US Children’s Privacy Legislation Tracker

Current as of January 26, 2026.

Harmful Content Age Verification

State	Legislative Process Status	Effective Date	Statute Name	Statute/Bill	Penalties	Challenged in Court	Court Ruling	Reasonable Age Verification Method	Prohibited Personal Information Data Retention After Verification	Frequent Re-Verification	Attorney General	Private right of action	State/Federal Regulator	Comments
Alabama	Enacted	Oct. 1, 2024		Act 2024-97 (HB164) Ala. Code § 8–19G–1 to § 8–19G–10	Up to $10,000 per violation by the Attorney General	No		✓	✓	✖	✓	✓	✖
Arizona	Enacted	Sep. 26, 2025		Chapter 0193-571R (HB2112) Ariz. Rev. Stat. § 18-701	Private lawsuits by parents or guardians whose children were able to access the material for awards up to $250,000 plus $10,000 per day that the website lacked age verification; $10,000 per instance when website retains identifying information	No		✓	✓	✖	✖	✓	✖
Arkansas	Enacted	Aug. 1, 2023		Act 612 (SB66) Ark. Code § 4–88–1301 to § 4–88–1305		No		✓	✓	✖	✖	✓	✖
Idaho	Enacted	Jul. 1, 2024		2024 Session Laws, ch. 113 (H0498) Idaho Code § 6–3801 to § 6–3809	Statutory damages no less than $10,000; injunctive relief; nominal and compensatory damages	No		✓	✓	✖	✖	✓	✖
Indiana	Enacted	Aug. 16, 2024		P.L.98-2024 (SB0017) Ind. Code § IC24–4–23	No more than $250,000 by the AG, AND private lawsuit damages of up to $5,000	Yes	The law was challenged but upheld in light of the Supreme Court decision in Free speech Coalition, Inc. v. Paxton.	✓	✓	✖	✓	✓	✖	*Free Speech Coalition, Inc. v. Rokita In light of the Supreme Court's decision in Free Speech Coalition, Inc. v. Paxton, No. 23-1122 (June 27, 2025), the decision of the district court in Rokita is vacated,and the case is remanded with instructions to enter judgment for the defendant with respect to the claim under the First Amendment. Free Speech Coal., Inc. v. Rokita, No. 24-2174, 2025 WL 2215894, at *1 (7th Cir. Aug. 1, 2025).
Kansas	Enacted	Jul. 1, 2024		L. 2024, ch. 28, § 1 (SB394) Kan. Stat. Ann. § 50-6-146	Statutory damages no less than $10,000; injunctive relief; nominal and compensatory damages	No		✓	✓	✖	✖	✓	✖
Kentucky	Enacted	Aug. 16, 2024		P.L.98-2024 (SB0017) Ind. Code § IC24–4–23	No more than $250,000 by the AG, AND private lawsuit damages of up to $5,000	Yes	The law was challenged but upheld in light of the Supreme Court decision in Free speech Coalition, Inc. v. Paxton.	✓	✓	✖	✓	✓	✖	*Free Speech Coalition, Inc. v. Rokita In light of the Supreme Court's decision in Free Speech Coalition, Inc. v. Paxton, No. 23-1122 (June 27, 2025), the decision of the district court in Rokita is vacated, and the case is remanded with instructions to enter judgment for the defendant with respect to the claim under the First Amendment. Free Speech Coal., Inc. v. Rokita, No. 24-2174, 2025 WL 2215894, at *1 (7th Cir. Aug. 1, 2025).
Louisiana	Enacted	Jan. 1, 2023		Act 440 (HB142) La. Stat. Ann. § 9:2800.29		No		✓	✓	✖	✖	✓	✖
Louisiana	Enacted	Aug. 1, 2023	Pornography Age Verification Enforcement Act or the "PAVE Act"	Act 216 (HB77) La. Stat. Ann. § 51:2121	No more than $5,000 for each day of violation; plus additional civil penalty not to exceed $10,000 for each violation	Yes	The law was challenged but case was ultimately dismissed.	✓	✖	✖	✓	✖	✖	*Free Speech Coalition, Inc. v. LeBlanc
Mississippi	Enacted	Jul. 1, 2023		2023, ch. 513, § 3 (SB2346) Miss. Code Ann. § 11-77-1 to § 11-77-7		No		✓	✓	✖	✖	✓	✖
Montana	Enacted	Jan. 1, 2024		Laws 2023, ch. 700, § 1 (SB544) Mont. Code. Ann. §30-14-159		Yes	FILED and dismissed Aug. 6, 2025.	✓	✓	✖	✖	✓	✖	*Free Speech Coalition, Inc. v. Knudsen
Montana	Enacted	Apr. 17, 2025		Laws 2025, ch. 199, § 4 (SB488) Mont. Code. Ann. §30-14-159		No		✓	✓	✖	✖	✓	✖	*Amends SB544 to remove the department annual report requirement.
Nebraska	Enacted	Jul. 19, 2024	Online Verification Liability Act	Laws 2024, LB1092 Neb. Rev. Stat. § 87-1001 to § 87-1005		No		✓	✓	✖	✖	✓	✖
North Carolina	Enacted	Jan. 1, 2024	Pornography Age Verification Enforcement Act or the "PAVE Act"	S.L. 2023-132, § 3.20(a) (H8) N.C. Gen. Stat. § 66-500 to § 66-501	/td>	No		✓	✓	✖	✖	✓	✖
North Dakota	Enacted	Aug. 1, 2025		SB2380/HB1561 N.D. Cent. Code § 51-07-32		No		✓	✓	✖	✖	✓	✖
Oklahoma	Enacted	Nov. 1, 2024		Chapter 181, O.S.L. 2024 (SB1959) Okla. Stat. tit. 15 §791		No		✓	✓	✖	✓	✓	✖
South Carolina	Enacted	May 21, 2025	Child Online Safety Act	Act 198 (H3424) S.C. Code Ann.§ 37-1-310		Yes		✓	✓	✖	✓	✓	✖
South Dakota	Enacted	Jul. 1, 2025		2025 South Dakota Laws Ch. 95 (HB 1053)	Civil penalty of not more than $5,000 for each separate instance	No		✓	✓	✖	✓	✖	✖	*A violation is a Class 1 misdemeanor and subsequent violation by the same platform is a Class 6 felony.
Tennessee	Enacted	Jan. 1, 2025	Protect Tennessee Minors Act	2024 Pub. Ch. 1021 (SB1792/HB1614) Tenn. Code. Ann §39-17-912 (subdivision (b)(5) is deleted in its entirety by 2025 Pub. Ch. 405 (SB488/HB761))		Yes	On hold pending outcome in Supreme court case: Free Speech v. Paxton (Texas). The docket does not indicate that the case has been dismissed following the Paxton ruling.	✓	✓	✓	✓	✓	✖	"Businesses must verify age after each 60-minute session AND retain at least 7 years of historical anonymized age-verification data. Also includes criminal code enforcement - Class C felony. *Challenged in court: Free Speech Coalition, Inc v. Skrmetti - The Sixth Circuit granted the Attorney General's motion to stay the preliminary injunction against enforcing the PTMA pending appeal. The case appear to be ongoing and has not been dismissed."
Texas	Enacted	Sep. 1, 2023		Acts 2023, 88th Leg., ch. 676 (H.B. 1181) Tex. Civ. Prac. & Rem. Code § 129B	Not more than $10,000 per day for violation; plus $10,000 for retaining identifying information; an additional amount not more than $250,000 if minors access the site	Yes	Supreme Court ruled in favor of Texas.	✓	✓	✖	✓	✖	✖
Utah	Enacted	May 3, 2023		Laws 2023, Ch. 262 (SB287) Utah Code § 78B-3-1001 to § 78B-3-1003		Yes	Case dismissed.	✓	✓	✖	✖	✓	✖	*Free Speech Coalition v. Anderson
Virginia	Enacted	Jul. 1, 2023		Acts 2023, Ch. 811 (SB1515) Va. Code Ann. §8.01-40.5		No		✓	✓	✖	✖	✓	✖	The statute does not explicitly provide for private right of action nor does it grant the Attorney General enforcement power. The law reads: "Any commercial entity that violates the provisions of this section shall be subject to civil liability for damages resulting from a minor's access to such material harmful to a minor and reasonable attorney fees and costs.
Wyoming	Enacted	Jul. 1, 2025		Laws 2025, Ch. 139 (HB0043) Wyo. Stat. Ann. §14-3-501 to §14-3-504		No		✓	✓	✖	✖	✓	✖

Term	Definition
Reasonable Age Verification Method	A method to determine whether the user is a minor by collecting age-verifying personal information
Prohibited Personal Information Data Retention After Verification	Prohibits retaining age-verifying personal information after verification use
Frequent Re-verification	Require periodic re-verifying of age (see comments for state-specific periodic requirement)

Age-Appropriate Design Code

State	Legislative Process Status	Effective Date	Statute Name	Statute/Bill	Penalties	Challenged in Court	Court Ruling	Reasonable Age Verification Method	Age Estimation	Age-Ranged Design	Data Protection (Impact) Assessment	Risk Mitigation Plan	Default High Level Privacy Protection	Data Minimization	Restrict Geolocation Tracking	Restrict Dark Patterns	Restrict Automated Profiling	Clear Accessible Age Suited Privacy Policy	Privacy Rights Managing/Reporting Tools	Parental Control/Monitoring Mechanism	Monitoring or Tracking Signal	Attorney General	Private right of action	State Regulator
California	Enacted	01-Jul-24	The California Age-Appropriate Design Code Act	Stats 2022 ch 320 (AB2273) Ca. Civ. Code § 1798.99.28 to § 1798.99.40	Civil penalty of up to $2,500 per affected child for each negligent violation or up to $7,500 per affected child for each intentional violation	Yes	PRELIMINARY INJUNCTION (BEING APPEALED BY STATE)	✖	✓	✓	✓	✓	✓	✓	✓	✓	✓	✓	✓	✖	✓	✓	✖	✖
Connecticut	Enacted	01-Jul-26	Amendments to Connecticut Data Privacy Act	Conn. Gen. Stat. §45-529(a)	Civil penalty of up to $10,000 per violation.	No		✖	✖	✖	✓	✓	✓	✓	✓	✓	✓	✖	✓	✖	✖	✓	✖	✖
Maryland	Enacted	01-Oct-24	Maryland Age Appropriate Design Code Act ("Kids Code")	2024 Md. Laws, Ch. 460 and 461 (SB0571/HB0603) Md. Code, CL § 14-4801 to § 14-4813	Civil penalty of up to $2,500 per affected child for each negligent violation or up to $7,500 per affected child for each intentional violation	Yes	Filed	✖	✓	✓	✓	✖	✓	✓	✓	✓	✓	✓	✓	✖	✓	✓	✖	✖
Nebraska	Enacted	01-Jan-26	Age-Appropriate Online Design Code Act	LB504 Neb. Rev. Stat. § 87-1301 to § 87-1309	Civil penalty not to exceed fifty thousand dollars for each violation	No		✖	✖	✓	✖	✖	✓	✓	✓	✓	✓	✖	✓	✓	✓	✓	✖	✖
Vermont	Enacted	01-Jan-27	Vermont Age-Appropriate Design Code Act	Act 63 (S69)	Violation is an “unfair and deceptive act in commerce” under 9 V.S.A. § 2453.	No		✓	✓	✓	✖	✖	✓	✓	✓	✓	✓	✖	✓	✖	✓	✓	✓	✖

Term	Definition
Reasonable Age Verification Method	A method to determine whether the user is a minor by collecting age-verifying personal information
Age Estimation	Estimate the age of child users with a reasonable level of certainty
Age-Ranged Design	Grouping minor ages into ranges and taking into account these ranges when designing
Data Protection (Impact) Assessment	Survey to assess and mitigate risks that arise from data management practices
Risk Mitigation Plan	A plan to mitigate or eliminate the risks identified
Default High Level Privacy Protection	Configure all default privacy settings to settings that offer a high level of privacy
Data Minimization	Collect, process, retain only the absolutely necessary amount of personal data required for a specific legitimate purpose
Restrict Geolocation Tracking	Not collect, sell, or share any precise geolocation information of minor by default
Restrict Dark Patterns	Not use of dark patterns to lead or encourage children to provide personal information beyond what is reasonably expected
Restrict Automated Profiling	Not perform automated processing of personal information to create a profile by evaluating, analyzing or predicting aspects concerning a natural person’s economic situation, health, personal preferences, interests, behavior, location, or movements
Clear Accessible Age Suited Privacy Policy	Provide any privacy information, terms of service, policies, and community standards concisely, prominently, and using clear language suited to the age of minors likely to access
Privacy Rights Managing/Reporting Tools	Provide prominent, accessible, and responsive tools to help children, or if applicable their parents or guardians, exercise their privacy rights and report concerns
Parental Control/Monitoring Tools	Tool that allows parents or guardians to monitor a minor's online activity or track a minor's location
Monitoring or Tracking Signal	Provide an obvious signal to the minor when the minor is being monitored or tracked by parent or guardian or that precise geolocation information is being collected

Internet-Enabled Device-Based Filter for Harmful Content

State	Legislative Process Status	Effective Date	Statute Name	Statute/Bill	Penalties	Require Age During Device Setup	Automatically Enable Filter	Password to Manage Filter Activation/Deactivation	Notification When Filter Blocks	Attorney General	Private right of action	State Regulator	Comments
Alabama	Enacted	Oct. 1, 2025	SB186	Act 2025-406 (SB186) Ala. Code § 8–19H–1 to § 8–19H–5	Civil penalty up to $5,000 per violation and not exceed $50,000 in aggregate	✓	✓	✓	✓	✓	✖	✖	Applies to video game consoles as well
Utah	Enacted	Jan. 1, 2025	Children's Device Protection Act	Laws 2024, Ch. 166 (SB104) Utah Code § 78B-6-2601 to § 78B-6-2606	Attorney General may recover civil penalty up to $5,000 per violation and not exceed $50,000 in aggregate; ALSO Private right action civil penalty award of $50,000 for each violation	✓	✓	✓	✓	✓	✓	✖	✖
Idaho	Introduced		Children's Device Protection	S.B. 1158
South Carolina	Introduced		Children's Device Protection	S. B. 4689

Term	Definition
Filter	Software on a device to prevent access or display of harmful materials through browsers or search engines
Require Age During Device Setup	User to provide age during device activation and account set-up
Automatically Enable Filter	Filter is automatically enabled when the user is a minor based on the age provided
Password to Manage Filter Activation/Deactivation	A non-minor user with a password can activate/deactivate filter
Notification When Filter Blocks	Notify device user when filter blocks device from accessing a website

App Store Accountability (Platform and Developer Obligations)

State	Legislative Process Status	Effective Date	Statute Name	Statute/Bill	Penalties	Reasonable Age Verification Method	Digital Age Signal	Age Category Data	Verifiable Parental Consent before Download/Purchase	Linked Parental Account to Minor's Account	Display Age Ratings	Parental Control Mechanism	Data Minimization	Protect User Data through Encryption	Attorney General	Private right of action	State/Federal Regulator
Federal	Introduced		App Store Accountability Act	S1586/HR3149		✓	✓	✓	✓	✓	✖	✖	✖	✖	Federal Trade Commission (FTC)	Federal Trade Commission (FTC)	Federal Trade Commission (FTC)
Alaska	Introduced			HB46	Civil penalty of not more than $10,000 for each violation	✓	✓	✓	✓	✖	✓	✓	✖	✖	✓	✖	✖
California	Enacted	01-Jan-27	Digital Age Assurance Act	AB1043	Civil penalty of up to $2,500 per affected child for each negligent violation or up to $7,500 per affected child for each intentional violation	✓	✓	✓	✓	✖	✖	✓	✖	✖	✓	✖	✖
Hawaii	Introduced		Age Verification for App developers and App stores act	SB1542		✓	✓	✓	✓	✖	✓	✓	✖	✖	✓	✖	✖
Illinois	Introduced		Digital Age Assurance Act	HB3304	Civil penalty for up to $10,000 per violation	✖	✓	✖	✓	✖	✖	✓	✖	✖	✖	✖	✖
Louisiana	Enacted	01-Jul-26		Act 481 (HB570) La. Stat. Ann. § 51:1761 to § 51:1763	Civil penalty for up to $10,000 per violation	✓	✓	✓	✓	✖	✖	✓	✖	✖	✓	✖	✖
South Carolina	Introduced		App Store Accountability Act	H3405	Civil penalty for up to $10,000 per violation	✓	✓	✓	✓	✖	✓	✓	✖	✖	✓	✖	✖
South Dakota	Dead			SB180		✓	✖	✓	✓	✖	✖	✖	✓	✓	✓	✖	✖
Texas	Enacted	01-Jan-26	App Store Accountability Act	SB2420/HB4901		✓	✓	✓	✓	✓	✓	✖	✓	✓	✓	✖	✖
Utah	Enacted	07-May-25	App Store Accountability Act	Laws 2025, Ch. 446 (SB0142) Utah Code § 13-75-101 to § 13-75-40	Award a parent/guardian the greater of actual damages or $1,000 for each violation	✓	✓	✓	✓	✖	✖	✖	✓	✓	✖	✓	✖

Term	Definition
Reasonable Age Verification Method	A method to determine whether the user is a minor by collecting age-verifying personal information
Digital Age Signal	User to provide age during device activation and account set-up
Age Category Data	Information that identifies the age category of a user and is collected by a covered app store provider and shared with an app developer
Verifiable Parental Consent before Download/Purchase	Authorization provided by a parent whom has been verified is an adult
Linked Parental Account to Minor's Account	Ensure a minor's account is linked to an established verified parental account
Display Age Ratings	Publicly display the assessment of an app’s appropriateness for the different age categories
Parental Control Mechanism	Provide a parent/guardian a clear and easy mechanism to set filters that prevent a minor from accessing harmful content or usage limits, including daily limits and limitations during school and evening hours
Data Minimization	Limiting the collection and processing of personal data to the minimum amount necessary
Protect User Data through Encryption	Transmitting personal data using industry-standard encryption protocols that ensure data integrity and confidentiality

Social Media Legislation

State	Legislative Process Status	Effective Date	Statute Name	Statute/Bill	Penalties	Challenged in Court	Court Ruling	Reasonable Age Verification Method	Prohibited Personal Information Data Retention after Verification	Restrict Addictive Practices/Design	Access Restriction	Notification Restriction	Default High Level Privacy Protection	No Minor Account Holder	Parental Consent to Create Account	Parental Control or Monitoring Mechanism	Data Minimization	Restrict Targeted Advertising	Restrict Geolocation Tracking	Monitoring or Tracking Signal	Restrict Communications From Non-Connected Users	Privacy Rights Managing/Reporting Tools	Anonymize or De-identify Personal Information Data	Attorney General	Private right of action	State/Federal Regulator
Federal	Introduced		Kid's Online Safety Act	SB1748				✖	✖	✓	✖	✓	✓	✖	✓	✓	✖	✖	✓	✓	✓	✓	✖	✓	✖	✓
Federal	Introduced		Sammy's Law	HR2657				✖	✖	✖	✖	✖	✓	✖	✖	✓	✓	✖	✖	✓	✖	✓	✖	✖	✖	✓
Federal	Introduced		Kids Off Social Media Act	S278				✖	✓	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	Federal Trade Commission (FTC) and States' Attorneys General	Federal Trade Commission (FTC) and States' Attorneys General	Federal Trade Commission (FTC) and States' Attorneys General
Alabama	Introduced	01-Oct-2026	Social media; certain media feeds lacking age verification, Attorney General authorized to enforce	HB 171	Injunction, restitution, forfeiture/profits incl. destruction of unlawfully obtained data, damages, and civil penalties up to $5,000 per violation. Private right of action if the operator shares age-verification/parental-consent info collected for verification in violation of the deletion/use limits.	No		✓	✓	✓	✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖
Arizona	Enacted	26-Sep-25	Student access to internet; student use of wireless communication devices, policies and procedures, annual notice, definitions	A.R.S. § 15-120.05	N/A	No		✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖
Arkansas	Enacted	45170	Social Media Safety Act	Act 689 (SB396) Ark. Code § 4-88-1401 to § 4-88-1404	Under original act, $2,500 per violation, costs, fees and damages available. In 2025, Act 900 (SB611) amended the Act to $10,000 per violation and added a private right of action.	Yes	PERMANENT INJUNCTION (BEING APPEALED BY STATE)	✓	✓	✖	✖	✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖
Arkansas	Enacted	01-Jul-26	Child Content Creation Protection Act	Act 982 (HB1975)	Injunction, damages, fees and costs	No		✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖	✓	✖
Arkansas	Enacted	01-Jul-26	Children And Teens' Online Privacy Protection Act	Act 952 (HB1717)	Enjoin violations, enforce compliance, obtain damages, restitution, or other compensation, and other appropriate relief	No		✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖	✖	✖	✓	✖	✓	✖	✖
Arkansas	Enacted	45872	Amend Social Media Safety Act	Act 900 (SB611) Ark. Code § 4-88-1401 to § 4-88-1404	Civil penalty of $10,000 per violation	Yes	PRELIMINARY INJUNCTION (BEING APPEALED BY STATE)	✓	✖	✓	✖	✓	✓	✖	✓	✓	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖
Arkansas	Enacted	05-Aug-25	Regulation of Social Media Platforms	Ark. Code Ann. §§ 4-88-1501 – 4-88-1503 (Act 901 of 2025)	Up to $10,000 civil penalty per violation; Affirmative relief, damages, medical costs, funeral expenses, punitive damages, costs and fees for private suits	Yes	FILED	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖
California	Introduced	N/A	The Parent's Accountability and Child Protection Act: Remedies	SB 659	$7,500 per violation in an action by a public prosecutor; civil penalties of up to limited civil case maximum in negligent violations, x10 the amount for knowing or willful violations and x20 the amount for intentional violations per minor user	No		✓	✓	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖
California	Enacted	01-Jan-25	Protecting Our Kids from Social Media Addiction Act	Stats 2024 ch 321 (SB976) Ca. Health and Saf. Code § 27000 to § 27007	Injunction and other remedies available under different statutes, which can include civil penalties and disgorgement.	Yes	PRELIMINARY INJUNCTION (BEING APPEALED BY STATE)	✓	✓	✓	✓	✓	✓	✖	✓	✓	✖	✖	✖	✖	✓	✖	✖	✓	✖	✖
Colorado	Enacted	01-Oct-2025	Privacy Protections for Children's Online Data (amending the Colorado Privacy Act)	SB24-041	Injunction and civil penalty of up to $20,000 per violation; enhanced amounts for elders	No		✖	✖	✓	✖	✖	✖	✖	✖	✖	✓	✓	✓	✓	✖	✖	✖	✓	✖	✖
Colorado	Enacted	08-Aug-2024	Healthier Social Media Use by Youth	HB24-1136	Civil penalties up to $20,000 per violation (as amended in 2025). Injunctive relief and restitution also available.	Yes	Filed	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖
Connecticut	Enacted	01-Jul-24	Social media platforms and minors. Request to unpublish or delete minor’s account. Enforcement. Penalty.	Conn. Gen. Stat. § 42-528	Injunctive relief, civil penalties of up to $5,000 per willful violation and up to $25,000 per violation of a TRO/injunction.	No		✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✓	✖	✖
Connecticut	Enacted	01-Jul-24	An Act Concerning Online Privacy, Data and Safety Protections	Public Act No. 25-113 § 13 (SB1295) Conn. Gen. Stat. § 42-528	Violation is an unfair trade practice under CUTPA; civil penalties of up to $5,000 per willful violation and up to $25,000 per violation of an injunction/restraining order, plus injunctive relief.	No		✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖	✖	✖
Florida	Enacted	01-Jul-24	Protection of children in online spaces; public records exemption	Florida Statutes §501.1735	Civil penalty up to $50,000 per violation, tripled if involves a Florida child the platform knows is under 18	No		✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✓	✓	✖	✖	✖	✖	✖	✖
Florida	Enacted	01-Jan-25	Online Protections for Minors	2024 Fla. Laws, ch. 54 (HB3) Fla. Stat. § 501.1736	Civil penalty up to $50,000 per violation, tripled if involves a Florida child the platform knows is under 18	Yes	PRELIMINARY INJUNCTION (BEING APPEALED BY STATE)	✓	✓	✖	✖	✖	✖	✓	✓	✖	✖	✖	✖	✖	✖	✖	✓	✓	✓	✖
Georgia	Introduced	N/A	Amends Protecting Georgia’s Children on Social Media Act	SB 343	Up to $2,500 per violation and additional remedies available under Fair Business Practices Act	No		✖	✓	✖	✖	✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖
Georgia	Introduced	N/A	Social media and internet safety for minors	SB 165	Up to $50,000 civil penalty per violation plus costs and fees	No		✓	✓	✖	✖	✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖
Georgia	Enacted	01-Jul-25	Protecting Georgia's Children on Social Media Act of 2024	Act 463 (SB351) GA Code § 39-6-1 to § 39-6-5	Civil penalty up to $2,500 per violation; injunction; restitution	Yes	PRELIMINARY INJUNCTION	✓	✓	✖	✖	✖	✖	✖	✓	✖	✓	✓	✖	✖	✖	✖	✖	✓	✖	✖
Illinois	Introduced	N/A	Parental Consent for Social Media Act	SB2316	Civil penalty up to $2,500 per violation	No		✓	✓	✖	✓	✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖
Iowa	Introduced	N/A	Social Media Parental Authorization Act	HF798/HF278	Attorney General may bring civil penalty up to $1,000 per violation Private right of action damages may equal to the greater of either $10,000 per violation or amount of damages	No		✖	✖	✖	✖	✖	✖	✖	✓	✓	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖
Kentucky	Introduced	N/A	AN ACT relating to addictive online platforms	HB 227	Private: declaratory/injunctive relief, damages (incl. mental health/emotional distress), costs + reasonable attorney’s fees; civil penalty $10,000 or actual damages (greater) for reckless/intentional violations. AG: 30-day notice/cure; damages up to $5,000 per continued violation and civil penalty up to $5,000 per offense + costs/fees/expenses.	No		✓	✓	✓	✓	✖	✓	✓	✓	✓	✓	✓	✖	✖	✖	✖	✓	✖	✓	✖
Kentucky	Introduced	01-Jan-27	Youth Online Safety Act	HB 232	AG: up to $5,000 first violation; up to $10,000 each subsequent + costs/fees/expenses. Private: parent/guardian may sue for declaratory judgment of noncompliance.	No		✓	✓	✓	✖	✓	✖	✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✓	✓	✖
Louisiana	Enacted	01-Jul-25	Protection of Children’s Internet Data	Act No. 656 (HB577)	Civil fine up to $10,000 per violation and injunctive relief, fees and costs available	Yes	Filed	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖	✖	✖	✖	✓	✖	✖
Louisiana	Enacted	01-Jun-26	Kids Online Protection and Anti-Grooming Act	Act No. 236 (HB 37)	Civil fine up to $10,000 per violation and injunctive relief, fees and costs available	No		✖	✖	✖	✖	✖	✓	✖	✖	✓	✖	✖	✓	✖	✓	✖	✖	✓	✖	✖
Louisiana	Enacted	01-Jul-25	Secure Online Child Interaction and Age Limitation Act	Act 456 (SB162) La. R.S. § 51:1751 to § 51:1753	Civil penalty up to $2,500 per violation	Yes	TEMPORARILY ENJOINED	✓	✓	✖	✖	✖	✖	✖	✓	✓	✓	✓	✖	✖	✓	✓	✖	✓	✖	✖
Maryland	Enacted	01-Oct-24	Maryland Kids Code	HB 603	Civil penalties up to $2,500 per affected child per negligent violation and $7,500 for intentional and deceptive trade practice remedies.	Yes	Filed	✖	✖	✖	✖	✖	✓	✖	✖	✖	✓	✖	✓	✖	✖	✓	✖	✓	✖	✖
Massachusetts	Introduced	N/A	An Act protecting children from addictive social media feeds	S30 / H4229	Injunctive relief, restitution, disgorgement, damages, civil penalties up to $5,000 per violation and other relief	No		✓	✓	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖	✖
Massachusetts	Introduced	N/A	An Act promoting safe technology use and distraction-free education for youth	H4745/H666	Unfair or deceptive act remedies, private right of action by consumers or businesses for certain sections	No		✓	✖	✓	✓	✓	✓	✖	✖	✖	✖	✖	✖	✖	✖	✓	✓	✓	✓	✖
Massachusetts	Introduced	N/A	Ac Act to Promote Student Learning and Mental Health	S2581/S2561/S2549/S335	Unfair or deceptive act remedies, civil fines up to $5,000 per violation or up to $1,000,000 per day for certain violations, private right of action for damages or multiple damages and injunctive relief	No		✓	✖	✓	✓	✓	✖	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖	✓	✓	✖
Michigan	Introduced	N/A	Social Media Children Protection Act	SB190	Civil fine up to $1,000 per violation and up to $25,000 if persistent and knowing, fees and costs, void and unenforceable contract terms	No		✓	✓	✖	✓	✖	✖	✖	✓	✓	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖
Michigan	Introduced	N/A	Social Media Regulation Act	HB4388	Up to $2,500 civil fine per violation, actual damages, injunctive/declaratory relief, fees and costs, private damages are greater of $2,500 per violation or actual damages	No		✓	✖	✖	✓	✖	✖	✖	✓	✓	✖	✓	✖	✖	✖	✖	✖	✓	✓	✖
Michigan	Introduced	N/A	Stop Addictive Feeds Exploitation for Kids Act	SB 0757	AG civil action: civil fine ≤ $5,000/violation; actual damages; injunctive/declaratory relief; destruction of info; other relief	No		✓	✓	✓	✖	✓	✖	✖	✖	✓	✓	✖	✖	✖	✖	✖	✖	✓	✖	✖
Minnesota	Introduced	01-Jan-26	Stop Online Targeting Against Kids Act	HF 48 / SF 1528	Damages, statutory penalty of $1,000 per violation, capped at $100,000 per account holder per calendar year	No		✖	✖	✖	✖	✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖
Minnesota	Introduced	N/A	Use of social media regulation for minors ages 15 and younger	SF2614/HF1875	Attorney General may collect civil penalty of $50,000 per violation; PLUS private right of action damages up to $10,000	No		✓	✓	✖	✖	✖	✖	✓	✓	✖	✖	✖	✖	✖	✖	✖	✓	✓	✓	✖
Mississippi	Enacted	01-Jul-24	Walker Montgomery Protecting Children Online Act	Laws 2024, Ch. 456 (HB1126) Miss. Code. Ann. § 45-38-1 to §45-38-13	Injunctions, civil penalties up to $10,000 per knowing and willful violation and up to $10,000 per violation of an injunction, restitution, criminal penalties for knowing and willful UDAP violations	Yes	Filed	✓	✖	✖	✖	✖	✖	✖	✓	✖	✓	✖	✓	✖	✖	✖	✖	✓	✓	✖
Missouri	Introduced	28-Aug-26	Missouri Social Media Safety for Minors Act.	HB 2392	AG may seek civil penalties up to $50,000/violation + injunctive relief + attorney fees; private damages for harmed parent/guardian.	No		✓	✓	✓	✖	✖	✖	✖	✓	✓	✓	✓	✖	✖	✖	✓	✓	✓	✓	✖
Nebraska	Enacted	01-Jul-26	Parental Rights in Social Media Act	LB383 Neb. Rev. Stat. § 86-1701 to § 86-1705	Civil penalty up to $2,500 per violation; equitable/declaratory relief and damages, fees and costs	No		✓	✓	✖	✖	✖	✖	✓	✓	✓	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖
New York	Introduced	N/A	Children's Online Safety Act	A6549 / S4609	Injunctions, restitution, disgorgement, damages, civil penalties up to $5,000 per violation, and other appropriate relief	No		✓	✖	✖	✖	✖	✓	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖
New York	Enacted	N/A	Stop Addictive Feeds Exploitation (SAFE) For Kids Act	Law 2024, ch 120 (S7694/A8148) N.Y. Gen. Bus. Law §§ 1500–1508	Civil penalty up to $5,000 per violation	No		✓	✓	✖	✖	✓	✖	✖	✖	✖	✓	✖	✖	✖	✖	✖	✓	✓	✖	✖
North Carolina	Introduced	N/A	Social Media Protections for Minors Under 16	H301	Civil penalty up to $50,000 per violation; private damages up to $10,000 plus fees and costs	No		✓	✓	✖	✖	✖	✖	✓	✓	✖	✖	✖	✖	✖	✖	✖	✓	✓	✓	✖
Ohio	Enacted	03-Oct-23	Parental notification by social media operators	HB33 Ohio Rev. Code § 1349.09	Civil penalty of up to $1,000 per day for the first 60 days of noncompliance; up to an additional $5,000 per day for days 61-90; and up to an additional $10,000 per day for days 91 and beyond	Yes	PERMANENT INJUNCTION (BEING APPEALED BY STATE)	✓	✓	✖	✖	✖	✖	✓	✓	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖	✖
Oklahoma	Introduced	N/A	Safe Screens for Kids Act	SB 885	Injunctive relief and civil penalties.	No		✖	✖	✓	✖	✖	✖	✖	✓	✓	✖	✓	✖	✖	✖	✖	✓	✓	✖	✖
Oklahoma	Introduced	N/A	Social media; requiring certain age verification; requiring social media platforms to provide certain supervisory tools	SB 931	Injunctive relief or other appropriate relief.	No		✓	✖	✓	✖	✖	✓	✖	✖	✓	✓	✖	✖	✖	✓	✖	✖	✓	✖	✖
Oklahoma	Introduced	01-Nov-26	Social media; social networks; minors; verification	HB 4356	Private: (i) $2,500 per violation + court costs + reasonable attorney fees, or (ii) damages from minor access without parent/custodian consent + costs/fees; Vendor retention: damages for knowingly retaining identifying info + costs/fees. AG may initiate enforcement action; 45-day cure after AG notice for Section 3 violations.	No		✓	✓	✓	✖	✖	✖	✓	✖	✖	✓	✖	✓	✓	✖	✖	✖	✓	✓	✖
Oklahoma	Introduced	N/A	Social media; requiring certain age verification; requiring certain parental consent.	SB 1871	AG civil action to enjoin, enforce compliance, and obtain civil penalties; civil penalty up to $2,500 per violation (each violation separate)	No		✓	✓	✓	✓	✓	✓	✖	✖	✓	✓	✖	✖	✖	✓	✓	✖	✓	✖	✖
Pennsylvania	Introduced	N/A	Social Media Protections for Minors	SB22	Civil penalty up to $2,500 per violation for first offense; $5,000 for second offense; and up to $50,000 for third or subsequent offense	No		✓	✖	✖	✖	✖	✖	✖	✓	✓	✓	✓	✖	✖	✖	✓	✖	✓	✓	✓
Tennessee	Enacted	01-Jan-25	Protecting Children from Social Media Act	Act 899 (SB2097/HB1891) TN Code § 47-18-5701 to § 47-18-5706	Civil penalty up to $1,000 per violation, injunctions, restitution, license/certificate revocations, costs and fees	Yes	Filed	✓	✓	✖	✓	✖	✖	✓	✓	✓	✖	✖	✖	✖	✖	✖	✖	✓	✖	✓
Texas	Enacted	01-Sep-24	Securing Children Online through Parental Empowerment (SCOPE) Act	Act 795 (HB18) Tex. Bus. & Com. § 509.001 to § 509.152	Injunctions, civil penalty up to $10,000 per violation, restitution, cost/fees	Yes	PARTIAL INJUNCTION (BEING APPEALED BY STATE)	✓	✖	✖	✖	✖	✖	✖	✖	✓	✓	✓	✓	✖	✖	✓	✖	✓	✖	✖
Utah	Enacted	01-Oct-24	Utah Minor Protection in Social Media Act	Ch. 206 (SB194) UT Code § 13-71-101 to § 13-71-401	Administrative fine up to $2,500 per violation	Yes	PRELIMINARY INJUNCTION (BEING APPEALED BY STATE)	✓	✖	✓	✖	✖	✓	✖	✖	✓	✓	✖	✖	✖	✓	✓	✖	✓	✖	✓
Utah	Enacted	01-Oct-24	Harm to Minors by Algorithmically Curated Social Media Service	Ch 224 (HB464) UT Code § 78B-3-1101 to § 78B-3-1106	Private right of action damages may equal to the greater of either $10,000 per violation or amount of actual damages	No		✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖
Virginia	Enacted	01-Jan-26	Amending Consumer Data Protection Act	Ch. 703 (SB854) Va. Code Ann. § 59.1-577.1	Injunctive relief and civil penalty up to $7,500 per violation	Yes	Filed	✓	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖	✓	✖	✖	✖	✓	✖	✖
Virginia	Introduced	N/A	Social media platforms; school boards; artificial intelligence systems; civil penalties	SB 245	VCDPA: AG may seek injunction + civil penalties up to $7,500/violation + recover expenses/attorneys’ fees; no private ROA . SB245 adds registration penalties: AG may impose $50/day up to $10,000/year for failure to register + collect unpaid fees + seek injunctive relief	Yes	Filed	✓	✖	✓	✓	✖	✓	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖	✓	✖	✖
Washington	Introduced	N/A	New chapter to Title 19 RCW Protecting Washington children online	ESSB 5708 / HB 1834	Injunctions, restitution, costs/fees, civil penalties up to $7,500 per violation, with a possible additional $5,000 if based on certain traits; private right of action for damages, fees and treble damages up to $25,000 plus injunctive relief	No		✓	✓	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖

Term	Definition
Reasonable Age Verification Method	A method to determine whether the user is a minor by collecting age-verifying personal information
Prohibited Personal Information Data Retention After Verification	Prohibits retaining age-verifying personal information after verification use
Restrict Addictive Practices/Design	Disabling features that prolong minor engagement with the social media platform such as continuous scrolling
Access Restriction	Restricting a minor user from accessing the social media platform between certain hours
Notification Restriction	Restrict displaying notifications to the minor user concerning a social media feed during certain hours
Default High Level Privacy Protection	Configure all default privacy settings to settings that offer a high level of privacy
No Minor Account Holder	Prohibit a minor (defined by state) from entering into a contract with a social media platform to become an account holder
Parental Consent to Create Account	Requires a minor's parent or guardian provides consent for the minor to become an account holder
Parental Control/Monitoring Mechanism	Tool that allows parents or guardians to monitor/control a minor's online activity or track a minor's location
Data Minimization	Collect, process, retain only the absolutely necessary amount of personal data required for a specific legitimate purpose
Restrict Targeted Advertising	Prohibit display of any advertising in the minor account holder's account based on the minor's personal information
Restrict Geolocation Tracking	Not collect, sell, or share any precise geolocation information of minor by default
Monitoring or Tracking Signal	Provide an obvious signal to the minor when the minor is being monitored or tracked by parent or guardian or that precise geolocation information is being collected
Restrict Communications From Non-Connected Users	Limiting the visibility and minor user's account communications (such as sharing content, direct messaging) with connected accounts
Privacy Rights Managing/Reporting Tools	Provide prominent, accessible, and responsive tools to help children, or if applicable their parents or guardians, exercise their privacy rights and report concerns
Anonymize or De-identify Personal Information Data	Keep anonymous or de-identify any personal identifying information used to verify age

Children Data Protection Laws

Note: The scope of this "Children Data Protection Laws" is children-specific legislation and bills. This chart does not include states' comprehensive privacy laws.

State	Legislative Process Status	Effective Date	Statute Name	Statute	Penalties	Reasonable Age Verification Method	Consent Required to Collect or Process Personal Information	Data Minimization	Data Protection (Impact) Assessment	Restriction Data Retention	Clear and Accessible Privacy Notice	Right to Delete, Refuse, Access, or Correct Personal Information	Restrict Targeted Advertising	Restrict Sales of Personal Information	Restrict Geolocation Tracking	Geolocation Tracking Signal	Restrict Dark Patterns	Restrict Automated Profiling	Attorney General	Private right of action	Department/ Division	Comments
Arkansas	Enacted	Jul. 1, 2026	The Arkansas Children And Teens' Online Privacy Protection Act	Act 952 (HB1717) Ark. Code § 4-88-1501 to § 4-88-1505		✓	✓	✓	✖	✓	✓	✓	✓	✖	✖	✖	✖	✖	✓	✖	✖	*Obtain Parent Consent for Child (Under 13) or from teen (13-16) or their parent before collecting, using, or disclosing
Colorado	Enacted	Oct. 1, 2025	Privacy Protections for Children's Online Data	Ch. 296 (SB041) Colo. Rev. Stat. § 6-1-1301 to § 6-1-1313		✖	✖	✓	✓	✖	✖	✖	✓	✓	✖	✖	✖	✖	✓	✖	✖	*Obtain Parent Consent for Child (Under 13) or from minor (13-17) or their parent before collecting, using, or disclosing
Louisiana	Enacted	Jul. 1, 2025	Protection of Children's Internet Data	Act 456 (HB577) La. Stat. Ann. § 51:1761 TO § 51:1763	Civil penalty of $10,000 per violation	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖	✖	✖	✖	✓	✖	✖	*Application is limited to social media companies
New York	Enacted	Jun. 20, 2025	New York Child Data Protection Act	Ch. 121 (S7695/A8149) N.Y. Gen. Bus. Law. § 899-ee to § 899-mm	Civil penalty of $5,000 per violation	✖	✓	✓	✓	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖	*Obtain Parent Consent for Child (Under 13) or from minor (13-17) or their parent before collecting, using, or disclosing
New York	Introduced		New York Child Data Privacy and Protection Act	S4600	Civil penalty of $10,000 per violation	✖	✖	✖	✓	✖	✓	✖	✓	✖	✖	✖	✖	✖	✓	✖	✖	*Proactively alert when personal data is being collected
North Carolina	Introduced		Children's Online Safety Act	S722	Civil penalty of $500,000 per violation	✖	✓	✓	✓	✖	✖	✓	✓	✓	✓	✖	✖	✓	✓	✖	✖	Transparency about data use Default High Level Privacy Protection
South Carolina	Introduced		Child Data Privacy and Protection Act	H3400	Civil penalty of $10,000 per violation	✖	✓	✓	✓	✓	✓	✖	✓	✓	✖	✖	✖	✖	✓	✖	✖	*Prominently display a privacy policy and terms of service

Term	Definition
Reasonable Age Verification Method	A method to determine whether the user is a minor by collecting age-verifying personal information.
Prohibited Personal Information Data Retention After Verification	Prohibits retaining age-verifying personal information after verification use
Data Minimization	Collect, process, retain only the absolutely necessary amount of personal data required for a specific legitimate purpose
Data Protection (Impact) Assessment	Survey to assess and mitigate risks that arise from data management practices
Restrict Data Retention	Prohibit retaining personal information for longer that is reasonably necessary to fulfill a transaction or provide a service
Clear and Accessible Privacy Notice	Provide clear and conspicuous notice of privacy rights and settings
Right to Delete, Refuse, Access or Correct Personal Information	Provide the opportunity at any time to access, delete, challenge accuracy, refuse to disclose personal information
Restrict Targeted Advertising	Prohibit display of any advertising in the minor account holder's account based on the minor's personal information
Restrict Sales of Personal Information	Prohibit sales of personal information
Restrict Geolocation Tracking	Not collect, sell, or share any precise geolocation information of minor by default
Restrict Dark Patterns	Not use of dark patterns to lead or encourage children to provide personal information beyond what is reasonably expected
Restrict Automated Profiling	Not perform automated processing of personal information to create a profile by evaluating, analyzing or predicting aspects concerning a natural person’s economic situation, health, personal preferences, interests, behavior, location, or movements