Age verification signals: software applications

Starting in 2027, the law creates a standardized way to identify whether an app user is under 13, 13–15, 16–17, or 18 or older without sharing more information than necessary.

What the law does ​

• Requires operating-system providers with account setup features to ask the account holder for the primary device user’s birth date, age, or both, and generate an age-range signal.
• Requires app stores to request the signal from the operating system and provide it to developers upon request.
• Requires developers to request a signal when an app is downloaded and launched, use it to comply with applicable law, and generally treat it as the primary age indicator.
• Bars entities from asking users to change their age information, requesting signals unless required by law, sharing signals for unrelated purposes, or seeking more data than necessary.
• Requires age-entry interfaces for devices set up before January 1, 2027, by July 1, 2027, and requires developers to obtain signals for certain existing apps by that date.
• Authorizes the Attorney General to seek injunctions and civil penalties of up to $2,500 per affected child for negligent violations and $7,500 for intentional violations.

Who it affects ​

• Operating-system providers, including providers of device operating systems with account setup features.
• Covered app stores and third-party app developers.
• Account holders, including parents or legal guardians, who identify the primary user’s age during device setup.
• Child and adult users of devices and applications.