The GUARDIAN Act requires social media platforms to obtain verifiable parental consent before collecting or processing the personal data of users under the age of 16. It defines "covered platforms" as internet services that use design features like infinite scrolling, push notifications, and personalized recommendation algorithms to promote user engagement. The bill mandates that these platforms delete a minor's data when they turn 16 unless a parent explicitly requests retention, and it grants parents the right to withdraw consent at any time, which forces the platform to terminate the account within ten days. Enforcement is handled by the Federal Trade Commission, with state attorneys general also permitted to bring civil actions for violations, while the law preempts conflicting state regulations but allows states to enact stricter protections for minors.
The CHAT Act 2.0 requires companies operating AI chatbots to register users with age verification and implement specific safety measures to protect minors from harm. The law categorizes these chatbots into three tiers based on their purpose, imposing stricter rules on those designed for companionship or mental health support, such as mandatory break reminders, limits on memory retention, and protocols to detect and report suicidal thoughts. Covered entities must clearly disclose that the chatbot is not human, prohibit the sale of minor users' data, and ensure that any AI providing therapeutic services is supervised by a licensed professional. Enforcement of these requirements falls under the Federal Trade Commission, which also has the authority to work with state attorneys general to address violations.
The Digital Age Assurance Act of 2026 establishes a system where operating system providers must collect a user's date of birth and share only their age range with apps and websites using secure, privacy-preserving methods. This bill directly affects technology companies, internet service providers, and users by mandating that platforms verify a user's age bracket before allowing access to age-restricted content. Key provisions prohibit the sale of children's data, ban targeted advertising toward minors, and prevent companies from using age information for profiling or marketing purposes. Additionally, the law includes anti-competitive rules to ensure that third-party apps face the same age-related restrictions as those owned by the platform itself. Enforcement is handled by the Federal Trade Commission and state attorneys general, who can impose fines for violations.
This bill requires wagering and prediction market platforms to use facial recognition technology to verify that all users are over 18 years old before allowing them to place bets or orders. To protect user privacy, the law mandates that these platforms collect only the data strictly necessary for age verification and must delete any such data once it is no longer needed. The Federal Trade Commission is given the authority to enforce these age verification rules and can issue penalties for violations. Additionally, the legislation establishes a new Office of the Retail Advocate and an Advisory Council within the Commodity Futures Trading Commission to better protect individual investors and oversee the regulation of event contracts.
The SAFE KIDS Act requires companies providing AI chatbots to verify user ages, conduct regular safety risk assessments, and implement specific safeguards to protect children from harms such as self-harm, sexual exploitation, and manipulative design. Providers must offer robust parental controls that allow parents to limit usage, restrict data collection, and receive notifications if their child encounters dangerous content or expresses suicidal ideation. The legislation also prohibits targeting children with advertisements or selling their personal information without explicit parental consent, while mandating annual independent audits to ensure compliance. Enforcement of these rules will be handled by the Federal Trade Commission, which has the authority to impose civil penalties for violations.
This bill, known as the Closing the Digital Divide for Students Act of 2026, allows public housing utility allowances to cover high-speed internet service, equipment, and installation fees for families with children who qualify for free or reduced-price school lunches. The legislation sets the covered internet cost at the lowest monthly rate available in the area while explicitly permitting families to choose more expensive plans or bundled services if they prefer. Additionally, the bill requires internet service providers to offer a specific filtering technology that blocks visual content harmful to minors, ensuring a level of protection comparable to existing certified standards. These changes directly affect households living in public housing by expanding the types of living expenses that can be subsidized through their utility benefits.
The Parents Over Platforms Act requires app stores and developers to verify user ages and restrict access to adult-only content for minors. App stores must ask users to declare their age and allow parents to block specific applications, while developers are prohibited from showing personalized ads to minors and must prevent them from accessing age-gated features. The law grants the Federal Trade Commission authority to enforce these rules and includes a preemption clause that stops states from passing their own conflicting regulations. Developers are solely responsible for identifying which of their apps require age restrictions, and the bill includes protections for companies acting in good faith when technical limitations prevent perfect age verification. These measures will take effect two years after the legislation is enacted.
The Youth AI Privacy Act requires companies that operate artificial intelligence chatbots to take specific steps to protect minors under 18 from potential harm. The law mandates that companies must clearly inform young users that they are interacting with an AI, not a human, and prohibits features designed to encourage compulsive use, such as push notifications or rewards for frequent engagement. Additionally, the bill restricts how companies can use personal data from minors, banning the use of this information for advertising, profiling, or training AI models, with limited exceptions for safety testing. The Federal Trade Commission is tasked with enforcing these rules and issuing guidance to help companies comply, while also authorizing funding for research on the effects of AI chatbots on youth mental health.
This bill, known as the Safe Cloud Storage Act, would provide legal protection for private companies that store child sexual abuse material on behalf of law enforcement agencies. It directly affects technology firms and cloud storage providers that contract with police departments and prosecutors to keep digital evidence of child exploitation. The legislation limits liability for these approved vendors by shielding them from civil lawsuits and criminal charges when performing their contractual duties, except in cases of intentional misconduct, negligence, or acting with reckless disregard. To qualify for this protection, vendors must meet strict cybersecurity requirements including end-to-end encryption, regular independent audits, keeping data within the United States, and maintaining detailed records of who accesses the sensitive material. The bill also establishes procedures for notifying the Department of Justice about contracts and ensures evidence is preserved if a law enforcement agency fails to pay or breaches the agreement.
This bill, titled Sammy's Law, requires large social media platforms with over 100 million monthly users or $1 billion in annual revenue to provide real-time access to third-party safety software providers. These platforms must create application programming interfaces that allow children under 17 or their parents to delegate control over the child's online interactions, content, and account settings to approved safety software providers. The third-party providers must register with the Federal Trade Commission, agree not to sell user data, and delete data within five days after a delegation ends. The bill also prohibits states from creating their own conflicting regulations on this matter and gives the FTC authority to enforce compliance.
