising or sell it without the consumer's consent where the controller has actual knowledge or willfully disregards that the consumer is at least 13 but under 18 (Del. Code tit. 6 § 12D-106(a)(7)). Sensitive data concerning a known child (under 13) may not be processed without parental consent, and controllers complying with COPPA's verifiable parental consent are deemed compliant (§ 12D-106(a)(4)). Processing minors' data for these purposes also triggers a data protection assessment.","sourceUrl":"https://delcode.delaware.gov/title6/c012d/index.html"}]},{"state":"Florida","abbr":"FL","rollupStatus":"in_force","laws":[{"name":"HB 3 (2024) — Online Protections for Minors (social media account restrictions, Fla. Stat. s. 501.1736)","category":"social_media","status":"in_force","signedDate":"2024-03-25","effectiveDate":"2025-01-01","binds":["platforms","operators"],"ages":"Under 14 (barred entirely); 14-15 (allowed only with parental consent)","appliesToUnder":16,"requires":"Covered social media platforms must prohibit account creation/maintenance by minors under 14 (terminate existing under-14 accounts), and may allow 14- and 15-year-olds only with verifiable parental consent; 90-day account-termination process for non-consenting 14-15 accounts.","litigation":"CCIA & NetChoice v. Uthmeier (N.D. Fla. / 11th Cir.). PI granted June 2025; 11th Circuit stayed the PI Nov 25, 2025 (2-1, design-feature rationale; Rosenbaum, J., dissenting). Law enforceable pending appeal; expedited oral argument set for week of Feb 23, 2026. No final merits ruling as of 2026-06-27.","sourceUrl":"https://www.flsenate.gov/Session/Bill/2024/3/BillText/er/PDF"},{"name":"Florida Digital Bill of Rights (SB 262) — minors' provisions (Fla. Stat. 501.702/501.71x)","billNumber":"SB 262 (2023)","category":"comprehensive","status":"in_force","signedDate":"2023-06-06","effectiveDate":"2024-07-01","binds":["operators"],"ages":"Known children under 18 (COPPA-consent for under 13; affirmative authorization for 13-17)","appliesToUnder":18,"requires":"Under Florida's comprehensive privacy law, the personal data of a 'known child' (a child the controller has actual knowledge of, or willfully disregards as, under 18) is treated as sensitive data; a controller may not process such sensitive data without consent — meaning COPPA-compliant verifiable parental consent for a known child under 13, or the affirmative authorization of a known child aged 13-17. Sensitive data, including a known child's data, may not be sold without the consumer's prior consent, and consent cannot be obtained via broad terms of use, passive actions, or dark patterns.","sourceUrl":"https://www.flsenate.gov/Session/Bill/2023/262/BillText/er/HTML"}],"alsoOutOfScope":["HB 3 (2024) — Age verification for online access to material harmful to minors (Fla. Stat. s. 501.1737; adult sites >33.3% harmful material must verify users are 18+; effective Jan. 1, 2025)."]},{"state":"Georgia","abbr":"GA","rollupStatus":"enacted_enjoined","laws":[{"name":"SB 351 — Protecting Georgia's Children on Social Media Act of 2024 (Act 463), social media provisions","billNumber":"SB 351 (2023-2024 Reg. Sess.) / Act 463","category":"social_media","status":"enacted_enjoined","signedDate":"2024-04-23","effectiveDate":"2025-07-01","binds":["operators","platforms"],"ages":"under 16","appliesToUnder":16,"requires":"Age verification of all users via commercially reasonable efforts; verifiable parental/guardian consent before a minor under 16 can create or maintain a social media account; limits on data collection and targeted advertising to minors under 16; treat unverifiable users as minors.","litigation":"NetChoice v. Carr (N.D. Ga., No. 1:25-cv-02422). PI granted June 26, 2025 (Judge Amy Totenberg), First Amendment grounds. On appeal to 11th Circuit (No. 25-12436); oral argument March 10, 2026; no appellate ruling as of 2026-06-27. Injunction currently in effect.","sourceUrl":"https://www.legis.ga.gov/legislation/66023"},{"name":"Georgia Age-Appropriate Design Code Act (SB 495)","billNumber":"SB 495","category":"aadc","status":"pending","binds":["operators","platforms"],"ages":"Minors under 18 (consumer the covered entity knows or should reasonably know is under 18)","appliesToUnder":18,"requires":"Would require covered entities to configure high-privacy default settings for minors (push notifications and interaction/like counts off by default, restricted location sharing), prohibit enumerated high-risk data practices and addictive/compulsive-use design features directed at minors, impose criteria on algorithmic feeds served to minors, and require risk evaluation of design features before deployment to minors. INTRODUCED in the 2025-2026 session (Senate read and referred to committee Feb 12, 2026) but it advanced no further and DIED when the General Assembly adjourned sine die on April 2, 2026; it is not law.","sourceUrl":"https://www.legis.ga.gov/api/legislation/document/20252026/241694"}],"alsoOutOfScope":["SB 351 (Act 463) — adult-content / 'material harmful to minors' age-verification (O.C.G.A. § 39-5-5; sites >33.3% harmful material must verify users are 18+; effective July 1, 2025; not enjoined in NetChoice v. Carr).","SB 467 (2025-2026 Reg. Sess.) — App Store Accountability bill (would require app stores to verify ages and get parental consent for minors' app downloads); died in Senate committee at 2026 sine die."]},{"state":"Hawaii","abbr":"HI","rollupStatus":"none","laws":[],"alsoOutOfScope":["Relating to the Internet (Pornographic Materials; Minors; Age Verification) — HB 1212 (2025, carried over to 2026) — adult-content age-verification bill; died in committee at 2026 sine die."]},{"state":"Idaho","abbr":"ID","rollupStatus":"enacted_future","laws":[{"name":"Stop Harms from Addictive Social Media Act (HB 542 / Session Law Chapter 268)","billNumber":"HB 542 (H0542), 2026 Reg. Sess.; Session Law Chapter 268","category":"social_media","status":"enacted_future","signedDate":"2026-04-02","effectiveDate":"2026-07-01","binds":["operators","platforms"],"ages":"16 and younger ('Child' = Idaho resident sixteen (16) years of age or younger); parental consent required for Child accounts","appliesToUnder":17,"requires":"Covered social media platforms must determine whether a user is a 'Child' (Idaho resident 16 or younger) via self-reported age at account creation plus age estimation after cumulative use thresholds (25/50/100 hours in a 6-month window). For Child accounts, platforms must obtain verifiable parental consent; default all privacy settings to the most protective; disable/limit addictive design features (infinite scroll, autoplay, push notifications, public like counts); bar algorithmic feeds and targeted paid advertising; provide parental time-limit controls; and terminate the account on parental request. Enforced via private right of action.","litigation":"Opposed by NetChoice and CCIA (veto request, committee testimony) on First Amendment / digital-ID / privacy grounds, but no lawsuit filed or injunction issued as of 2026-06-27. Not enjoined.","sourceUrl":"https://legislature.idaho.gov/sessioninfo/2026/legislation/H0542/"}],"alsoOutOfScope":["HB 498 (2024) — Online Child Safety Act (Idaho Code Title 6, Chapter 38, secs. 6-3801 to 6-3809): adult-content age verification enforced solely via private right of action; effective July 1, 2024."]},{"state":"Illinois","abbr":"IL","rollupStatus":"pending","laws":[{"name":"Children's Online Social Media Safety Act (HB 5511)","billNumber":"HB 5511","category":"social_media","status":"pending","effectiveDate":"2028-01-01","binds":["operators","platforms"],"ages":"under 13; 13-15; 16-17; 18+","appliesToUnder":18,"requires":"OS providers (Apple/Google) must offer an age-indication interface at device/account setup and supply age-category signals (under 13, 13-15, 16-17, 18+) to apps that request them by no later than 1/1/2028; social-media platform operators must conduct age verification and apply default minor protections (limit algorithmic feeds, restrict profile visibility, location sharing, nighttime notifications). Enforced by the Illinois Attorney General; civil penalties up to $2,500/child (negligent) and $7,500/child (intentional).","litigation":"No injunction (bill unsigned, cannot be enjoined). NetChoice submitted a veto-request letter to Gov. Pritzker and signaled likely First Amendment litigation if the bill becomes law.","sourceUrl":"https://ilga.gov/legislation/BillStatus?DocNum=5511&GAID=18&DocTypeID=HB&LegId=167486&SessionID=114"},{"name":"Parental Consent for Social Media Act (SB 2316)","billNumber":"SB 2316","category":"social_media","status":"pending","binds":["operators","platforms"],"ages":"under 18","appliesToUnder":18,"requires":"Would bar social-media platforms from allowing Illinois minors (<18) to hold accounts without express parental/guardian consent; require third-party 'reasonable age verification' before access; prohibit minor access 10pm-6am; bar retention of identifying info after access is granted. Civil penalties up to $2,500/violation.","litigation":"None — not enacted.","sourceUrl":"https://ilga.gov/legislation/BillStatus?DocNum=2316&GAID=18&DocTypeID=SB&LegId=162163&SessionID=114"},{"name":"Illinois Age-Appropriate Design Code Act","billNumber":"SB51","category":"aadc","status":"pending","binds":["operators"],"ages":"Children under 18","appliesToUnder":18,"requires":"Businesses offering an online service, product, or feature likely to be accessed by children would have to complete and maintain a data protection impact assessment, configure default privacy settings to a high level of privacy for children, and turn off precise geolocation collection by default. It bans profiling children by default and using dark patterns to lead children to provide unnecessary personal data, unless a compelling, child-best-interest justification exists.","sourceUrl":"https://www.ilga.gov/Legislation/BillStatus?DocTypeID=SB&DocNum=51&GAID=18&SessionID=114&LegID=157156"}]},{"state":"Indiana","abbr":"IN","rollupStatus":"enacted_future","laws":[{"name":"House Enrolled Act 1408 (2026) — Restricting Minor Access to Social Media","billNumber":"HB 1408 / HEA 1408 (2026)","category":"social_media","status":"enacted_future","signedDate":"2026-03","effectiveDate":"2027-01-01","binds":["operators","platforms"],"ages":"under 16","appliesToUnder":16,"requires":"Covered large social media platforms (>=$1B global revenue, algorithmic feeds/infinite-scroll/autoplay, significant teen usage) must use commercially reasonable means to determine whether an account requester is an Indiana resident under 16 and obtain verifiable parental consent before account creation. Under-16 accounts get locked safety settings (restricted DMs, no search visibility, no algorithmic recommendations, no behavior-based ads, addictive features disabled); platforms must provide a parallel parent/monitoring account and re-verify age after usage thresholds until an account is held continuously for 10 years. Enforced by the AG as a deceptive act under the Deceptive Consumer Sales Act.","litigation":"No suit filed / no injunction as of 2026-06-27; First Amendment challenge widely anticipated once effective, given courts blocking comparable AR, OH, CA, FL, GA social media laws.","sourceUrl":"https://iga.in.gov/legislative/2026/bills/house/1408/details"},{"name":"Indiana Consumer Data Protection Act — minors' provisions","billNumber":"SB 5 (2023)","category":"comprehensive","status":"in_force","signedDate":"2023-05-01","effectiveDate":"2026-01-01","binds":["operators"],"ages":"Known children under 13","appliesToUnder":13,"requires":"The personal data of a consumer the controller actually knows to be a child (under 13) is classified as sensitive data, so the controller must obtain opt-in consent before processing it. Such known-child data must be processed in accordance with the federal Children's Online Privacy Protection Act (COPPA); COPPA-compliant parental consent satisfies the statute's consent requirement. The Act sets no separate heightened opt-in band for teens aged 13-17 (it follows the Virginia VCDPA model).","sourceUrl":"https://iga.in.gov/ic/2024/Title_24/Article_15.pdf"}],"alsoOutOfScope":["SB 17 (2024) / Public Law 98-2024, Ind. Code 24-4-23 — Age Verification for Material Harmful to Minors; adult-site age-verification law, effective 2024-07-01; in force after FSC v. Paxton (2025).","HB 1321 (2025) — Minor access to social media / age verification"]},{"state":"Iowa","abbr":"IA","rollupStatus":"none","laws":[{"name":"Iowa Consumer Data Protection Act (ICDPA) — minors' provisions","billNumber":"SF 262","category":"comprehensive","status":"in_force","signedDate":"2023-03-28","effectiveDate":"2025-01-01","binds":["operators"],"ages":"Known children under 13 (no separate teen 13-17 band)","appliesToUnder":13,"requires":"The personal data collected from a known child is treated as 'sensitive data,' and a controller must not process a known child's sensitive data except in accordance with the federal Children's Online Privacy Protection Act (COPPA), 15 U.S.C. 6501 et seq. — i.e., per COPPA's verifiable-parental-consent regime. A known child's parent or legal guardian may exercise the child's consumer rights on the child's behalf. Iowa does not impose a separate heightened opt-in/targeted-advertising regime for teens 13-17; its child-specific duty is the COPPA tie-in for under-13s only.","sourceUrl":"https://www.legis.iowa.gov/docs/code/715D.pdf"}]},{"state":"Kansas","abbr":"KS","rollupStatus":"pending","laws":[{"name":"Kansas Age-Appropriate Design Code Act (SB 499)","billNumber":"SB 499","category":"aadc","status":"pending","binds":["operators"],"ages":"Covered minors under 18 (a consumer the business knows, or has objective circumstances to believe, is under 18)","appliesToUnder":18,"requires":"Would have required covered businesses (entities doing business in Kansas, earning most revenue from online services, whose products are reasonably likely to be accessed by a minor) to set covered minors' privacy settings to the highest level by default, and to not collect, sell, share, or retain a minor's personal data beyond what is necessary for a service the minor is actively and knowingly engaged with. It barred using a minor's personal data to recommend/prioritize media (algorithmic feeds) absent the minor's express request, and required businesses to assess and mitigate design features that risk encouraging compulsive use in minor users.","litigation":"Introduced Feb 9, 2026 (S. Federal & State Affairs Committee); not enacted as of 2026-06-28.","sourceUrl":"https://www.kslegislature.gov/li/b2025_26/measures/sb499/"}],"alsoOutOfScope":["SB 394 (2023-2024 Session) / Chapter 28, 2024 Session Laws of Kansas — Age Verification for Certain Websites: adult-content age-verification law; effective July 1, 2024, in force."]},{"state":"Kentucky","abbr":"KY","rollupStatus":"pending","laws":[{"name":"HB 12 (2025 RS) — AN ACT relating to online protections for minors (combined app store + social media)","category":"app_store","status":"pending","binds":["app_stores","developers","platforms"],"ages":"under 14 (prohibited); 14-15 (parental consent); minors generally for app-store consent","appliesToUnder":16,"requires":"App store providers verify user ages and obtain parental consent for minors; share age-bracket signals with developers; protect age-verification data. Social media platforms prohibit under-14 account holders, require parental consent for ages 14-15, and provide account/data termination. Office of Consumer Protection to set age-verification standards.","litigation":"None — bill never became law; no litigation.","sourceUrl":"https://apps.legislature.ky.gov/record/25rs/hb12.html"},{"name":"HB 632 (2026 RS) — AN ACT relating to online protections for minors (App Store Accountability)","category":"app_store","status":"pending","effectiveDate":"none (died","binds":["app_stores","developers"],"ages":"minors (under 18), with parental consent tiers","appliesToUnder":18,"requires":"App store providers verify user ages, obtain verifiable parental consent for minor accounts, share age-bracket data with developers, and protect age-verification data. Office of Consumer Protection to establish standards for age-verification methods.","litigation":"None — bill never became law; no litigation.","sourceUrl":"https://apps.legislature.ky.gov/record/26rs/hb632.html"},{"name":"HB 227 (2026 RS) — AN ACT relating to addictive online platforms","category":"social_media","status":"pending","binds":["platforms","operators"],"ages":"under 16 (parental consent); 15 or younger (account disabled pending consent)","appliesToUnder":16,"requires":"Large platforms (≥$1B annual revenue) strengthen age verification; use age estimation and disable accounts of users identified as 15 or younger until verified parental consent; limit addictive engagement features (auto-scroll, algorithmic feeds) for minors; restrict predatory data collection. AG enforcement + private right of action; fines $10,000+.","litigation":"None — bill never became law; no litigation.","sourceUrl":"https://apps.legislature.ky.gov/record/26rs/hb227.html"},{"name":"Kentucky Kids Code (Age-Appropriate Design Code)","billNumber":"HB 633 (2026 RS)","category":"aadc","status":"pending","binds":["operators","platforms"],"ages":"Minors under 18","appliesToUnder":18,"requires":"Would require online services likely accessed by minors to default to high-privacy settings for minors, restrict targeted advertising and the sale of minors' personal data, and prohibit dark patterns and addictive/compulsive-use design features aimed at minors (EPIC-model Age-Appropriate Design Code). Introduced 02/12/2026 by Rep. V. Grossl; referred to the House Small Business & Information Technology Committee 02/20/2026 and pending there as of today.","sourceUrl":"https://apps.legislature.ky.gov/record/26rs/hb633.html"},{"name":"Kentucky Consumer Data Protection Act (KCDPA) — minors' provisions","billNumber":"HB 15 (2024 RS)","category":"comprehensive","status":"in_force","signedDate":"2024-04-04","effectiveDate":"2026-01-01","binds":["operators"],"ages":"Known children under 13 (COPPA); no separate teen opt-in band","appliesToUnder":13,"requires":"Personal data collected from a 'known child' is classified as 'sensitive data,' so a controller may not process it without consent and must process it in accordance with the federal Children's Online Privacy Protection Act (COPPA, 15 U.S.C. 6501 et seq.); a controller that satisfies COPPA's verifiable-parental-consent requirements is deemed compliant. A parent or legal guardian may exercise the child's consumer rights on the child's behalf. Kentucky follows the Virginia model and does not impose a separate heightened opt-in regime for teens 13-17.","sourceUrl":"https://apps.legislature.ky.gov/record/24rs/hb15.html"}],"alsoOutOfScope":["HB 278 (2024 RS) — adult-content/pornography age-verification law. Adds age-verification and civil-liability provisions to KRS Ch. 436; signed Apr. 5, 2024, in effect since July 15, 2024."]},{"state":"Louisiana","abbr":"LA","rollupStatus":"in_force","laws":[{"name":"App Store Accountability Act (HB 570, 2025 RS, Act 481, as amended by HB 977, 2026 RS, Act 185)","billNumber":"HB 977 (Act 185), amending HB 570 (Act 481)","category":"app_store","status":"enacted_future","signedDate":"2026-05-15","effectiveDate":"2027-07-01","binds":["app_stores","developers"],"ages":"under 18 (with 13-15 and 16-17 sub-tiers)","appliesToUnder":18,"requires":"Covered app store providers must verify the age of individuals at account creation, sort users into age categories (child, younger teen 13-15, older teen 16-17, adult 18+), link minors' app store accounts to a parent account, and obtain verifiable parental consent before a minor downloads/purchases an app or makes in-app purchases; developers may rely on app-store-provided age signals and parental-consent mechanisms; also requires accurate age ratings and bars enforcing terms of service on minors without parental consent.","litigation":"No Louisiana injunction yet; NetChoice has signaled intent to challenge on First Amendment grounds, paralleling preliminarily-enjoined Texas/Utah app-store accountability acts.","sourceUrl":"https://www.legis.la.gov/legis/ViewDocument.aspx?d=1475238"},{"name":"Targeted Advertising / Minors' Data Protection Act (HB 577, 2024 RS, Act 656)","category":"social_media","status":"in_force","signedDate":"2024-06-18","effectiveDate":"2025-07-01","binds":["platforms","operators"],"ages":"under 18","appliesToUnder":18,"requires":"Social media platforms with over 1 million global users are prohibited from displaying targeted advertising to Louisiana users the platform has actual knowledge are under 18, and from selling such users' sensitive personal data; AG-enforced with a 45-day cure period and civil penalties up to $10,000 per violation.","litigation":"None known.","sourceUrl":"https://legis.la.gov/legis/ViewDocument.aspx?d=1382680"},{"name":"Kids Online Protection and Anti-Grooming Act (HB 37, 2025 RS, Act 236)","category":"social_media","status":"in_force","signedDate":"2025-06-20","effectiveDate":"2026-06-01","binds":["platforms","operators"],"ages":"under 18","appliesToUnder":18,"requires":"Online platforms that contract with minors owe a duty of care: default privacy protections for minors, barring adults from connecting with or messaging minors without consent, restricting sharing of a minor's precise geolocation, limiting account visibility, and providing parents/legal representatives tools to manage connections, settings, and microtransactions; AG-enforced with civil fines up to $10,000 per violation and a notice-and-cure process.","litigation":"None known against Act 236 (distinct from the SB 162/Act 456 injunction).","sourceUrl":"https://www.legis.la.gov/legis/ViewDocument.aspx?d=1425492"},{"name":"Secure Online Child Interaction and Age Limitation Act (SB 162, 2023 RS, Act 456)","category":"social_media","status":"enacted_enjoined","signedDate":"2023-06-28","effectiveDate":"2024-07-01","binds":["platforms","operators"],"ages":"under 16","appliesToUnder":16,"requires":"Social media companies to verify the age of Louisiana account holders, obtain verifiable parental consent for users under 16, provide parental controls, restrict targeted advertising to minors, restrict data collection on minors, and bar adults from direct-messaging unconnected minors.","litigation":"NetChoice v. Murrill, No. 3:25-cv-00231 (M.D. La.) — summary judgment + permanent injunction for NetChoice on Dec 15, 2025; on appeal to the U.S. Court of Appeals for the 5th Circuit (briefing ongoing as of mid-2026). Injunction not stayed.","sourceUrl":"https://legis.la.gov/legis/BillInfo.aspx?i=244520"}],"alsoOutOfScope":["Material Harmful to Minors Act (HB 142, 2022 RS, Act 440) — adult-content / porn-site age-verification law (La. R.S. 9:2800.28), effective Jan. 1, 2023; first in the nation, in force."]},{"state":"Maine","abbr":"ME","rollupStatus":"none","laws":[]},{"state":"Maryland","abbr":"MD","rollupStatus":"in_force","laws":[{"name":"Consumer Protection - Application Store Accountability Act","billNumber":"HB 1179 (2026)","category":"app_store","status":"pending","effectiveDate":"2026-10-01","binds":["app_stores","developers"],"ages":"under 18","appliesToUnder":18,"requires":"Would require application store providers to verify the age category of account holders and, for minors (under 18), obtain verifiable parental consent before a minor downloads/purchases an app or makes in-app purchases; re-consent on significant app changes. Developers must use the store-provided age signals. Violations are unfair/abusive/deceptive trade practices under the Maryland Consumer Protection Act (civil penalty up to $7,500 per violation).","sourceUrl":"https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/hb1179?ys=2026RS"},{"name":"Maryland Age-Appropriate Design Code Act (Maryland Kids Code)","billNumber":"SB 571 / HB 603 (2024)","category":"age_verification","status":"in_force","signedDate":"2024-05-09","effectiveDate":"2024-10-01","binds":["operators","platforms"],"ages":"under 18","appliesToUnder":18,"requires":"Covered for-profit online services reasonably likely to be accessed by children must complete data protection impact assessments (DPIAs), configure high-privacy default settings for minors, prohibit collection/use/sale of children's personal data beyond what is reasonably necessary, and avoid dark patterns / design features detrimental to children. Penalties up to $2,500 per child (negligent) and $7,500 per child (intentional).","litigation":"NetChoice v. Brown, No. 1:25-cv-00322 (D. Md.). Filed Feb 3, 2025. Court denied State's motion to dismiss Nov 24, 2025; NO injunction in effect; law remains enforceable; case proceeding to discovery as of 2026-06-27.","sourceUrl":"https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB0603?ys=2024RS"},{"name":"Maryland Age-Appropriate Design Code Act (Maryland Kids Code)","billNumber":"SB 571 (2024, Ch. 460; cross-filed HB 603)","category":"aadc","status":"in_force","signedDate":"2024-05-09","effectiveDate":"2024-10-01","binds":["operators"],"ages":"Children under 18 (consumers under 18 reasonably likely to access the service)","appliesToUnder":18,"requires":"Online product/service operators whose offerings are reasonably likely to be accessed by children (under 18) must complete a data protection impact assessment, configure default privacy settings to the highest level for children, and act in the best interests of children. They are barred from processing children's personal data in ways materially detrimental to children, from using dark patterns, and from profiling or using a child's data in harmful ways absent specified safeguards. The law relies on a 'likely to be accessed by children' audience standard rather than mandating age verification.","litigation":"NetChoice LLC v. Brown, No. 1:25-cv-00367 (D. Md.). On Nov. 24, 2025, the district court denied Maryland's motion to dismiss, allowing NetChoice's First Amendment, vagueness, and COPPA/Section 230 preemption claims to proceed to discovery. The court did NOT enjoin the statute, so the Kids Code remains in effect as of 2026-06-28; NetChoice filed an amended complaint in April 2026 and the case is ongoing.","sourceUrl":"https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/sb0571?ys=2024RS"},{"name":"Maryland Online Data Privacy Act of 2024 (MODPA) — minors' provisions","billNumber":"SB 541 (2024, Ch. 455; cross-filed HB 567)","category":"comprehensive","status":"in_force","signedDate":"2024-05-09","effectiveDate":"2025-10-01","binds":["operators"],"ages":"Known children under 13; minors under 18","appliesToUnder":18,"requires":"A controller may not process or sell the personal data of a consumer it knows or should know is under 18 for purposes of targeted advertising, and may not 'sell' such a minor's personal data — these are flat prohibitions with no consent override. Personal data of a consumer the controller knows or has reason to know is a child (under 13 per COPPA) is treated as sensitive data, which may not be processed without obtaining consent in accordance with COPPA and may not be sold.","sourceUrl":"https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/sb0541?ys=2024RS"}],"alsoOutOfScope":["HB 394 (2025) - Civil Actions - Distribution of Obscene Material to Minors and Age Verification Information; adult-site age-verification bill, died in House Judiciary (hearing 2/5/2025, no vote).","HB 693 (2026) - Civil Actions - Distribution of Obscene Material to Minors. Reintroduces 2025's HB 394 (adult-site age verification); died in House Judiciary at 2026 session end.","HB 908 (2026) - Civil Actions - Failure to Restrict Distribution of Sexual Material Harmful to Minors — adult-content age-verification civil-liability bill; withdrawn by sponsor March 16, 2026."]},{"state":"Massachusetts","abbr":"MA","rollupStatus":"pending","laws":[{"name":"An Act protecting children from social media and prohibiting cell phones in schools (House youth technology / social media age-verification bill)","billNumber":"H.5366 (engrossed House version of S.2581)","category":"social_media","status":"pending","effectiveDate":"2026-10-01","binds":["platforms","operators"],"ages":"under 14 barred; 14-15 require verifiable parental consent","appliesToUnder":16,"requires":"Would require social media platforms to verify user age, bar account holders under 14, and obtain verifiable parental consent for users 14-15; the AG would write age-verification regulations. Not yet law.","litigation":"None. Bill is not enacted, so no enforcement litigation. Privacy/LGBTQ-youth advocates (Fight for the Future, ACLU-MA) oppose the age-verification mandate.","sourceUrl":"https://malegislature.gov/Bills/194/H5366"}]},{"state":"Michigan","abbr":"MI","rollupStatus":"pending","laws":[{"name":"SB 757 (2025-2026) — Stop Addictive Feeds Exploitation (SAFE) for Kids Act","category":"social_media","status":"pending","binds":["platforms","operators"],"ages":"minors (under 18)","appliesToUnder":18,"requires":"Prohibits social media platforms from providing addictive, algorithmic personalized feeds and certain notifications to known minors absent parental consent; AG enforcement with civil fines.","litigation":"None — bill is not yet enacted, so it cannot be and is not enjoined.","sourceUrl":"https://www.legislature.mi.gov/Bills/Bill?ObjectName=2025-SB-0757"},{"name":"SB 758 (2025-2026) — Kids Over Clicks (minor data protection)","category":"social_media","status":"pending","binds":["platforms","operators"],"ages":"minors (under 18)","appliesToUnder":18,"requires":"Imposes data-minimization / minor-data deletion and default safety settings duties on platforms for minor users.","litigation":"None — bill is not yet enacted, so it cannot be and is not enjoined.","sourceUrl":"https://www.legislature.mi.gov/Bills/Bill?ObjectName=2025-SB-0758"},{"name":"SB 759 (2025-2026) — Kids Over Clicks (minor data/privacy)","category":"social_media","status":"pending","binds":["platforms","operators"],"ages":"minors (under 18)","appliesToUnder":18,"requires":"Stricter data privacy and safety settings for minors on digital platforms; parental controls over a minor's account.","litigation":"None — bill is not yet enacted, so it cannot be and is not enjoined.","sourceUrl":"https://www.legislature.mi.gov/Bills/Bill?ObjectName=2025-SB-0759"},{"name":"SB 760 (2025-2026) — Leading Ethical AI Development (LEAD) for Kids Act","category":"social_media","status":"pending","binds":["platforms","operators","developers"],"ages":"minors (under 18)","appliesToUnder":18,"requires":"Restricts minors' access to AI chatbots capable of encouraging self-harm, illegal activity, or sexually explicit interaction; design/safety duties on companion-AI products aimed at minors.","litigation":"None — bill is not yet enacted, so it cannot be and is not enjoined.","sourceUrl":"https://www.legislature.mi.gov/Bills/Bill?ObjectName=2025-SB-0760"},{"name":"HB 4388 (2025-2026) — Social Media Regulation / Protection Act (minors)","category":"social_media","status":"pending","binds":["platforms","operators"],"ages":"minors (under 18)","appliesToUnder":18,"requires":"Platforms with >=5M users must verify age of MI account holders; minors need parental consent to create an account; parental access to posts/DMs; nighttime curfew (10:30pm-6:30am); no targeted ads or friend/content recommendations to minors. AG enforcement, civil fines up to $2,500/offense.","litigation":"None enacted. CCIA/Reason testified in opposition citing First Amendment concerns; comparable laws elsewhere enjoined, but this bill is not law and is not enjoined.","sourceUrl":"https://www.legislature.mi.gov/Bills/Bill?ObjectName=2025-HB-4388"},{"name":"SB 190 (2025-2026) — Social Media Children Protection Act","category":"social_media","status":"pending","binds":["platforms","operators"],"ages":"under 16","appliesToUnder":16,"requires":"Age verification for social media account holders; parental consent for users under 16 to create an account; parental supervision (time restrictions, privacy settings, access to posts/messages); civil sanctions.","litigation":"None — bill is not yet enacted, so it cannot be and is not enjoined.","sourceUrl":"https://www.legislature.mi.gov/Bills/Bill?ObjectName=2025-SB-0190"},{"name":"HB 4429 (2025-2026) — Digital Age Assurance Act","category":"age_verification","status":"pending","binds":["app_stores","operators","developers","platforms"],"ages":"minors (under 18); age ranges including under 13 / 13-15 / 16-17","appliesToUnder":18,"requires":"Device/operating-system level age assurance: device manufacturers determine and share a user's age range with covered online services/apps requiring age verification, so child protections can be applied. General-audience, not pornography-specific.","litigation":"None — bill is not yet enacted, so it cannot be and is not enjoined.","sourceUrl":"https://www.legislature.mi.gov/Bills/Bill?ObjectName=2025-HB-4429"},{"name":"SB 284 (2025-2026) — Digital Age Assurance Act","category":"age_verification","status":"pending","binds":["app_stores","operators","developers","platforms"],"ages":"minors (under 18); age ranges including under 13 / 13-15 / 16-17","appliesToUnder":18,"requires":"Device/operating-system level age assurance: manufacturers (e.g., OS providers) verify a user's age and communicate an age range to apps/websites requiring age verification, enabling child protections. General-audience.","litigation":"None — bill is not yet enacted, so it cannot be and is not enjoined.","sourceUrl":"https://www.legislature.mi.gov/Bills/Bill?ObjectName=2025-SB-0284"},{"name":"Michigan Age-Appropriate Design Code Act (MI Kids Code)","billNumber":"HB 5357","category":"aadc","status":"pending","binds":["operators"],"ages":"Known minors under 18","appliesToUnder":18,"requires":"Would require covered online businesses that have actual knowledge a user is a minor to default to the highest privacy settings, minimize data collection to what is necessary for the service, and complete a data protection impact assessment. It bans targeted advertising to known minors, prohibits selling minors' personal data, restricts profiling and processing of precise geolocation by default, and forbids dark patterns that override a minor's autonomy.","sourceUrl":"https://legislature.mi.gov/documents/2025-2026/billintroduced/House/htm/2025-HIB-5357.htm"},{"name":"Michigan Personal Data Privacy Act — minors' provisions","billNumber":"SB 359","category":"comprehensive","status":"pending","binds":["operators"],"ages":"Targeted-ad ban for minors under 18; known children under 13 handled per COPPA","appliesToUnder":18,"requires":"Imposes a flat prohibition on processing the personal data of a minor (consumer under 18) for targeted advertising. Personal data of a 'known child' (under 13) must be processed in accordance with COPPA (15 USC 6501-6506), and a controller that obtained COPPA-compliant verifiable parental consent satisfies the Act's parental-consent obligation; a parent or guardian may exercise the consumer rights on a known child's behalf.","sourceUrl":"https://legislature.mi.gov/Bills/Bill?ObjectName=2025-SB-0359"}],"alsoOutOfScope":["SB 191 (2025-2026) — Material Harmful to Minors Regulation Act"]},{"state":"Minnesota","abbr":"MN","rollupStatus":"enacted_future","laws":[{"name":"Stop Harms from Addictive Social Media Act amendments (HF 4138)","billNumber":"HF 4138 (2026 Minn. Laws ch. 111)","category":"social_media","status":"enacted_future","signedDate":"2026-05-26","effectiveDate":"2027-07-01","binds":["platforms","operators"],"ages":"Under 16 (treated as 'child'/15-or-younger when not confidently estimated at 16+)","appliesToUnder":16,"requires":"Covered social media platforms (10,000+ MN account holders or $1B+ worldwide revenue) must run age estimation on account holders, treat anyone not confidently 16+ as a child (15 or younger), obtain verifiable parental consent to create/maintain a child's account, default child accounts to highest privacy settings, ban addictive features (infinite scroll, autoplay, push notifications) and targeted paid ads for child accounts, and provide parental monitoring/deletion tools. Enforced by AG under deceptive-trade-practices law plus a private right of action ($10,000 statutory damages per knowing/reckless violation).","litigation":"No suit filed against HF 4138 as of 2026-06-27; not enjoined. NetChoice opposed the bill and has threatened a First Amendment challenge but had not sued as of the cutoff. The active NetChoice v. Ellison case (D. Minn., filed Apr 29, 2026) targets the separate warning-label statute, Minn. Stat. 325M.335, not this law.","sourceUrl":"https://www.revisor.mn.gov/bills/94/2026/0/HF/4138/"},{"name":"Minnesota Age-Appropriate Design Code Act","billNumber":"HF 4511 (companion SF 4574)","category":"aadc","status":"pending","binds":["operators"],"ages":"Children 0-17 (online products children are reasonably likely to access)","appliesToUnder":18,"requires":"Would require businesses offering online products/services children are reasonably likely to access to prioritize children's privacy, safety, and well-being over commercial interests; complete a data protection impact assessment before launching such products; default to high-privacy settings for child users; provide age-appropriate privacy notices; and prohibits dark patterns that push children to share more data. Enforced by the Attorney General.","sourceUrl":"https://www.revisor.mn.gov/bills/94/2026/0/HF/4511/"},{"name":"Minnesota Consumer Data Privacy Act (MCDPA) — minors' provisions","billNumber":"HF 4757 (2024, Ch. 121)","category":"comprehensive","status":"in_force","signedDate":"2024-05-19","effectiveDate":"2025-07-31","binds":["operators"],"ages":"Known children under 13 (COPPA); teens 13-16","appliesToUnder":17,"requires":"A controller may not process the personal data of a consumer for targeted advertising, or sell it, without consent where the controller knows the consumer is between 13 and 16 (Minn. Stat. 325M.16, subd. 2(f)). Processing the personal/sensitive data of a 'known child' (under 13) requires consent from a parent or lawful guardian in accordance with COPPA (subd. 2(d)); COPPA-compliant verifiable parental consent satisfies the obligation.","sourceUrl":"https://www.revisor.mn.gov/statutes/cite/325M.16"}]},{"state":"Mississippi","abbr":"MS","rollupStatus":"in_force","laws":[{"name":"HB 1126 (2024) — Walker Montgomery Protecting Children Online Act","billNumber":"HB 1126 (2024 Regular Session)","category":"social_media","status":"in_force","signedDate":"2024-04-30","effectiveDate":"2024-07-01","binds":["platforms","operators"],"ages":"Under 18 (minors)","appliesToUnder":18,"requires":"Digital service providers likely to be accessed by minors must make commercially reasonable efforts to verify a user's age, obtain verifiable parental consent before a known minor creates an account, limit data collection/targeted advertising for minors, and mitigate minors' exposure to material harmful to minors. Civil penalties up to $10,000 per violation; AG enforcement.","litigation":"NetChoice, LLC v. Fitch (S.D. Miss., No. 1:24-cv-170; 5th Cir. No. 24-60341; SCOTUS No. 25A97). District court enjoined 2024-07-01; 5th Cir. vacated/remanded 2025-04-17; district court re-enjoined 2025-06-18; 5th Cir. STAYED that injunction 2025-07-17; SCOTUS denied emergency application 2025-08-14 (Kavanaugh statement noting NetChoice likely to succeed on merits); 5th Cir. oral argument 2026-02-03, no decision as of 2026-06-27. Injunction NOT currently in effect — law enforceable.","sourceUrl":"https://billstatus.ls.state.ms.us/documents/2024/pdf/HB/1100-1199/HB1126SG.pdf"},{"name":"HB 1224 (2026) — Mississippi Keeping Kids Safe Online Act","billNumber":"HB 1224 (2026 Regular Session)","category":"social_media","status":"enacted_future","signedDate":"2026-04-08","effectiveDate":"2026-07-01","binds":["platforms","operators"],"ages":"Under 18 (minors)","appliesToUnder":18,"requires":"Prohibits interactive computer service providers from entering into contracts/agreements (including terms of service) with a minor without prior express consent of the minor's parent or guardian; providers may not create an account unless the user registers their age and the provider makes commercially reasonable age-verification efforts; bars knowingly allowing minors to access material harmful to minors. Safe harbor for providers performing reasonable age verification or obtaining written parental consent plus continuous usage history. Civil penalties; AG enforcement. Also directs MS Dept. of Education to publish internet-safety / social-media-safety curriculum.","litigation":"No litigation as of 2026-06-27 (not yet effective).","sourceUrl":"https://billstatus.ls.state.ms.us/documents/2026/html/HB/1200-1299/HB1224CS.htm"}]},{"state":"Missouri","abbr":"MO","rollupStatus":"pending","laws":[{"name":"HB 2392 — Missouri Social Media Safety for Minors Act (Rep. Marty Joe Murray)","category":"social_media","status":"pending","binds":["operators","platforms"],"ages":"under 14 prohibited; 14-15 with verified parental consent","appliesToUnder":16,"requires":"Bars minors under 14 from creating/maintaining a social media account; requires verified parental consent for 14-15 year-olds; mandates a secure age-verification process for all Missouri users before account creation; requires platforms to limit direct messaging between minors and unverified adults; prohibits addictive/manipulative design features targeting minors and targeted advertising to minors.","litigation":"None. The bill never became law, so there is no litigation challenging it.","sourceUrl":"https://documents.house.mo.gov/billtracking/bills261/hlrbillspdf/5643H.01I.pdf"},{"name":"HCS HBs 1887, 2361, 1913, 2862 & 2321 — Megan Meier Act (Rep. Hausman); Social Media Use by Minors, Sec. 407.3475 (incorporates Rep. Mayhew's HB 3393)","category":"social_media","status":"pending","binds":["operators","platforms"],"ages":"under 16 prohibited; 16-17 with verified parental consent","appliesToUnder":18,"requires":"Sec. 407.3475: prohibits minors under 16 from creating/maintaining a social media account; allows 16+ only with verified parental/guardian consent; requires a secure age-verification process for all Missouri users before account creation and immediate termination of any under-16 account; gives parents rights to review activity, request deletion (within 10 business days), and limit messaging; prohibits addictive/manipulative design features targeting minors, adult-to-minor direct messaging from unverified contacts, and targeted advertising to under-16 minors based on personal data/behavioral profiling.","litigation":"None. The bill never became law, so there is no litigation challenging it.","sourceUrl":"https://documents.house.mo.gov/billtracking/bills261/sumpdf/HB1887P.pdf"}],"alsoOutOfScope":["Missouri AG Age-Verification Rule, 15 CSR 60-18.010 et seq. — ADULT-CONTENT age-verification regulation under the MMPA (RSMo 407.020); adult sites must verify users are 18+; in force since Nov. 30, 2025.","HB 1839 / HCS HBs 1839, 2921 & 3015 (2026) — 'Age Verification on Adult Websites'; codifies the AG's 15 CSR 60-18 age-gate; TAFP 2026-05-13, delivered to Gov. Kehoe 2026-05-28.","HB 3393 — Social Media Use by Minors (Rep. Don Mayhew) is NOT separately tracked; its text was incorporated into HCS HBs 1887, 2361, 1913, 2862 & 2321 (Sec. 407.3475), listed above."]},{"state":"Montana","abbr":"MT","rollupStatus":"in_force","laws":[{"name":"SB 297 (2025) — amendments to the Montana Consumer Data Privacy Act (Ch. 567, Laws of 2025)","billNumber":"SB 297 (Ch. 567, Laws of 2025)","category":"age_verification","status":"in_force","signedDate":"2025-05-08","effectiveDate":"2025-10-01","binds":["operators","developers"],"ages":"Under 18 (minor); under 13 requires COPPA verifiable parental consent; 13-17 requires the minor's consent","appliesToUnder":18,"requires":"Amends the MTCDPA to impose child-directed (age-appropriate-design) duties on controllers offering an online service, product, or feature to consumers the controller actually knows or willfully disregards is a minor (under 18). Imposes a duty of reasonable care to avoid a heightened risk of harm to minors; requires consent before processing a minor's data for targeted advertising, sale, certain profiling, extended retention, or precise geolocation — the minor's own consent for ages 13-17 and COPPA verifiable parental consent for children under 13; restricts design features that significantly increase, sustain, or extend a minor's use; and requires data protection assessments for processing presenting a heightened risk to minors. Expressly does NOT require age verification or age-gating, but provides a safe harbor for commercially reasonable age estimation.","litigation":"None found. No lawsuit or injunction against SB 297's minors provisions as of 2026-06-27. (Distinct from the unrelated Montana pornography age-verification law challenged in Free Speech Coalition v. Knudsen, which is out of scope here.)","sourceUrl":"https://archive.legmt.gov/content/Sessions/69th/Contractor_index/CH0567.pdf"},{"name":"Montana Consumer Data Privacy Act (MCDPA) — minors' provisions (as amended by SB 297)","billNumber":"SB 297 (2025); MCDPA codified at MCA 30-14-2801 et seq.","category":"comprehensive","status":"in_force","signedDate":"2025-05-08","effectiveDate":"2025-10-01","binds":["operators"],"ages":"Children under 13 (verifiable parental consent); minors under 18 (13-17 give their own consent)","appliesToUnder":18,"requires":"A controller that knows or willfully disregards that a consumer is a minor (under 18) may not process the minor's personal data for targeted advertising, sale, or profiling in furtherance of legal/significant effects without the minor's consent; for a child under 13, verifiable parental consent is required (consistent with COPPA). Controllers must also exercise reasonable care to avoid a heightened risk of harm to minors, may not use dark patterns or system design to significantly increase/sustain/extend minor engagement, and must limit precise-geolocation collection and data retention. These minor-specific duties apply with no numerical applicability thresholds.","sourceUrl":"https://archive.legmt.gov/content/Sessions/69th/Contractor_index/CH0567.pdf"}],"alsoOutOfScope":["SB 544 (2023), as amended by Ch. 199, Laws of 2025 — Age Verification for Material Harmful to Minors (MCA 30-14-159): adult-content age-verification law, in force since Jan. 1, 2024."]},{"state":"Nebraska","abbr":"NE","rollupStatus":"in_force","laws":[{"name":"Parental Rights in Social Media Act (LB 383)","billNumber":"LB 383","category":"social_media","status":"enacted_future","signedDate":"2025-05-20","effectiveDate":"2026-07-01","binds":["operators"],"ages":"Minors under 18","appliesToUnder":18,"requires":"Social media platforms must verify every user's age via commercially reasonable methods (third-party vendor / digitized ID, with no data retention) and obtain verifiable parental/guardian consent before a minor under 18 may create or hold an account; must give parents tools to view the minor's posts/messages and control privacy, account settings, and time spent.","litigation":"NetChoice v. Hilgers (D. Neb.), pre-enforcement First Amendment challenge: complaint filed May 13-14, 2026; PI motion May 22, 2026; State's opposition June 5, 2026. No preliminary-injunction ruling issued as of 2026-06-27; law not enjoined.","sourceUrl":"https://nebraskalegislature.gov/FloorDocs/109/PDF/Slip/LB383.pdf"},{"name":"Age-Appropriate Online Design Code Act (LB 504)","billNumber":"LB 504","category":"age_verification","status":"in_force","signedDate":"2025-05-30","effectiveDate":"2026-01-01","binds":["operators","developers"],"ages":"Minors under 18 (heightened protections for children under 13)","appliesToUnder":18,"requires":"Covered online services likely accessed by minors must minimize collection/use of a minor's personal data, default the most protective privacy/safety settings for known children, provide parental control tools (enabled by default for children under 13), offer a chronological-feed option and time-management/limit tools, and restrict targeted advertising and unsolicited communications to minors.","litigation":"No NetChoice or other lawsuit confirmed filed against LB 504 as of 2026-06-27; NetChoice sent a veto-request letter in May 2025 but had not sued as of early 2026. Not enjoined; in effect.","sourceUrl":"https://nebraskalegislature.gov/FloorDocs/109/PDF/Slip/LB504.pdf"},{"name":"Nebraska Age-Appropriate Online Design Code Act","billNumber":"LB504","category":"aadc","status":"in_force","signedDate":"2025-05-30","effectiveDate":"2026-01-01","binds":["operators"],"ages":"Covered minors under 18 the service knows to be a minor; 'child' = under 13","appliesToUnder":18,"requires":"Covered online services must apply privacy-and-safety-by-default at the highest protection for known minors: data minimization (collect/retain only what is needed for the feature the minor knowingly uses), no targeted advertising to a covered minor, no profiling unless necessary for a service the minor actively requested, limits/notice on precise geolocation, time-of-day limits on notifications/push alerts, and a ban on dark patterns and on advertising prohibited products (drugs, tobacco, gambling, alcohol) to covered minors. It also requires opt-out controls over 'covered design features' (infinite scroll, autoplay rewards, etc.) and parental tools enabled by default for known children.","litigation":"Not currently enjoined. NetChoice publicly urged a veto and has raised First Amendment objections, but as of 2026-06-28 has not sued over LB504. NetChoice v. Hilgers (D. Neb., filed May 2026) challenges a separate Nebraska statute — the Parental Rights in Social Media Act (LB383, age-verification/parental-consent) — not the Design Code Act.","sourceUrl":"https://nebraskalegislature.gov/FloorDocs/109/PDF/Slip/LB504.pdf"},{"name":"Nebraska Data Privacy Act — minors' provisions","billNumber":"LB1074","category":"comprehensive","status":"in_force","signedDate":"2024-04-17","effectiveDate":"2025-01-01","binds":["operators"],"ages":"Known children under 13 (no heightened 13-17 teen band)","appliesToUnder":13,"requires":"Personal data collected from a known child (under 13) is classified as 'sensitive data.' A controller must not process such known-child sensitive data except in accordance with the federal Children's Online Privacy Protection Act (COPPA); complying with COPPA's parental-consent requirements satisfies the Act. The Act adds no separate heightened opt-in or targeted-advertising/profiling regime for teens aged 13-17 — those consumers have only the same opt-out rights as adults.","sourceUrl":"https://nebraskalegislature.gov/laws/statutes.php?statute=87-1112"}],"alsoOutOfScope":["LB 1092 — Online Age Verification Liability Act (signed April 16, 2024; effective July 19, 2024) — age verification for sites with over one-third material harmful to minors; private-suit enforcement"]},{"state":"Nevada","abbr":"NV","rollupStatus":"none","laws":[]},{"state":"New Hampshire","abbr":"NH","rollupStatus":"enacted_future","laws":[{"name":"New Hampshire HB 1460 — prohibition on the sale of a child's personal data (amending RSA 507-H)","billNumber":"HB 1460 (2026), Chapter 168","category":"aadc","status":"enacted_future","signedDate":"2026-06-19","effectiveDate":"2027-01-01","binds":["operators"],"ages":"Children under 13 (COPPA definition of 'child')","appliesToUnder":13,"requires":"Amends the NH Data Privacy Act (RSA 507-H:6) to impose a blanket ban on selling a child's personal data — including location and other sensitive data — by controllers covered by the privacy law. The prohibition applies regardless of whether the entity has actual knowledge the data belongs to a child and regardless of parental consent, going beyond the existing COPPA-aligned consent baseline. 'Child' tracks COPPA (under 13). Signed by Gov. Ayotte 06/19/2026 as Chapter 168; effective 01/01/2027 (after today, so not yet in force). Note: a separate formal NH Age-Appropriate Design Code, HB 1650 (Litchfield), was killed 'Inexpedient to Legislate' on 03/11/2026, so HB 1460 is the enacted child-specific data-protection statute.","sourceUrl":"https://gc.nh.gov/rsa/html/LII/507-H/507-H-mrg.htm"},{"name":"New Hampshire Data Privacy Act (RSA 507-H, enacted via SB 255) — minors' provisions","billNumber":"SB 255 (2024); codified at RSA 507-H","category":"comprehensive","status":"in_force","signedDate":"2024-03-06","effectiveDate":"2025-01-01","binds":["operators"],"ages":"Known children under 13 (per COPPA); teens at least 13 but younger than 16","appliesToUnder":16,"requires":"A controller must not process the sensitive data of a 'known child' except in accordance with COPPA, and 'child' is defined by reference to COPPA (under 13) (RSA 507-H:6, I(d); 507-H:1). For consumers the controller has actual knowledge (and willfully disregards) are at least 13 but younger than 16, the controller must obtain consent before processing their personal data for targeted advertising or selling it (RSA 507-H:6, I(g)). Controllers complying with COPPA's verifiable parental consent satisfy the chapter's parental-consent obligations (RSA 507-H:3).","sourceUrl":"https://gc.nh.gov/rsa/html/LII/507-H/507-H-mrg.htm"}]},{"state":"New Jersey","abbr":"NJ","rollupStatus":"pending","laws":[{"name":"S3993 — Requires age verification and parental/guardian consent for a minor's use of a social media platform; prohibits certain adult-minor messaging (222nd Legislature, 2026-2027 session)","billNumber":"S3993 (222nd Legislature, 2026-2027)","category":"social_media","status":"pending","binds":["operators","platforms"],"ages":"minors (under 18)","appliesToUnder":18,"requires":"Bars a social media company from permitting a NJ-resident minor to be an account holder without express parent/guardian consent (parent must provide government ID + credit card and consent to a fee up to 35 cents). Company must verify age of new/existing account holders at signup or within 14 days of access attempt; prohibits direct messaging between a minor's account and unlinked adult users; limits data collection from minor accounts. Enforced by the Division of Consumer Affairs (penalties up to $2,500/violation) plus a private right of action.","litigation":"None — bill is not law, so no injunction exists.","sourceUrl":"https://pub.njleg.state.nj.us/Bills/2026/S4000/3993_I1.HTM"},{"name":"New Jersey Kids Code Act (Age-Appropriate Design Code for New Jersey)","billNumber":"S3413 (Senate); A4015 (Assembly companion)","category":"aadc","status":"pending","binds":["operators","platforms"],"ages":"Known minors under 18","appliesToUnder":18,"requires":"Would require covered online service providers to default known-minor accounts to the highest available privacy/safety settings, bar reducing or prompting minors to reduce those settings, and limit data collection to the minimum necessary for the requested service. Prohibits using a minor's personal data beyond the purpose collected, targeted advertising to minors, profiling except as needed for the service, and dark patterns; age-verification data must be deleted within 60 days.","sourceUrl":"https://pub.njleg.gov/Bills/2026/S3500/3413_I1.HTM"},{"name":"New Jersey Data Privacy Act — minors' provisions","billNumber":"S332 (P.L. 2023, c. 266)","category":"comprehensive","status":"in_force","signedDate":"2024-01-16","effectiveDate":"2025-01-15","binds":["operators"],"ages":"Consumers known to be at least 13 and under 17; under-13 deferred to COPPA","appliesToUnder":17,"requires":"A controller must obtain affirmative opt-in consent before selling personal data, processing it for targeted advertising, or using it for profiling that produces legal or similarly significant effects, where the controller has actual knowledge or willfully disregards that the consumer is at least 13 but younger than 17. The online privacy of children under 13 is handled under federal COPPA rather than separate state provisions.","sourceUrl":"https://pub.njleg.state.nj.us/Bills/2022/PL23/266_.HTM"}],"alsoOutOfScope":["A3228 (222nd Legislature) — 'Requires entities to verify age of persons accessing certain online material and prohibits minors from accessing certain online material'; introduced 2026-01-13, pending in Assembly committee."]},{"state":"New Mexico","abbr":"NM","rollupStatus":"none","laws":[]},{"state":"New York","abbr":"NY","rollupStatus":"in_force","laws":[{"name":"App Store / Device Age-Assurance Act (operating system / app store age verification)","billNumber":"S8102-B (2025-2026 session, Sen. Gounardes); A8893","category":"app_store","status":"pending","binds":["app_stores","operators","developers","platforms"],"ages":"under 18","appliesToUnder":18,"requires":"Would require operating system providers / app stores / device manufacturers of internet-enabled devices to conduct commercially reasonable and technically feasible age assurance for users under 18 at the point of device activation/account creation, and to communicate a user's age category to applications. Not yet law.","litigation":"None — the bill has not been enacted, so there is no enforcement to challenge.","sourceUrl":"https://www.nysenate.gov/legislation/bills/2025/S8102/amendment/B"},{"name":"Stop Addictive Feeds Exploitation (SAFE) For Kids Act","billNumber":"S7694A / A8148A (Chapter 120 of 2024); GBL Article 45","category":"social_media","status":"enacted_future","signedDate":"2024-06-20","effectiveDate":"180 days a","binds":["operators","platforms"],"ages":"under 18","appliesToUnder":18,"requires":"Bars covered social media operators from providing an 'addictive feed' (algorithmically personalized feed) to a minor (under 18) without verifiable parental consent, and restricts overnight (12am-6am) notifications to minors without consent. Requires commercially reasonable age determination/assurance. Enforced by the NY Attorney General.","litigation":"No suit filed against the NY SAFE for Kids Act as of 2026-06-27. NetChoice and EFF have publicly criticized the law on First Amendment/privacy grounds but have not sued. Not enjoined.","sourceUrl":"https://www.nysenate.gov/legislation/bills/2023/S7694/amendment/A"},{"name":"New York Child Data Protection Act","billNumber":"S7695B (Ch. 121 of 2024)","category":"aadc","status":"in_force","signedDate":"2024-06-20","effectiveDate":"2025-06-20","binds":["operators"],"ages":"Minors under 18 (under 13 governed by COPPA; teens 13-17 protected directly)","appliesToUnder":18,"requires":"Operators of online services, apps, and connected devices may not process the personal data of a user they know or should know is a minor under 18 unless processing is strictly necessary for an enumerated purpose or the minor (or, for under-13s, the parent per COPPA) gives informed, separately-presented, freely-revocable opt-in consent. Targeted advertising and behavioral profiling of minors require consent and the sale/purchase of minors' personal data is prohibited; for users under 13 data may only be processed consistent with COPPA.","sourceUrl":"https://www.nysenate.gov/legislation/bills/2023/S7695/amendment/B"}]},{"state":"North Carolina","abbr":"NC","rollupStatus":"pending","laws":[{"name":"Social Media and AI Safety Act (HB 301)","billNumber":"HB 301 (2025-2026 Session)","category":"social_media","status":"pending","binds":["platforms"],"ages":"Under 14 barred from accounts; 14-15 require parental consent","appliesToUnder":16,"requires":"Prohibits social media accounts for minors under 14 on 'addictive' platforms; requires verifiable parental/guardian consent for 14- and 15-year-olds; mandates platforms terminate prohibited minors' accounts and delete their personal data; requires age verification for new accounts (account holder's choice of anonymous or standard age verification). 'Addictive platform' defined by features like infinite scrolling, autoplay video, and unblockable push notifications. NC DOJ enforcement as unfair/deceptive trade practice; civil penalties up to $50,000/violation and up to $10,000 damages per affected minor.","litigation":"None — bill is not yet law, so no litigation or injunction. (App store age-verification clearinghouse idea backed by Meta/Rep. Zenger is a debated amendment within HB 301, not a separate enacted bill.)","sourceUrl":"https://www.ncleg.gov/BillLookup/2025/H301"}],"alsoOutOfScope":["Pornography Age Verification Enforcement Act (PAVE Act) — HB 8 / SL 2023-132, N.C. Gen. Stat. § 66-500 et seq.; adult-site age verification effective Jan. 1, 2024; in force.","Prevent Sexual Exploitation of Women and Minors Act — HB 805 / SL 2025-84, N.C. Gen. Stat. ch. 66, art. 51A; porn sites must verify age/consent of performers; enacted over veto, effective Dec. 1, 2025.","Earlier HB 301 'material harmful to minors' age-verification provision (removed by the April 2025 House committee substitute; the filed edition's proposed G.S. § 114B-3 required 16+ age checks)."]},{"state":"North Dakota","abbr":"ND","rollupStatus":"none","laws":[],"alsoOutOfScope":["HB 1561 — Commercial entity liability for publishing or distributing sexual material harmful to a minor (2025 adult-site age-verification law); signed Apr. 11, 2025, in effect since Aug. 1, 2025.","SB 2380 — Commercial entity liability for publishing or distributing sexual material harmful to a minor (companion 2025 adult-site age-verification law); signed Apr. 24, 2025, in effect since Aug. 1, 2025."]},{"state":"Ohio","abbr":"OH","rollupStatus":"in_force","laws":[{"name":"App Store Accountability Act (HB 226 / SB 167, Meta-backed; competing HB 302 / SB 175, Google-backed; 136th GA)","billNumber":"HB 226 / SB 167 (136th GA); also HB 302 / SB 175","category":"app_store","status":"pending","binds":["app_stores","developers"],"ages":"under 16 / 16 and under (HB 226/SB 167); minors per Google-backed variants","appliesToUnder":16,"requires":"(If enacted) app stores to verify the age of Ohio users, assign accounts to age categories, and obtain verifiable parental consent before a minor (16 and under under HB 226/SB 167) downloads/purchases an app or makes in-app purchases; developers to receive age-category signals.","sourceUrl":"https://www.legislature.ohio.gov/legislation/136/HB226"},{"name":"Social Media Parental Notification Act (HB 33, 135th GA budget; codified at R.C. 1349.09)","billNumber":"HB 33 (135th GA)","category":"social_media","status":"in_force","signedDate":"2023-07-04","effectiveDate":"2024-01-15","binds":["operators","platforms"],"ages":"under 16","appliesToUnder":16,"requires":"Verifiable parental/legal-guardian consent before a child under 16 can register for or contract to use a covered social media platform; operators must provide notice of moderation/content policies to the parent.","litigation":"NetChoice, LLC v. Yost, No. 2:24-cv-00047 (S.D. Ohio) — permanent injunction (summary judgment for NetChoice) Apr 16, 2025; REVERSED and REMANDED for judgment in favor of Ohio AG by the Sixth Circuit, No. 25-3371, June 18, 2026 (Clay J., lead; Batchelder J. concurring; Ritz J. dissenting). Injunction no longer in effect; NetChoice reviewing options (possible en banc/cert) but none granted as of 2026-06-27.","sourceUrl":"https://www.opn.ca6.uscourts.gov/opinions.pdf/26a0177p-06.pdf"}],"alsoOutOfScope":["Ohio HB 96 (FY26-27 budget) age-verification provision, codified at R.C. 1349.10, requires adult-content sites to verify users are 18+; signed June 30, 2025, in effect since Sept. 30, 2025.","Ohio HB 84 'The Innocence Act' (136th GA; reintroduced from HB 295, 135th GA) — standalone adult-content/pornography age-verification bill; passed the House 3/18/2026, pending in Senate Judiciary."]},{"state":"Oklahoma","abbr":"OK","rollupStatus":"pending","laws":[{"name":"HB 1275 (Social Media Age Verification / Parental Consent for Minors)","billNumber":"HB 1275 (2025 Reg. Sess.; carryover)","category":"social_media","status":"pending","effectiveDate":"none (prop","binds":["operators","platforms"],"ages":"under 16 prohibited; 16-17 require parental consent","appliesToUnder":18,"requires":"Would prohibit a social media platform from permitting an Oklahoma user under 16 to be an account holder, and would require parental consent for account holders aged 16-17; mandates reasonable age verification; restricts retention of age-verification identifying information (max 30 days); bars collection/sale/sharing of a minor's personal and geolocation data. AG civil enforcement; $2,500 per-violation penalty. (Not in force — proposed.)","litigation":"None. No lawsuit — bill is not law, so nothing to enjoin. NetChoice submitted legislative testimony in opposition; that is advocacy, not litigation.","sourceUrl":"https://www.oklegislature.gov/BillInfo.aspx?Bill=hb1275&Session=2500"}],"alsoOutOfScope":["Oklahoma SB 1959 — Age Verification and Explicit Materials Act, codified at Title 15, §§ 791–791.4 of the Oklahoma Statutes; adult-content age-verification law (2024), in force since Nov. 1, 2024.","Oklahoma SB 838 (2025 Reg. Sess.) — Senate companion to HB 1275 (substantively similar under-16 social media ban with mandatory age verification); never heard in Senate Technology & Telecom Committee."]},{"state":"Oregon","abbr":"OR","rollupStatus":"none","laws":[{"name":"Oregon Consumer Privacy Act (OCPA) — minors' provisions","billNumber":"SB 619 (2023), as amended by HB 2008 (2025)","category":"comprehensive","status":"in_force","signedDate":"2023-07-18","effectiveDate":"2024-07-01","binds":["operators"],"ages":"Children under 13 (per COPPA); minors under 16","appliesToUnder":16,"requires":"A controller must process the sensitive data of a consumer it knows is under 13 in accordance with COPPA (15 U.S.C. 6501 et seq.), which requires verifiable parental consent. As amended by HB 2008 effective January 1, 2026, a controller that has actual knowledge of, or willfully disregards, that a consumer is under 16 may not process that consumer's personal data for targeted advertising or profiling, and may not sell that consumer's personal data — and, unlike the prior 13-15 rule, consent no longer cures the prohibition.","sourceUrl":"https://olis.oregonlegislature.gov/liz/2025R1/Measures/Overview/HB2008"}]},{"state":"Pennsylvania","abbr":"PA","rollupStatus":"pending","laws":[{"name":"Protection of Minors on Social Media (Senate companion)","billNumber":"SB 22","category":"social_media","status":"pending","binds":["operators"],"ages":"Under 18 (minors)","appliesToUnder":18,"requires":"Amends Title 50 to bar social media companies from causing/encouraging minors to access content harmful to their physical or mental health; requires parental/guardian consent for a minor to create an account and allows deletion of data collected as a minor; civil penalties fund school mental-health services.","litigation":"None.","sourceUrl":"https://www.palegis.us/legislation/bills/2025/sb22"},{"name":"Protection of Minors on Social Media (House companion)","billNumber":"HB 1430","category":"social_media","status":"pending","binds":["operators"],"ages":"Under 18 (minors)","appliesToUnder":18,"requires":"House companion to SB 22; amends Title 50 to provide protections for minors on social media (including parental-consent and content/data protections) and imposes penalties.","litigation":"None.","sourceUrl":"https://www.palegis.us/legislation/bills/2025/hb1430"},{"name":"Children's Online Safety Act","billNumber":"HB 1729","category":"age_verification","status":"pending","binds":["operators","platforms"],"ages":"Under 18, with heightened controls for under 13","appliesToUnder":18,"requires":"Amends Title 18 to require covered online platforms to use age verification to identify users under 18 and apply strict default privacy settings (no DMs/profile viewing/tagging/transactions by non-connected users); for users under 13, parents must approve all new connections and financial transactions; bans dark patterns. Child-directed age assurance to apply minor protections (KEEP).","litigation":"None.","sourceUrl":"https://www.palegis.us/legislation/bills/2025/hb1729"},{"name":"Guidelines for User Age Verification and Responsible Dialogue (AI for Children)","billNumber":"HB 2215","category":"age_verification","status":"pending","binds":["operators","developers"],"ages":"Under 18 (minors); adult = 18+","appliesToUnder":18,"requires":"Adds Title 18 Ch. 31A regulating AI chatbots/AI companions. Covered entities must run a reasonable age-verification process (gov ID or commercially reasonable method; birthdate self-attestation insufficient) to classify each account holder as minor or adult and PREVENT minors' access to AI companions; bans AI chatbots from soliciting minors into sexually explicit conduct or promoting violence/self-harm. Age check exists to exclude/protect minors, not to gate adult visitors (KEEP).","litigation":"None.","sourceUrl":"https://www.palegis.us/legislation/bills/text/PDF/2025/0/HB2215/PN2909"}]},{"state":"Rhode Island","abbr":"RI","rollupStatus":"pending","laws":[{"name":"Rhode Island Social Media Regulation Act","billNumber":"H7953 / S2968 (2026)","category":"social_media","status":"pending","binds":["platforms","operators"],"ages":"under 18 (minors)","appliesToUnder":18,"requires":"Would bar Rhode Island minors (under 18) from holding an account on a covered social media platform (5M+ worldwide account holders) without a parent/guardian's express consent; requires age verification at account creation (or within 14 days) plus default minor protections (no DMs from non-friends, no ads/targeting, restricted data, 10:30pm-6:30am access block) and parental access credentials.","litigation":"None — bill not enacted; no litigation.","sourceUrl":"https://webserver.rilegislature.gov/Billtext/BillText26/SenateText26/S2968.htm"},{"name":"Rhode Island Children's Online Safety Act","billNumber":"H7746 (2026)","category":"age_verification","status":"pending","binds":["platforms","operators"],"ages":"under 18, with heightened controls for under 13","appliesToUnder":18,"requires":"Would require covered online platforms to perform commercially reasonable age verification and apply default safety settings for minors — disabling open chats, blocking direct messages, profile views, and tagging by unapproved users, and barring financial transactions with minors absent affirmative parental approval; for users under 13, parental approval is required for new connections and any financial transactions. Child-directed age-assurance (in scope), not an adult-content age gate.","litigation":"None — bill not enacted; no litigation.","sourceUrl":"https://webserver.rilegislature.gov/BillText26/HouseText26/H7746.pdf"},{"name":"Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA) — minors' provisions","billNumber":"H7787 / S2500 (2024)","category":"comprehensive","status":"in_force","signedDate":"2024-06-28","effectiveDate":"2026-01-01","binds":["operators"],"ages":"Known children under 13 (per COPPA); no separate teen 13-17 protections","appliesToUnder":13,"requires":"A controller must obtain consent before processing the personal data of a consumer it knows to be a 'known child' (under 13), and process such data in accordance with COPPA — a controller that complies with COPPA's verifiable-parental-consent requirements is deemed compliant. Sensitive data of a known child may not be processed without consent. Unlike most newer state laws, the RIDTPPA imposes no heightened opt-in duties for teens 13-17 for targeted advertising, sale, or profiling beyond the general consumer opt-out rights.","sourceUrl":"https://webserver.rilegislature.gov/Statutes/TITLE6/6-48.1/INDEX.htm"}]},{"state":"South Carolina","abbr":"SC","rollupStatus":"in_force","laws":[{"name":"App Store Accountability Act (H.3405)","category":"app_store","status":"pending","effectiveDate":"upon appro","binds":["app_stores","developers"],"ages":"minors (under 18), with age categories","appliesToUnder":18,"requires":"If enacted: app store providers must determine the age category for every SC user who purchases or uses apps and verify age; obtain verifiable parental consent before allowing a minor to download/purchase/use apps; share age-category/consent signals via API; developers must use the API to verify age category and parental consent before app use or in-app purchases, and provide parental time-restriction features (time-usage metrics, daily limits).","litigation":"none","sourceUrl":"https://www.scstatehouse.gov/sess126_2025-2026/bills/3405.htm"},{"name":"South Carolina Social Media Regulation Act (H.3431 / Act No. 96, R100)","category":"social_media","status":"in_force","signedDate":"2026-02-05","effectiveDate":"2026-02-05","binds":["operators","platforms"],"ages":"minors (under 18)","appliesToUnder":18,"requires":"Covered online services reasonably likely to be accessed by minors must exercise reasonable care in the use of a minor's personal data and in design/operation to prevent harms (compulsive usage, severe psychological harm, discrimination, financial/physical injury); offer easy controls to disable covered design features (infinite scroll, autoplay, gamification), limit time, and disable purchases; default tighter visibility/contact settings for minors. Social media companies may not permit a SC-resident minor to be an account holder without express parental/guardian consent (eff. Mar 1, 2026). Treble damages; personal liability for willful/wanton violations.","litigation":"NetChoice v. Wilson, D.S.C. No. 3:26-cv-00543 — filed 2026-02-09; PI motion 2026-03-09; briefing complete (NetChoice reply 2026-04-20); NO ruling on PI as of 2026-06-27; law not enjoined.","sourceUrl":"https://www.scstatehouse.gov/sess126_2025-2026/bills/3431.htm"},{"name":"South Carolina Social Media Regulation Act (H.5209)","category":"social_media","status":"pending","effectiveDate":"upon Gover","binds":["operators","platforms"],"ages":"minors (under 18)","appliesToUnder":18,"requires":"If enacted: social media companies must make commercially reasonable efforts to verify the age of account holders; obtain parental consent for minor account holders; for SC minor account holders (operative Mar 1, 2027) prohibit adults from direct-messaging minors absent an existing connection, prohibit targeted advertising based on personal info (except age/location), restrict data collection, and filter harmful content; AG complaint process; private right of action; educational programs.","litigation":"none","sourceUrl":"https://www.scstatehouse.gov/sess126_2025-2026/bills/5209.htm"},{"name":"South Carolina Age-Appropriate Design Code Act","billNumber":"H.3431 (Act No. 96, R100)","category":"aadc","status":"in_force","signedDate":"2026-02-05","effectiveDate":"2026-02-05","binds":["operators","platforms"],"ages":"Minors under 18 (covered online services reasonably likely to be accessed by minors)","appliesToUnder":18,"requires":"A covered online service must exercise reasonable care in the use of minors' personal data and in the design of the service to prevent harm to minors (e.g., compulsive use, psychological harm, identity theft, privacy intrusions, discrimination). It imposes data minimization tied to minors' data, prohibits facilitating targeted advertising to minors, bars profiling of minors except in limited circumstances, restricts collection of precise geolocation, and requires parental/user controls (time limits, purchase limits) plus public third-party audit reports submitted to the Attorney General.","litigation":"NetChoice v. Wilson, No. 3:26-cv-00543 (D.S.C.). NetChoice sued Feb. 9, 2026 alleging First/Fourteenth Amendment, Commerce Clause, and COPPA-preemption defects and moved for a preliminary injunction (filed Mar. 9, 2026; briefing completed Apr. 20, 2026). As of 2026-06-28 the court has NOT ruled on the PI motion and no injunction is in effect, so the Act remains enforceable; operational requirements applied from Mar. 1, 2026 and first audit reports are due July 1, 2026.","sourceUrl":"https://www.scstatehouse.gov/sess126_2025-2026/bills/3431.htm"}],"alsoOutOfScope":["H.3424 / Act No. 198 — Child Online Safety Act (S.C. Code 37-1-310)"]},{"state":"South Dakota","abbr":"SD","rollupStatus":"none","laws":[],"alsoOutOfScope":["South Dakota House Bill 1053 (2025) — adult-content / pornography visitor-age-gating law (SDCL ch. 22-24; covered platforms must verify users are 18+); effective July 1, 2025, in force."]},{"state":"Tennessee","abbr":"TN","rollupStatus":"in_force","laws":[{"name":"App Store Accountability Act (HB 2254, 114th GA)","billNumber":"HB 2254 (114th GA)","category":"app_store","status":"pending","binds":["app_stores","developers"],"ages":"minors (under 18; age-category tiers)","appliesToUnder":18,"requires":"Would require app stores to verify users' age categories, condition minors' app downloads and in-app purchases on verifiable parental consent, and share age-category signals with developers (account-level verification, default restrictions for minors).","litigation":"None — bill never enacted (deferred to summer study 2026-03-11; assembly adjourned sine die).","sourceUrl":"https://wapp.capitol.tn.gov/apps/BillInfo/Default?BillNumber=HB2254&ga=114"},{"name":"Protecting Children from Social Media Act (HB 1891 / SB 2097, 113th GA)","billNumber":"HB 1891 (113th GA) / Public Chapter 899","category":"social_media","status":"in_force","signedDate":"2024-05-02","effectiveDate":"2025-01-01","binds":["operators","platforms"],"ages":"under 18 (minors)","appliesToUnder":18,"requires":"Social media platforms must verify the age of new users and obtain express verifiable parental/guardian consent before a minor (under 18) becomes an account holder; verify existing minor account holders within 14 days; provide parental supervision tools (view privacy settings, set daily time limits, schedule access breaks); prohibits retaining PII used for age/consent verification. Enforced by the TN Attorney General.","litigation":"NetChoice v. Skrmetti, No. 3:24-cv-01191 (M.D. Tenn.); appeal No. 25-5660 (6th Cir.). PI denied 2025-06-20; 6th Cir. oral argument 2026-02-04; no decision yet. Law remains enforceable pending appeal.","sourceUrl":"https://wapp.capitol.tn.gov/apps/BillInfo/Default?BillNumber=HB1891&ga=113"},{"name":"Tennessee Information Protection Act (TIPA) — minors' provisions","billNumber":"SB 73 / HB 1181","category":"comprehensive","status":"in_force","signedDate":"2023-05-11","effectiveDate":"2025-07-01","binds":["operators"],"ages":"Children under 13 (\"known child\"); no separate heightened tier for teens 13-17","appliesToUnder":13,"requires":"TIPA classifies any personal data collected from a \"known child\" (a consumer under 13) as sensitive data, and a controller may not process the sensitive data of a known child unless it does so in accordance with the federal Children's Online Privacy Protection Act (COPPA) — i.e., with verifiable parental consent. TIPA does not impose a separate heightened opt-in/teen tier for minors aged 13-17; its minor-specific duties track the COPPA under-13 baseline (older minors are covered only by the general consumer opt-out rights for targeted advertising, sale, and profiling).","sourceUrl":"https://wapp.capitol.tn.gov/apps/BillInfo/Default?BillNumber=HB1181&ga=113"}],"alsoOutOfScope":["Protect Tennessee Minors Act — HB 1614 (113th GA) / Public Chapter 1021"]},{"state":"Texas","abbr":"TX","rollupStatus":"in_force","laws":[{"name":"App Store Accountability Act","billNumber":"SB 2420","category":"app_store","status":"in_force","signedDate":"2025-05-27","effectiveDate":"2026-06-04","binds":["app_stores","developers"],"ages":"Under 18 (parental consent required for minors; age categories: child, younger teen, older teen, adult)","appliesToUnder":18,"requires":"App stores must verify the age of every account holder at account creation; minors' accounts must be linked to a parent/guardian account; parental consent is required before a minor may download or purchase an app or make in-app purchases; app stores must share age-bracket and parental-consent signals with developers, who must apply them.","litigation":"CCIA v. Paxton / SEAT v. Paxton (W.D. Tex., No. 1:25-cv-1413 and related). Dec 23, 2025: PI granted enjoining the Act on First Amendment grounds. June 4, 2026: Fifth Circuit stayed the PI pending appeal, finding Texas likely to succeed (law likely regulates commercial speech). June 10-15, 2026: challengers filed SCOTUS emergency applications (25A1389, 25A1390) to vacate the stay; Texas responded June 22, 2026. No SCOTUS ruling as of 2026-06-27. Stay currently in effect, so law is enforceable.","sourceUrl":"https://capitol.texas.gov/BillLookup/History.aspx?LegSess=89R&Bill=SB2420"},{"name":"Securing Children Online through Parental Empowerment (SCOPE) Act","billNumber":"HB 18","category":"social_media","status":"in_force","signedDate":"2023-06-13","effectiveDate":"2024-09-01","binds":["operators","platforms"],"ages":"Under 18 (known minors)","appliesToUnder":18,"requires":"Digital service providers must register whether a user is a minor; obtain verifiable parental consent before creating a known minor's account; provide parental control/oversight tools; limit collection/use/sale/sharing of a minor's personal data; provide default privacy protections; and prevent minors from agreeing to terms without parental approval. (Content monitoring/filtering, certain targeted-ad limits, and one age-verification provision are currently enjoined.)","litigation":"CCIA & NetChoice v. Paxton (W.D. Tex.). Aug 30, 2024: monitoring-and-filtering provisions preliminarily enjoined. Feb 7, 2025: injunction expanded to targeted-advertising provisions and an age-verification provision (vagueness / First Amendment). Texas appealed to the Fifth Circuit; appeal pending as of 2026-06-27. Remaining provisions (parental consent, data privacy/minimization, parental controls) are in force and enforceable.","sourceUrl":"https://capitol.texas.gov/BillLookup/History.aspx?LegSess=88R&Bill=HB18"},{"name":"Texas Data Privacy and Security Act (TDPSA) — minors' provisions","billNumber":"HB 4 (88th Leg., R.S.)","category":"comprehensive","status":"in_force","signedDate":"2023-06-18","effectiveDate":"2024-07-01","binds":["operators"],"ages":"Children under 13 (a 'known child'); no separate heightened opt-in tier for teens 13-17","appliesToUnder":13,"requires":"Personal data collected from a known child is classified as 'sensitive data' (Sec. 541.001(29)(C)), and a controller must process a known child's sensitive data in accordance with the federal Children's Online Privacy Protection Act (COPPA) rather than via ordinary consent (Sec. 541.101(b)(4)). Texas does not impose a minor-specific opt-in for selling/sharing or targeted advertising to teens — those remain general consumer opt-out rights — so the only heightened minor-specific duty is COPPA-compliant handling of under-13 data.","sourceUrl":"https://capitol.texas.gov/tlodocs/88R/billtext/html/HB00004F.HTM"}],"alsoOutOfScope":["Texas HB 1181 — age-verification law for sexual material 'harmful to minors.' Requires sites with >1/3 such content to verify users are 18+; upheld 6-3 by SCOTUS in FSC v. Paxton (June 27, 2025); in force."]},{"state":"Utah","abbr":"UT","rollupStatus":"enacted_enjoined","laws":[{"name":"App Store Accountability Act","billNumber":"SB 142 (2025), amended by HB 498 (2026)","category":"app_store","status":"enacted_future","signedDate":"2025-03-26","effectiveDate":"2027-05-06","binds":["app_stores","developers"],"ages":"Under 18 (minors); standard age categories: child <13, younger minor 13-15, older minor 16-17, adult 18+","appliesToUnder":18,"requires":"App store providers must verify a user's age category at account creation and obtain verifiable parental consent before a minor downloads apps or makes in-app/app purchases; minor accounts must be linked to a parent account. Developers must check age category and parental-consent status via the app store's data systems.","litigation":"CCIA filed a First Amendment challenge in federal court; voluntarily dismissed Apr 21, 2026 after HB 498 (signed Mar 18, 2026) removed the Utah AG's enforcement authority, mooting the AG-directed claim. Never enjoined. A private right of action remains.","sourceUrl":"https://le.utah.gov/~2025/bills/static/SB0142.html"},{"name":"Utah Minor Protection in Social Media Act","billNumber":"SB 194 / HB 464 (2024)","category":"social_media","status":"enacted_enjoined","signedDate":"2024-03-13","effectiveDate":"2024-10-01","binds":["operators","platforms"],"ages":"Under 18 (minors)","appliesToUnder":18,"requires":"Social media companies must verify the age of Utah account holders, default minors into heightened-protection settings (curfew/notification/design limits), and obtain parental consent for minor accounts. HB 464 adds a private right of action holding algorithmic-curation platforms liable for harms to minor users.","litigation":"NetChoice v. Reyes: U.S. District Court (Chief Judge Shelby) granted a preliminary injunction on 2024-09-10 on First Amendment grounds. Injunction remains in effect; Utah's appeal argued before the 10th Circuit in Nov 2025, no decision as of 2026-06-27 (not stayed, vacated, or reversed).","sourceUrl":"https://le.utah.gov/~2024/bills/static/SB0194.html"},{"name":"Utah Consumer Privacy Act (UCPA) — minors' provisions","billNumber":"S.B. 227 (2022 General Session)","category":"comprehensive","status":"in_force","signedDate":"2022-03-24","effectiveDate":"2023-12-31","binds":["operators"],"ages":"Known children under 13 only (no heightened protections for teens 13-17)","appliesToUnder":13,"requires":"The UCPA's only minor-specific heightened duties apply to a consumer 'known to be' a child, defined as under 13 (Utah Code 13-61-101(8)). A controller may not process the sensitive data of a known child except in accordance with the federal COPPA, 15 U.S.C. 6501 et seq. (13-61-302(3)(b)), and satisfies any parental-consent obligation by following COPPA's verifiable-parental-consent mechanisms (13-61-102(3)); a parent or legal guardian exercises the child's data rights (13-61-202(2)). The Act adds no opt-in consent, targeted-advertising, profiling, or 'sell'/share restrictions for teens aged 13-17 — they are treated as adults under the law's opt-out framework.","sourceUrl":"https://le.utah.gov/xcode/Title13/Chapter61/C13-61_2022050420231231.pdf"}],"alsoOutOfScope":["SB 287 (2023) — Online Pornography Viewing Age Requirements"]},{"state":"Vermont","abbr":"VT","rollupStatus":"enacted_future","laws":[{"name":"Vermont Age-Appropriate Design Code Act","billNumber":"S.69 (Act 63)","category":"aadc","status":"enacted_future","signedDate":"2025-06-12","effectiveDate":"2027-01-01","binds":["operators"],"ages":"Minors under 18","appliesToUnder":18,"requires":"Covered businesses whose online products/features are likely to be accessed by minors must set the highest-privacy settings as default for minors and may not collect, use, sell, or share a minor's personal data unless necessary to provide the service. It restricts profiling and using personal data to prioritize/amplify content for minors, bars push notifications to minors between 12:00 a.m. and 6:00 a.m., and requires a conspicuous signal to a minor when a business permits another person to monitor the minor's activity or location.","litigation":"No suit or injunction is currently in effect against Vermont's AADC. NetChoice opposed S.69 on First Amendment grounds (citing NetChoice v. Bonta on California's CAADCA), but as of 2026-06-28 no court challenge to the Vermont statute has been filed or enjoined.","sourceUrl":"https://legislature.vermont.gov/bill/status/2026/S.69"},{"name":"Vermont Data Privacy and Online Surveillance Act — minors' provisions","billNumber":"S.71 (Act 145)","category":"comprehensive","status":"enacted_future","signedDate":"2026-06-16","effectiveDate":"2028-01-01","binds":["operators"],"ages":"Known minors 13-17; under 13 handled per COPPA","appliesToUnder":18,"requires":"For consumers the controller knows or willfully disregards are minors aged 13 to 17, the controller is prohibited from selling their personal data or processing it for targeted advertising. Controllers that qualify as 'covered businesses' must also comply with the Vermont Age-Appropriate Design Code Act for 'covered minors,' and personal data of children under 13 must be processed in accordance with COPPA. Profiling that produces legal or similarly significant effects is restricted. Enforced exclusively by the Vermont Attorney General.","sourceUrl":"https://legislature.vermont.gov/bill/status/2026/S.71"}]},{"state":"Virginia","abbr":"VA","rollupStatus":"enacted_enjoined","laws":[{"name":"SB 237 / HB 757 — App Store Accountability Act","billNumber":"SB 237 (companion HB 757), 2026 session","category":"app_store","status":"pending","binds":["app_stores","developers"],"ages":"Minors (under 18)","appliesToUnder":18,"requires":"Would require app store providers to verify the age category (adult vs. minor) of an account holder at setup, obtain verifiable parental consent for a minor account holder before app downloads/purchases/in-app purchases, and share age-category and consent signals with app developers; enforceable by the Attorney General and via private action by a harmed minor or parent.","sourceUrl":"https://lis.virginia.gov/bill-details/20261/SB237"},{"name":"SB 854 — Consumer Data Protection Act; social media platforms, minors","billNumber":"SB 854 (2025)","category":"social_media","status":"enacted_enjoined","signedDate":"2025-05-02","effectiveDate":"2026-01-01","binds":["platforms","operators"],"ages":"Under 16","appliesToUnder":16,"requires":"Social media platform operators must use commercially reasonable methods (e.g., a neutral age screen) to determine whether a user is under 16; for identified under-16 users, must limit use of the platform to no more than one hour per day per service, unless a parent provides verifiable parental consent to raise or remove the limit. Age-determination data may not be used for other purposes; service quality/pricing may not be degraded due to the limits.","litigation":"NetChoice v. Jones (formerly NetChoice v. Miyares), No. 1:25-cv-02067, U.S. District Court for the Eastern District of Virginia. Preliminary injunction granted Feb 27, 2026 (Judge Patricia Tolliver Giles) blocking enforcement; court found the law content-based, applied strict scrutiny, and held it not narrowly tailored. Virginia appealed to the U.S. Court of Appeals for the Fourth Circuit (Mar 3, 2026); injunction still in effect as of 2026-06-27.","sourceUrl":"https://lis.virginia.gov/bill-details/20251/SB854"},{"name":"Consumer Data Protection Act; prohibitions and duties relating to minors","billNumber":"SB 232 (2026)","category":"aadc","status":"pending","binds":["operators"],"ages":"Known minors under 18","appliesToUnder":18,"requires":"Would bar a controller of an online service, product, or feature from entering certain agreements with a known minor (under 18) without verified parental consent, and would impose a duty of reasonable care to avoid foreseeable harms to known minors (e.g., self-harm, bullying, sexual exploitation), plus limits on targeted advertising and on algorithmic/recommendation features directed at minors and a parental right to obtain a copy of the minor's data.","sourceUrl":"https://lis.virginia.gov/bill-details/20261/SB232"},{"name":"Virginia Consumer Data Protection Act — minors' provisions","billNumber":"SB 361 / HB 707 (Chapter 844, 2024)","category":"comprehensive","status":"in_force","signedDate":"2024-05-17","effectiveDate":"2025-01-01","binds":["operators"],"ages":"Known child under 13 (processed per COPPA)","appliesToUnder":13,"requires":"For a consumer the controller actually knows is a child (under 13), the VCDPA forbids processing that child's personal data for targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects, and forbids processing or retaining data beyond what is reasonably necessary, unless the controller first obtains parental consent in accordance with COPPA (Code of Va. § 59.1-578(F)). It also limits collection of a known child's precise geolocation data and requires a signal when such data is collected.","litigation":"Not challenged as to the children's-data provisions. The separate NetChoice v. Miyares / Virginia social-media one-hour-limit provisions (§ 59.1-577.1, out of scope here) were preliminarily enjoined Feb. 27, 2026 (E.D. Va., J. Giles); that injunction does not reach the § 59.1-578(F) known-child data duties, which remain in force.","sourceUrl":"https://law.lis.virginia.gov/vacode/title59.1/chapter53/section59.1-578/"}]},{"state":"Washington","abbr":"WA","rollupStatus":"pending","laws":[{"name":"Protecting Washington children online (addictive feeds / push-notification limits for minors)","billNumber":"SB 5708 (companion HB 1834)","category":"social_media","status":"pending","binds":["operators","platforms"],"ages":"under 18 (minors)","appliesToUnder":18,"requires":"Would bar operators of 'addictive internet-based services' from serving an addictive (algorithmic) feed to a user not reasonably determined to be a non-minor, and from sending push notifications during overnight/school hours to such users, absent verifiable parental consent.","litigation":"None — never enacted. Opponents (Washington Policy Center, tech industry) argued the bill would be unconstitutional, but no suit exists because the bill did not become law.","sourceUrl":"https://app.leg.wa.gov/billsummary?BillNumber=5708&Year=2025&Chamber=Senate"}],"alsoOutOfScope":["HB 2112 — Keep Our Children Safe Act (KOCSA), 'establishing an age minimum to access certain adult content online'; died in House committee when the 2026 session adjourned Mar. 12, 2026.","SB 6111 (2026) — 'Protecting children online' social-media age-verification/parental-consent bill (Mississippi HB 1126-model, minors under 17); died in committee at the Mar 12, 2026 sine die."]},{"state":"West Virginia","abbr":"WV","rollupStatus":"none","laws":[],"alsoOutOfScope":["HB 4412 (2026) — 'Require certain websites to utilize age verification methods to prevent minors from accessing content'; adult-content AV law, signed Apr. 1, 2026, effective June 12, 2026.","SB 498 (2026) — 'Protecting Kids from Porn' / 'PROTECT' Act. Mandatory age verification for commercial adult websites (>25% explicit content) with VPN-circumvention ban; died in Senate Judiciary.","HB 2609 (2025) — 'Parental Control of Software Application Downloads' (App Store Accountability-style: parental consent before a known under-16 child downloads apps); died in committee."]},{"state":"Wisconsin","abbr":"WI","rollupStatus":"vetoed","laws":[{"name":"App Store Accountability Act (AB962 / SB937)","billNumber":"AB962 / SB937","category":"app_store","status":"vetoed","binds":["app_stores","developers"],"ages":"Under 18 (minors), with age brackets typical of App Store Accountability Acts","appliesToUnder":18,"requires":"Would have required app store providers to collect and verify age-category information for Wisconsin users, classify users into age brackets, link a minor's account to a parent account, and obtain parental consent for app downloads/in-app purchases by minors; imposed corresponding duties on app developers. Created Wis. Stat. s. 100.85 with a penalty. Did not become law.","litigation":"None — the bill never became law, so there is no statute to challenge or enjoin.","sourceUrl":"https://docs.legis.wisconsin.gov/2025/proposals/reg/asm/bill/ab962"},{"name":"Social Media Age Verification / Parental Consent Act (AB963 / SB936)","billNumber":"AB963 / SB936","category":"social_media","status":"vetoed","binds":["platforms","operators"],"ages":"Under 18, unemancipated minors","appliesToUnder":18,"requires":"Would have imposed on large social media platforms (>= $1B annual revenue) duties toward Wisconsin unemancipated minors (under 18): use reasonable means to estimate account-holder age, obtain verifiable parental consent for minor accounts, and impose design/content restrictions. Did not become law.","litigation":"None — the bill never became law.","sourceUrl":"https://docs.legis.wisconsin.gov/2025/proposals/ab963"}],"alsoOutOfScope":["Internet Age Verification (AB105 / SB130) — adult-content / 'material harmful to minors' age-verification bill; passed both chambers, vetoed by Gov. Evers Apr. 3, 2026 (override failed May 13, 2026)."]},{"state":"Wyoming","abbr":"WY","rollupStatus":"none","laws":[],"alsoOutOfScope":["HB 43 (2025), Ch. 139 — Age Verification for Websites with Obscene Material (W.S. 14-3-501 through 14-3-504); adult-content age-verification law effective July 1, 2025; private civil enforcement only.","HB 19 (2025) — Social Media; Parental Consent for Minors Required","HB 85 (2024 budget session) — Social Media; Parental Consent for Minors Required — failed House introduction 36–25 on Feb. 14, 2024 (short of the 2/3 vote budget sessions require); died."]},{"state":"District of Columbia","abbr":"DC","rollupStatus":"none","laws":[]}]}