Skip to content

A side project I couldn’t stop researching

State Children's Privacy Law Tracker & Map (2026)

114 laws & bills · 50 states + DC · 13 in force · reviewed monthly · current as of June 28, 2026

A product engineer's view of the state patchwork for shipping connected products to kids — family-safety apps, kids' wearables, and location-sharing tools used by teens, where the rules go gray. Filter the map by obligation or age, and pick a state for the detail and its primary source. It's litigation-aware: a law blocked in court shows as enjoined, not live.

Federal floor

COPPA applies in every state

15 U.S.C. §§ 6501–6506 · 16 C.F.R. Part 312 · 2025 amendments

Before collecting personal information from a child under 13, a covered operator must post a clear privacy notice, obtain verifiable parental consent, collect only what is reasonably necessary, keep it secure, give parents access and deletion rights, and not retain it longer than needed.

2025 amended Rule: The FTC’s amended COPPA Rule (finalized January 2025) adds separate opt-in parental consent before disclosing a child’s data to third parties (including for targeted advertising), a written data-retention policy that bars indefinite retention, a mandatory written information-security program, and an expanded definition of “personal information” covering biometric identifiers and government IDs. Announced by the FTC Jan 16, 2025 and published in the Federal Register Apr 22, 2025; effective June 23, 2025, with full compliance required by April 22, 2026.

16 C.F.R. Part 3122025 final rule

Building a connected product for kids?

Location · design · analytics · consent — the four buckets that drive the engineering work.

Family-safety apps, kids’ smartwatches, and location-sharing tools collect exactly the data these laws govern — and they’re used by teens, where the rules get gray. Use the map’s Obligation lens to see which states impose each one.

  • Location & geolocation

    Precise location is sensitive data: notice and consent before you collect or share it, and limits on sharing a minor’s location.

    Driven by: Age-Appropriate Design Codes and the omnibus privacy laws, which treat precise geolocation as sensitive data.

  • Age-appropriate design

    High-privacy defaults for minors, no dark patterns, and a duty to assess risks before you ship a feature.

    Driven by: Age-Appropriate Design Codes and the minor social-media laws (defaults, no addictive feeds, no dark patterns).

  • Analytics & third parties

    You can’t freely drop in usage-telemetry or marketing SDKs on a child’s data — separate consent for third-party sharing, and bans on targeted ads and data sale to minors.

    Driven by: COPPA’s 2025 amendments (separate consent for third-party sharing), the privacy-law teen opt-ins, and minor social-media targeted-ad bans.

  • Consent & minimization

    Verifiable parental consent for younger children, teen opt-in above that, and collect only what the feature actually needs.

    Driven by: COPPA, the App Store Accountability Acts, and the teen opt-in provisions layered on top.

Operating nationwide? Comply to the high-water mark

Age thresholds don’t conflict — they stack. Meet the strictest per obligation.

These age thresholds don’t contradict each other — they stack, and they’re per-obligation. A product available in all 50 states has to meet the strictest threshold for each kind of duty, not the average.

  • Under 13

    Any data collection

    Verifiable parental consent before you collect a child’s personal information — COPPA, federal, every state. The 2025 amended Rule adds opt-in for third-party sharing and limits on retention.

  • Under 16–17

    Selling data · targeted ads · profiling

    Opt-in consent before you monetize teen data. California draws the sale/share line at under-16; Connecticut and Oregon at under-16; Montana, Delaware and New Jersey reach 16–17; Colorado, Maryland and New York extend duties to under-18.

  • Under 18

    App distribution · accounts · design defaults

    Parental consent to download or buy apps under the App Store Accountability Acts (Texas, Utah, Louisiana…), plus high-privacy defaults and duty-of-care under the Age-Appropriate Design Codes.

The practical upshot: an app that gates only at 13 — “we’re COPPA-compliant” — is still exposed to Texas’s under-18 app-store consent regime(SB 2420), where the burden of proof falls on the developer. Treat under-18 as the protected class for distribution and design, give under-13 the full COPPA treatment for any collection, and assume under-16/17 opt-in before you monetize teen data.

Browse by state

Every state's laws on a page of its own — status, ages, litigation, primary sources.

Every tracked law, by status

What's live, what's coming, what's blocked, what's pending — all 114 laws & bills.

In force · 37

  • California: SB 976 — Protecting Our Kids from Social Media Addiction Act (SB 976)
  • California: California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA) — minors' provisions (Cal. Civ. Code 1798.120 (CCPA, as amended by Prop 24 / CPRA))
  • Colorado: Colorado Privacy Protections for Children's Online Data (SB24-041) — child data-protection / AADC-style provisions (SB24-041)
  • Connecticut: Connecticut Data Privacy Act (CTDPA) — minors' provisions (SB 6 (2022, Public Act 22-15); amended by SB 3 (2023, Public Act 23-56))
  • Delaware: Delaware Personal Data Privacy Act — minors' provisions (HB 154)
  • Florida: HB 3 (2024) — Online Protections for Minors (social media account restrictions, Fla. Stat. s. 501.1736)
  • Florida: Florida Digital Bill of Rights (SB 262) — minors' provisions (Fla. Stat. 501.702/501.71x) (SB 262 (2023))
  • Indiana: Indiana Consumer Data Protection Act — minors' provisions (SB 5 (2023))
  • Iowa: Iowa Consumer Data Protection Act (ICDPA) — minors' provisions (SF 262)
  • Kentucky: Kentucky Consumer Data Protection Act (KCDPA) — minors' provisions (HB 15 (2024 RS))
  • Louisiana: Targeted Advertising / Minors' Data Protection Act (HB 577, 2024 RS, Act 656)
  • Louisiana: Kids Online Protection and Anti-Grooming Act (HB 37, 2025 RS, Act 236)
  • Maryland: Maryland Age-Appropriate Design Code Act (Maryland Kids Code) (SB 571 / HB 603 (2024))
  • Maryland: Maryland Age-Appropriate Design Code Act (Maryland Kids Code) (SB 571 (2024, Ch. 460; cross-filed HB 603))
  • Maryland: Maryland Online Data Privacy Act of 2024 (MODPA) — minors' provisions (SB 541 (2024, Ch. 455; cross-filed HB 567))
  • Minnesota: Minnesota Consumer Data Privacy Act (MCDPA) — minors' provisions (HF 4757 (2024, Ch. 121))
  • Mississippi: HB 1126 (2024) — Walker Montgomery Protecting Children Online Act (HB 1126 (2024 Regular Session))
  • Montana: SB 297 (2025) — amendments to the Montana Consumer Data Privacy Act (Ch. 567, Laws of 2025) (SB 297 (Ch. 567, Laws of 2025))
  • Montana: Montana Consumer Data Privacy Act (MCDPA) — minors' provisions (as amended by SB 297) (SB 297 (2025); MCDPA codified at MCA 30-14-2801 et seq.)
  • Nebraska: Age-Appropriate Online Design Code Act (LB 504) (LB 504)
  • Nebraska: Nebraska Age-Appropriate Online Design Code Act (LB504)
  • Nebraska: Nebraska Data Privacy Act — minors' provisions (LB1074)
  • New Hampshire: New Hampshire Data Privacy Act (RSA 507-H, enacted via SB 255) — minors' provisions (SB 255 (2024); codified at RSA 507-H)
  • New Jersey: New Jersey Data Privacy Act — minors' provisions (S332 (P.L. 2023, c. 266))
  • New York: New York Child Data Protection Act (S7695B (Ch. 121 of 2024))
  • Ohio: Social Media Parental Notification Act (HB 33, 135th GA budget; codified at R.C. 1349.09) (HB 33 (135th GA))
  • Oregon: Oregon Consumer Privacy Act (OCPA) — minors' provisions (SB 619 (2023), as amended by HB 2008 (2025))
  • Rhode Island: Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA) — minors' provisions (H7787 / S2500 (2024))
  • South Carolina: South Carolina Social Media Regulation Act (H.3431 / Act No. 96, R100)
  • South Carolina: South Carolina Age-Appropriate Design Code Act (H.3431 (Act No. 96, R100))
  • Tennessee: Protecting Children from Social Media Act (HB 1891 / SB 2097, 113th GA) (HB 1891 (113th GA) / Public Chapter 899)
  • Tennessee: Tennessee Information Protection Act (TIPA) — minors' provisions (SB 73 / HB 1181)
  • Texas: App Store Accountability Act (SB 2420)
  • Texas: Securing Children Online through Parental Empowerment (SCOPE) Act (HB 18)
  • Texas: Texas Data Privacy and Security Act (TDPSA) — minors' provisions (HB 4 (88th Leg., R.S.))
  • Utah: Utah Consumer Privacy Act (UCPA) — minors' provisions (S.B. 227 (2022 General Session))
  • Virginia: Virginia Consumer Data Protection Act — minors' provisions (SB 361 / HB 707 (Chapter 844, 2024))

Enacted — not yet effective · 17

  • Alabama: App Store Accountability Act (HB161 (Act 2026-59)) — effective 2027-01-01
  • California: AB 1043 — Digital Age Assurance Act (AB 1043) — effective 2027-01-01
  • California: AB 56 — Social media: warning labels (AB 56) — effective 2027-01-01
  • Colorado: SB26-051 — Age Attestation on Computing Devices — effective 2028-07-01
  • Connecticut: An Act Concerning Online Safety (Substitute Senate Bill No. 5 / Public Act No. 26-15), Sec. 39 — social media covered-platform minor protections (SB 5 (2026); Public Act No. 26-15) — effective 2028-01-01
  • Connecticut: Connecticut minors' online data protection framework (CTDPA §§ 42-529a to 42-529b), as enacted by SB 1295 / Public Act 25-113 (SB 1295 (Public Act 25-113)) — effective 2026-07-01
  • Idaho: Stop Harms from Addictive Social Media Act (HB 542 / Session Law Chapter 268) (HB 542 (H0542), 2026 Reg. Sess.; Session Law Chapter 268) — effective 2026-07-01
  • Indiana: House Enrolled Act 1408 (2026) — Restricting Minor Access to Social Media (HB 1408 / HEA 1408 (2026)) — effective 2027-01-01
  • Louisiana: App Store Accountability Act (HB 570, 2025 RS, Act 481, as amended by HB 977, 2026 RS, Act 185) (HB 977 (Act 185), amending HB 570 (Act 481)) — effective 2027-07-01
  • Minnesota: Stop Harms from Addictive Social Media Act amendments (HF 4138) (HF 4138 (2026 Minn. Laws ch. 111)) — effective 2027-07-01
  • Mississippi: HB 1224 (2026) — Mississippi Keeping Kids Safe Online Act (HB 1224 (2026 Regular Session)) — effective 2026-07-01
  • Nebraska: Parental Rights in Social Media Act (LB 383) (LB 383) — effective 2026-07-01
  • New Hampshire: New Hampshire HB 1460 — prohibition on the sale of a child's personal data (amending RSA 507-H) (HB 1460 (2026), Chapter 168) — effective 2027-01-01
  • New York: Stop Addictive Feeds Exploitation (SAFE) For Kids Act (S7694A / A8148A (Chapter 120 of 2024); GBL Article 45) — effective 180 days a
  • Utah: App Store Accountability Act (SB 142 (2025), amended by HB 498 (2026)) — effective 2027-05-06
  • Vermont: Vermont Age-Appropriate Design Code Act (S.69 (Act 63)) — effective 2027-01-01
  • Vermont: Vermont Data Privacy and Online Surveillance Act — minors' provisions (S.71 (Act 145)) — effective 2028-01-01

Enacted — enjoined · 9

  • Arkansas: Social Media Safety Act (SB 396 / Act 689 of 2023)
  • Arkansas: Social Media Safety Act amendment (SB 611 / Act 900 of 2025)
  • Arkansas: Regulation of Social Media Platform Design (SB 612 / Act 901 of 2025)
  • California: California Age-Appropriate Design Code Act (CAADCA) (AB 2273 (2021-2022), Chapter 320)
  • Colorado: HB24-1136 — Healthier Social Media Use by Youth
  • Georgia: SB 351 — Protecting Georgia's Children on Social Media Act of 2024 (Act 463), social media provisions (SB 351 (2023-2024 Reg. Sess.) / Act 463)
  • Louisiana: Secure Online Child Interaction and Age Limitation Act (SB 162, 2023 RS, Act 456)
  • Utah: Utah Minor Protection in Social Media Act (SB 194 / HB 464 (2024))
  • Virginia: SB 854 — Consumer Data Protection Act; social media platforms, minors (SB 854 (2025))

Pending · 49

  • Alaska: App Stores, Parents, and Minors (App Store Accountability Act) (HB 46)
  • Alaska: Social Media Platforms and Minors (HB 318)
  • Alaska: Social Media Regulation Act (provisions stripped from CSAM/AI-imagery bill) (HB 47)
  • Alaska: Social Media and Minors (SB 262)
  • Arizona: HB 2920 — Software applications; minors; requirements (App Store Accountability Act) (HB 2920 (2026, 57th Leg., 2nd Reg. Sess.))
  • Arizona: HB 2991 — Social media; online content; minors (HB 2991 (2026, 57th Leg., 2nd Reg. Sess.))
  • Colorado: HB26-1148 — Protections for Youth on Social Media
  • Georgia: Georgia Age-Appropriate Design Code Act (SB 495) (SB 495)
  • Illinois: Children's Online Social Media Safety Act (HB 5511) (HB 5511)
  • Illinois: Parental Consent for Social Media Act (SB 2316) (SB 2316)
  • Illinois: Illinois Age-Appropriate Design Code Act (SB51)
  • Kansas: Kansas Age-Appropriate Design Code Act (SB 499) (SB 499)
  • Kentucky: HB 12 (2025 RS) — AN ACT relating to online protections for minors (combined app store + social media)
  • Kentucky: HB 632 (2026 RS) — AN ACT relating to online protections for minors (App Store Accountability)
  • Kentucky: HB 227 (2026 RS) — AN ACT relating to addictive online platforms
  • Kentucky: Kentucky Kids Code (Age-Appropriate Design Code) (HB 633 (2026 RS))
  • Maryland: Consumer Protection - Application Store Accountability Act (HB 1179 (2026))
  • Massachusetts: An Act protecting children from social media and prohibiting cell phones in schools (House youth technology / social media age-verification bill) (H.5366 (engrossed House version of S.2581))
  • Michigan: SB 757 (2025-2026) — Stop Addictive Feeds Exploitation (SAFE) for Kids Act
  • Michigan: SB 758 (2025-2026) — Kids Over Clicks (minor data protection)
  • Michigan: SB 759 (2025-2026) — Kids Over Clicks (minor data/privacy)
  • Michigan: SB 760 (2025-2026) — Leading Ethical AI Development (LEAD) for Kids Act
  • Michigan: HB 4388 (2025-2026) — Social Media Regulation / Protection Act (minors)
  • Michigan: SB 190 (2025-2026) — Social Media Children Protection Act
  • Michigan: HB 4429 (2025-2026) — Digital Age Assurance Act
  • Michigan: SB 284 (2025-2026) — Digital Age Assurance Act
  • Michigan: Michigan Age-Appropriate Design Code Act (MI Kids Code) (HB 5357)
  • Michigan: Michigan Personal Data Privacy Act — minors' provisions (SB 359)
  • Minnesota: Minnesota Age-Appropriate Design Code Act (HF 4511 (companion SF 4574))
  • Missouri: HB 2392 — Missouri Social Media Safety for Minors Act (Rep. Marty Joe Murray)
  • Missouri: HCS HBs 1887, 2361, 1913, 2862 & 2321 — Megan Meier Act (Rep. Hausman); Social Media Use by Minors, Sec. 407.3475 (incorporates Rep. Mayhew's HB 3393)
  • New Jersey: S3993 — Requires age verification and parental/guardian consent for a minor's use of a social media platform; prohibits certain adult-minor messaging (222nd Legislature, 2026-2027 session) (S3993 (222nd Legislature, 2026-2027))
  • New Jersey: New Jersey Kids Code Act (Age-Appropriate Design Code for New Jersey) (S3413 (Senate); A4015 (Assembly companion))
  • New York: App Store / Device Age-Assurance Act (operating system / app store age verification) (S8102-B (2025-2026 session, Sen. Gounardes); A8893)
  • North Carolina: Social Media and AI Safety Act (HB 301) (HB 301 (2025-2026 Session))
  • Ohio: App Store Accountability Act (HB 226 / SB 167, Meta-backed; competing HB 302 / SB 175, Google-backed; 136th GA) (HB 226 / SB 167 (136th GA); also HB 302 / SB 175)
  • Oklahoma: HB 1275 (Social Media Age Verification / Parental Consent for Minors) (HB 1275 (2025 Reg. Sess.; carryover))
  • Pennsylvania: Protection of Minors on Social Media (Senate companion) (SB 22)
  • Pennsylvania: Protection of Minors on Social Media (House companion) (HB 1430)
  • Pennsylvania: Children's Online Safety Act (HB 1729)
  • Pennsylvania: Guidelines for User Age Verification and Responsible Dialogue (AI for Children) (HB 2215)
  • Rhode Island: Rhode Island Social Media Regulation Act (H7953 / S2968 (2026))
  • Rhode Island: Rhode Island Children's Online Safety Act (H7746 (2026))
  • South Carolina: App Store Accountability Act (H.3405)
  • South Carolina: South Carolina Social Media Regulation Act (H.5209)
  • Tennessee: App Store Accountability Act (HB 2254, 114th GA) (HB 2254 (114th GA))
  • Virginia: SB 237 / HB 757 — App Store Accountability Act (SB 237 (companion HB 757), 2026 session)
  • Virginia: Consumer Data Protection Act; prohibitions and duties relating to minors (SB 232 (2026))
  • Washington: Protecting Washington children online (addictive feeds / push-notification limits for minors) (SB 5708 (companion HB 1834))

Vetoed · 2

  • Wisconsin: App Store Accountability Act (AB962 / SB937) (AB962 / SB937)
  • Wisconsin: Social Media Age Verification / Parental Consent Act (AB963 / SB936) (AB963 / SB936)

Not legal advice. I build products for a living; I'm not a lawyer. This is a personal tool I use to stay on top of the child-privacy landscape and understand how it shapes the features, apps, and products I design in the kids space — not guidance for anyone else. It's AI-assisted research, and AI can make mistakes: I make every effort to verify, check, and confirm each entry against primary sources as of June 28, 2026, but laws — and especially injunctions — change fast, so always confirm the latest on each law against the linked source before relying on it. Related: COPPA's Gray Areas · all writing.

Use the data. The full dataset is free to reuse under CC BY 4.0 (attribution with a link back here): download JSON.