Ohio Children’s Privacy Laws (2026)
1 law tracked · overall: Enacted, enjoined · current as of October 1, 2026
Ohio has one tracked children’s privacy law, listed below with its status, the ages it covers, litigation posture, and a link to the official primary source. For the interactive view, open Ohio in the tracker map.
Social Media Parental Notification Act (HB 33, 135th GA budget; codified at R.C. 1349.09)
BlockedHB 33 (135th GA)
Enacted, enjoined · Social media · effective 2024-01-15 · binds operators, platforms
Ages: under 16
Requires: Operators of sites, services or products that let users interact socially, build a profile, keep a list of connections and post content, and that target children or are reasonably anticipated to be accessed by them, must get verifiable consent from a parent or legal guardian, by one of the methods the statute lists, before contracting with an unemancipated child under 16 (terms of service included) to register or create a username; give the parent a list of the product's content-moderation and censoring features with a link to review it later; send written confirmation of the consent; deny the child access without it; and end the child's access within 30 days after a parent withdraws consent. The Attorney General enforces exclusively (no private right of action), with civil penalties of up to $1,000 a day for the first 60 days of noncompliance, up to $5,000 a day for days 61 to 90 and up to $10,000 a day after that, and an operator in substantial compliance gets written notice and 90 days to cure first.
Timing: R.C. 1349.09 took effect 2023-10-03 with H.B. 33's general provisions, but Section 803.380 of H.B. 33 provides that its enactment applies on and after 2024-01-15, so no operator duty attached before that date
Litigation: NetChoice, LLC v. Yost, No. 2:24-cv-00047 (S.D. Ohio); appeal No. 25-3371 (6th Cir.). The district court entered a TRO 2024-01-09, a preliminary injunction 2024-02-12, and on 2025-04-16 granted NetChoice summary judgment and a permanent injunction that barred enforcement of R.C. 1349.09 entirely. No public record shows that injunction stayed or dissolved. A divided Sixth Circuit panel reversed on 2026-06-18 (Clay, J., lead; Batchelder, J., concurring in the judgment; Ritz, J., dissenting) and remanded with instructions to enter judgment for the Attorney General, noting it need not reach the scope of the district court's injunction. Per the appellate docket, rehearing en banc was denied 2026-08-05 and the mandate was then stayed 2026-08-17 on NetChoice's motion; neither order is a published opinion, but both docket entries are reproduced free of charge in CourtListener's RECAP archive for No. 25-3371 (ECF 59, order denying rehearing en banc, 2026-08-05; ECF 60, motion to stay mandate, 2026-08-11; ECF 61, order granting the stay, 2026-08-17). The classification rests on them: with no mandate the district court has entered no judgment and the permanent injunction still binds, which is why this is enacted_enjoined rather than in_force. The stay order (ECF 61) stays the mandate to allow NetChoice time to file a petition for a writ of certiorari and thereafter until the Supreme Court disposes of the case, but directs that the mandate promptly issue if no petition is filed within ninety days from the date of the Sixth Circuit's final judgment.
Source: codes.ohio.gov for Social Media Parental Notification Act (HB 33, 135th GA budget; codified at R.C. 1349.09) (opens in a new tab)Entry last reviewed
Also on the books (out of scope) · 2 measures
- Ohio HB 96 (FY26-27 budget) age-verification provision, codified at R.C. 1349.10, requires adult-content sites to verify users are 18+; signed June 30, 2025, in effect since Sept. 30, 2025.
- Ohio HB 84 'The Innocence Act' (136th GA; reintroduced from HB 295, 135th GA): standalone adult-content/pornography age-verification bill; passed the House 3/18/2026, pending in Senate Judiciary.
Out-of-scope mandates (like adult-content age-gates) are tracked separately and don’t set this state’s status.
Regardless of state law, COPPA governs personal information collected from children under 13: notice, verifiable parental consent, data minimization, and (under the 2025 amended Rule) limits on retention and third-party sharing.
Source: ecfr.gov for 16 C.F.R. Part 312 (opens in a new tab)How Ohio compares
- Social media: Ohio is one of 23 states tracking legislation in this category: California, Florida, Idaho, Louisiana, Minnesota, Mississippi and 16 more
Not legal advice. I build products for a living; I’m not a lawyer. Compiled from primary sources and reviewed monthly as part of the State Children’s Privacy Law Tracker; AI-assisted research, verified against each law’s official source, but laws and injunctions change fast, so confirm the latest before relying on it. Related: COPPA’s Gray Areas.
Cite this page: Calvo, Isaac A. “Ohio: Children’s Privacy Laws.” https://isaaccalvo.com/child-privacy-laws/ohio (data as of 2026-10-01; reviewed monthly).