US Children’s Privacy Legislation Tracker

With renewed focus on strengthening children’s privacy laws, businesses may need to consider reassessing and updating their operational processes, particularly in light of recent COPPA amendments and the FTC’s stated enforcement priorities. The Supreme Court’s ruling enabling states to adopt more robust age-based access limits further underscores the need for businesses offering content that may be unsuitable for minors to evaluate and potentially update their online products accordingly.

Mayer Brown’s Cybersecurity & Data Privacy lawyers are closely monitoring these laws as they move through state legislatures. Our US Children’s Privacy Legislation Tracker offers a high-level comparison of key rights and obligations under these comprehensive state privacy laws, but companies should consult with counsel to understand the full impact.

Please check the tracker in the future for further updates as more states enact similar privacy laws. Other cybersecurity-related insights can be found in our Cybersecurity & Data Privacy Resource Center.

Harmful Content Age Verification

State	Legislative Process Status	Effective Date	Statute Name	Statute/Bill	Penalties	Challenged in Court	Court Ruling	Reasonable Age Verification Method	Prohibited Personal Information Data Retention After Verification	Frequent Re-Verification	Attorney General	Private right of action	State/Federal Regulator	Comments
Federal	Introduced		SCREEN Act	S737/HR1623				✓	✓	✖	✖	✖	FTC
Alabama	Enacted	Oct. 1, 2024		Act 2024-97 (HB164) Ala. Code § 8–19G–1 to § 8–19G–10	Up to $10,000 per violation by the Attorney General	No		✓	✓	✖	✓	✓	✖
Arizona	Enacted	Sep. 26, 2025		Chapter 0193-571R (HB2112) Ariz. Rev. Stat. § 18-701	Private lawsuits by parents or guardians whose children were able to access the material for awards up to $250,000 plus $10,000 per day that the website lacked age verification; $10,000 per instance when website retains identifying information	No		✓	✓	✖	✖	✓	✖	There are proposed amendments to the act to include age and consent verification requirements for individuals who upload sexually explicit material online. The proposed amendments would transfer and renumber the Act from Section 18-701 to Section 44-7301.
Arkansas	Enacted	Aug. 1, 2023	Act 372	Act 612 (SB66) Ark. Code § 4–88–1301 to § 4–88–1305		Yes	On July 30, 2026, the U.S. Court of Appeals for the Eighth Circuit reversed the lower court decision, ruling that the district judge erred and allowing the state law to take effect. Fayetteville Public Library v. Crawford County et al.	✓	✓	✖	✖	✓	✖
Florida	Enacted	Jan. 1, 2025		Ch. 501 Section 1737 Age verification for online access to materials harmful to minors. Fl. St. § 501.1737	Private liability for minors able to access harmful material up to $10,000. The Attorney General's Department of Legal Affairs can also collect a civil penalty of up to $50,000 per violation and reasonable attorneys fees.	No		✓	✖	✖	✓	✓	✖
Georgia	Enacted	Jul. 1, 2025	Protecting Georgia's Children on Social Media Act of 2024	Ch. 5 Section 3-2 (SB 351) 39-5-5.	Commercial entities can be liable to an individual for damages resulting from the access to material harmful to minors including attorneys fees and court costs. Violators may also subject to a fine of up top $10,000.	No		✓	✓	✖	✓	✓	✖
Hawaii	Introduced	Introduced Jan. 23, 2025		HB1212	Awards of up to $250,000 plus $10,000 per day that the website lacked age verification. Penalties up to$10,000 per instance when website retains identifying information.	No		✓	✓	✖	✓	✖	✖	Carried over to 2026 regular session.
Idaho	Enacted	Jul. 1, 2024		2024 Session Laws, ch. 113 (H0498) Idaho Code § 6–3801 to § 6–3809	Statutory damages no less than $10,000; injunctive relief; nominal and compensatory damages	No		✓	✓	✖	✖	✓	✖
Illinois	Introduced		Adult Content Age Verification Act	SB2082	No more than $5,000 for each day of violation, plus additional civil penalty not to exceed $10,000 for each violation.	No		✓	✖	✖	✓	✖	✖
Illinois	Introduced		Online Age Verification for Material Harmful to Minors Act	HB1103	Civil liability for damages resulting from a minor's access to material harmful to minors, plus reasonable attorney's fees and costs.	No		✓	✖	✖	✖	✓	✖	The bill includes civil liability provision that states "Any commercial entity that violates the provisions of this Act shall be subject to civil liability for damages resulting from a minor's access to such material harmful to a minor and reasonable attorney's fees and costs."
Indiana	Enacted	Aug. 16, 2024		P.L.98-2024 (SB0017) Ind. Code § IC24–4–23	No more than $250,000 by the AG, AND private lawsuit damages of up to $5,000	Yes	In light of the Supreme Court's decision in Free Speech Coalition, Inc. v. Paxton, No. 23-1122 (June 27, 2025), the decision of the district court in Rokita is vacated, and the case is remanded with instructions to enter judgment for the defendant with respect to the claim under the First Amendment. Free Speech Coal., Inc. v. Rokita, No. 24-2174, 2025 WL 2215894, at *1 (7th Cir. Aug. 1, 2025)..	✓	✓	✖	✓	✓	✖	*Free Speech Coalition, Inc. v. Rokita In light of the Supreme Court's decision in Free Speech Coalition, Inc. v. Paxton, No. 23-1122 (June 27, 2025), the decision of the district court in Rokita is vacated,and the case is remanded with instructions to enter judgment for the defendant with respect to the claim under the First Amendment. Free Speech Coal., Inc. v. Rokita, No. 24-2174, 2025 WL 2215894, at *1 (7th Cir. Aug. 1, 2025).
Iowa	Enacted	Jul. 1		HF864	Civil penalties of up to $10,000 by the AG and damages shall not exceed triple the aggregate amount of a plaintiff’s reasonable attorney fees and costs.	No		✓	✓	✖	✖	✓	✖
Kansas	Enacted	Jul. 1, 2024		L. 2024, ch. 28, § 1 (SB394) Kan. Stat. Ann. § 50-6-146	Statutory damages no less than $10,000; injunctive relief; nominal and compensatory damages	No		✓	✓	✖	✖	✓	✖
Kentucky	Enacted	Jul. 15, 2024		P.L.98-2024 (SB0017) Ind. Code § IC24–4–23	No more than $250,000 by the AG, AND private lawsuit damages of up to $5,000	Yes	The law was challenged but upheld in light of the Supreme Court decision in Free speech Coalition, Inc. v. Paxton.	✓	✓	✖	✓	✓	✖	*Free Speech Coalition, Inc. v. Rokita In light of the Supreme Court's decision in Free Speech Coalition, Inc. v. Paxton, No. 23-1122 (June 27, 2025), the decision of the district court in Rokita is vacated, and the case is remanded with instructions to enter judgment for the defendant with respect to the claim under the First Amendment. Free Speech Coal., Inc. v. Rokita, No. 24-2174, 2025 WL 2215894, at *1 (7th Cir. Aug. 1, 2025).
Louisiana	Enacted	Jan. 1, 2023		Act 440 (HB142) La. Stat. Ann. § 9:2800.29		No		✓	✓	✖	✖	✓	✖
Louisiana	Enacted	Aug. 1, 2023	Pornography Age Verification Enforcement Act or the "PAVE Act"	Act 216 (HB77) La. Stat. Ann. § 51:2121	No more than $5,000 for each day of violation; plus additional civil penalty not to exceed $10,000 for each violation	Yes	The law was challenged but the case was ultimately dismissed. Free Speech Coalition, Inc. v. LeBlanc.	✓	✖	✖	✓	✖	✖
Michigan	Introduced	Introduced Mar. 20, 2025	Material Harmful to Minors Regulation Act	SB0191	Civil action of not more than $10,000 per violation.	No		✓	✓	✖	✓	✖	✖
Michigan	Introduced		Digital Age Assurance Act	HB 4429	Attorney general has exclusive enforcement authority. No private right of action; 45-day notice and cure; civil action for damages up to $10,000 per violation after the cure period; covered manufacturer safe harbor for commercially reasonable and technically feasible age-estimation steps.	No		✓	✖	✖	✓	✖	✓	Mar 19, 2026: re-referred to Committee on Communications and Technology.
Mississippi	Enacted	Jul. 1, 2023		2023, ch. 513, § 3 (SB2346) Miss. Code Ann. § 11-77-1 to § 11-77-7		No		✓	✓	✖	✖	✓	✖
Missouri	Other/Rule	Aug. 13, 2025		Missouri 15 CSR 60-18	Civil penalty no more than $10,000 in violations per day.	No		✓	✓	✖	✓	✖	✖	*Attorney General Rule not Bill.
Missouri	Other/Rule	Aug. 28, 2026	Age Verification on Adult Websites	SB 901 / SB 1346 / SB 1412	Attorney General enforcement; court may grant damages, injunctive relief, civil penalties, court costs, reasonable attorney fees, and other appropriate relief; civil penalty of $10,000 per day for operating a website in violation of the age-verification requirements, $10,000 per instance of retaining identifying information, and up to $250,000 in additional fines if one or more minors accessed the material in violation.	No		✓	✓	✖	✓	✖	✖
Montana	Enacted	Jan. 1, 2024		Laws 2023, ch. 700, § 1 (SB544) Mont. Code. Ann. §30-14-159		Yes	FILED and dismissed Aug. 6, 2025.	✓	✓	✖	✖	✓	✖	*Free Speech Coalition, Inc. v. Knudsen
Montana	Enacted	Apr. 17, 2025		Laws 2025, ch. 199, § 4 (SB488) Mont. Code. Ann. §30-14-159		No		✓	✓	✖	✖	✓	✖	*Amends SB544 to remove the department annual report requirement.
Nebraska	Enacted	Jul. 19, 2024	Online Verification Liability Act	Laws 2024, LB1092 Neb. Rev. Stat. § 87-1001 to § 87-1005		No		✓	✓	✖	✖	✓	✖
New Hampshire	Introduced	Jan. 1, 2027	An Act Requiring Age Verification to Allow Access to Certain Material Harmful to Minors.	SB 648	/td>Private right of action for damages including statutory damages up to $10,000 per violation, court costs, and reasonable attorney's fees; attorney general may seek injunctive relief and civil penalties up to $25,000 per violation; knowing data-privacy violation subject to $50,000 per incident.	No		✓	✓	✖	✓	✓	✖
North Carolina	Enacted	Jan. 1, 2024	Pornography Age Verification Enforcement Act or the "PAVE Act"	S.L. 2023-132, § 3.20(a) (H8) N.C. Gen. Stat. § 66-500 to § 66-501	/td>	No		✓	✓	✖	✖	✓	✖
North Dakota	Enacted	Aug. 1, 2025		SB2380/HB1561 N.D. Cent. Code § 51-07-32		No		✓	✓	✖	✖	✓	✖
Ohio	Introduced	Introduced Feb. 12, 2025	Innocence Act	HB84	A commercial entity may be liable to an individual for damages resulting from a minor accessing material harmful to minors on the publicly accessible Internet website or retaining identifying information after access has been granted, including court costs and reasonable attorney fees as ordered by the court.	No		✓	✓	✖	✖	✓	✖	Must verify age every two years AND implement geofence monitoring while being compliant with federal and state data privacy policy requirements. Violation constitutes a misdemeanor of the first degree. Passed Ohio House on 3/18/2026.
Oklahoma	Enacted	Nov. 1, 2024		Chapter 181, O.S.L. 2024 (SB1959) Okla. Stat. tit. 15 §791		No		✓	✓	✖	✓	✓	✖
Pennsylvania	Introduced	Apr. 9, 2025		SB603	A commercial entity may be liable to an individual for damages resulting from a minor accessing material harmful to minors on the publicly accessible Internet website or retaining identifying information after access has been granted, including court costs and reasonable attorney fees as ordered by the court.	No		✓	✓	✖	✖	✓	✖	Referred to Judiciary Committee.
South Carolina	Enacted	May 21, 2025	Child Online Safety Act	Act 198 (H3424) S.C. Code Ann.§ 37-1-310		Yes		✓	✓	✖	✓	✓	✖
South Dakota	Enacted	Jul. 1, 2025		2025 South Dakota Laws Ch. 95 (HB 1053)	Civil penalty of not more than $5,000 for each separate instance	No		✓	✓	✖	✓	✖	✖	*A violation is a Class 1 misdemeanor and subsequent violation by the same platform is a Class 6 felony.
Tennessee	Enacted	Jan. 1, 2025	Protect Tennessee Minors Act	2024 Pub. Ch. 1021 (SB1792/HB1614) Tenn. Code. Ann §39-17-912 (subdivision (b)(5) is deleted in its entirety by 2025 Pub. Ch. 405 (SB488/HB761))		Yes	The U.S. Court of Appeals for the Sixth Circuit overturned the preliminary injunction, allowing the law to take effect on January 14, 2025, while ongoing litigation proceeded. Further legal challenges and preliminary injunction blocks were subsequently vacated later in 2025, leaving the law active. Free Speech Coalition, Inc v. Skrmetti.	✓	✓	✓	✓	✓	✖	"Businesses must verify age after each 60-minute session AND retain at least 7 years of historical anonymized age-verification data. Also includes criminal code enforcement - Class C felony. *Challenged in court: Free Speech Coalition, Inc v. Skrmetti - The Sixth Circuit granted the Attorney General's motion to stay the preliminary injunction against enforcing the PTMA pending appeal. The case appear to be ongoing and has not been dismissed."
Tennessee	Introduced	Jan. 21, 2025		SB466/HB222		No		✓	✓	✓	✓	✓	✖	*Expands damages under the Protect Tennessee Minors Act to include nominal, actual, and punitive damages in civil penalties.
Texas	Enacted	Sep. 1, 2023		Acts 2023, 88th Leg., ch. 676 (H.B. 1181) Tex. Civ. Prac. & Rem. Code § 129B	Not more than $10,000 per day for violation; plus $10,000 for retaining identifying information; an additional amount not more than $250,000 if minors access the site	Yes	Supreme Court ruled in favor of Texas.	✓	✓	✖	✓	✖	✖
Utah	Enacted	May 3, 2023		Laws 2023, Ch. 262 (SB287) Utah Code § 78B-3-1001 to § 78B-3-1003		Yes	Case dismissed.	✓	✓	✖	✖	✓	✖	*Free Speech Coalition v. Anderson
Virginia	Enacted	Jul. 1, 2023		Acts 2023, Ch. 811 (SB1515) Va. Code Ann. §8.01-40.5		No		✓	✓	✖	✖	✓	✖	The statute does not explicitly provide for private right of action nor does it grant the Attorney General enforcement power. The law reads: "Any commercial entity that violates the provisions of this section shall be subject to civil liability for damages resulting from a minor's access to such material harmful to a minor and reasonable attorney fees and costs.
Washington	Introduced	Introduced Jan. 12, 2026		HB 2112	The Attorney General may recover civil penalties of up to $10,000 per instance, $10,000 per day not in compliance, and up to $250,000 if one or more minors accesses harmful material.	No		✓	✖	✖	✓	✖	✖	In committee in the House as of June 29, 2026.
West Virginia	Enacted	Jun. 12, 2026		W. Va. Code §49A-1-101 to §49A-1-107 (HB 4412)	Creates a cause of action for minor child, parent, or guardian for up to $10,000 in damages and reasonable attorney fees. Action permissible by Attorney General up to $250,000 in fines.	No		✓	✓	✖	✓	✓	✓	The Statute grants rule making authority to The Office of Technology, under the Department of Administration. The Department can propose rules for legislative approval.
Wyoming	Enacted	Jul. 1, 2025		Laws 2025, Ch. 139 (HB0043) Wyo. Stat. Ann. §14-3-501 to §14-3-504		No		✓	✓	✖	✖	✓	✖

Term	Definition
Reasonable Age Verification Method	A method to determine whether the user is a minor by collecting age-verifying personal information
Prohibited Personal Information Data Retention After Verification	Prohibits retaining age-verifying personal information after verification use
Frequent Re-verification	Require periodic re-verifying of age (see comments for state-specific periodic requirement)

Age-Appropriate Design Code

State	Legislative Process Status	Effective Date	Statute Name	Statute/Bill	Penalties	Challenged in Court	Court Ruling	Reasonable Age Verification Method	Age Estimation	Age-Ranged Design	Data Protection (Impact) Assessment	Risk Mitigation Plan	Default High Level Privacy Protection	Data Minimization	Restrict Geolocation Tracking	Restrict Dark Patterns	Restrict Automated Profiling	Clear Accessible Age Suited Privacy Policy	Privacy Rights Managing/Reporting Tools	Parental Control/Monitoring Mechanism	Monitoring or Tracking Signal	Attorney General	Private right of action	State Regulator	Comments
California	Enacted	01-Jul-24	The California Age-Appropriate Design Code Act	Stats 2022 ch 320 (AB2273) Ca. Civ. Code § 1798.99.28 to § 1798.99.40	Civil penalty of up to $2,500 per affected child for each negligent violation or up to $7,500 per affected child for each intentional violation	Yes	Preliminary Injunction	✖	✓	✓	✓	✓	✓	✓	✓	✓	✓	✓	✓	✖	✓	✓	✖	✖	The U.S. Court of Appeals for the Ninth Circuit vacated the district court’s preliminary injunction order as to California’s CAADCA with exceptions for data use restrictions and dark pattern restrictions of the act, which were affirmed. NetChoice, LLC v. Bonta, 170 F.4th 744, 749 (9th Cir. 2026).
Connecticut	Enacted	01-Jul-26	Amendments to Connecticut Data Privacy Act	Conn. Gen. Stat. §45-529(a)	Civil penalty of up to $10,000 per violation.	No		✖	✖	✖	✓	✓	✓	✓	✓	✓	✓	✖	✓	✖	✖	✓	✖	✖
Illinois	Introduced	Introduced 13-Jan-25	Illinois Age-Appropriate Design Code Act	SB0050 & SB0051	Civil penalty of up to $2,500 per affected child for each negligent violation or up to $7,500 per affected child for each intentional violation.	No		✖	✓	✓	✓	✖	✓	✓	✓	✓	✓	✓	✓	✖	✓	✓	✖	✖
Maryland	Enacted	01-Oct-24	Maryland Age Appropriate Design Code Act ("Kids Code")	2024 Md. Laws, Ch. 460 and 461 (SB0571/HB0603) Md. Code, CL § 14-4801 to § 14-4813	Civil penalty of up to $2,500 per affected child for each negligent violation or up to $7,500 per affected child for each intentional violation	Yes	Filed	✖	✓	✓	✓	✖	✓	✓	✓	✓	✓	✓	✓	✖	✓	✓	✖	✖	*NetChoice v. Brown, No. 1:25-cv-00322-RDB
Michigan	Introduced	01-Jul-26	Kids Code Act	SB 758 / HB 5357	Civil fine of up to $50,000 per violation.	No		✓	✓	✓	✖	✖	✓	✓	✖	✓	✓	✖	✓	✓	✓	✓	✖	✓	Passed Senate on April 29, 2026.
Minnesota	Introduced	Introduced 18-Mar-26	Minnesota Age-Appropriate Design Code Act	SF 4574		No		✖	✖	✓	✓	✖	✓	✓	✖	✖	✓	✓	✓	✓	✓	✓	✖	✖	Referred to Commerce and Consumer Protection Committee.
Nebraska	Enacted	01-Jan-26	Age-Appropriate Online Design Code Act	LB504 Neb. Rev. Stat. § 87-1301 to § 87-1309	Civil penalty not to exceed fifty thousand dollars for each violation	No		✖	✖	✓	✖	✖	✓	✓	✓	✓	✓	✖	✓	✓	✓	✓	✖	✖	*Limits direct communications with other users AND minor's usage time; restricts targeted advertising.
New Jersey	Introduced	Introduced 09-Feb-26	New Jersey Kids Code Act	SB 3413	A court may award $5,000 per violation.	No		✓	✖	✖	✖	✖	✓	✖	✖	✓	✖	✖	✓	✖	✓	✓	✖	✓	Referred to Senate Budget and Appropriations Committee on June 11, 2026. Passed Assembly in both houses on June 30, 2026.
New York	Introduced	Introduced 10-Feb-25	New York Child Data Privacy and Protection Act	S4600	Attorney General may seek injunctions; civil penalty up to $20,000 per instance of knowing or reckless violation, capped at $250,000,000, after 90-day notice and opportunity to cure; private right of action by or on behalf of harmed child users or next of kin of deceased child users for compensatory, actual, and punitive damages, injunctive relief, attorneys' fees, and costs.	No		✖	✖	✖	✓	✓	✓	✖	✖	✖	✖	✓	✖	✖	✓	✓	✓	✓	In the Senate's Internet and Technology Committee.
Pennsylvania	Introduced	31-Dec-27	Online Safety Protection Act	HB 2108	Attorney General may seek injunctive relief or civil penalties of up to $2,500 per affected child for each negligent violation or up to $7,500 per affected child for each intentional violation; if a good-faith violator cures within 90 days after notice, it is not civilly liable; no private right of action.	No		✖	✓	✖	✓	✓	✓	✖	✓	✓	✓	✖	✖	✖	✖	✓	✖	✖
Rhode Island	Introduced	Introduced 11-Feb-26	Age-Appropriate Online Design Code	S0903/H5830	Civil penalty of up to $2,500 per affected child for each negligent violation or up to $7,500 per affected child for each intentional violation.	No		✖	✓	✖	✓	✓	✓	✓	✓	✓	✓	✓	✓	✖	✓	✓	✖	✖	There is no required parental monitoring mechanism, but a covered online service that allows parental monitoring must signal such monitoring to the child. Committee recommended measure be held for further study.
South Carolina	Introduced	Introduced 28-Jan-25	Age-Appropriate Code Design	S268/H3402	Violation is an “unfair and deceptive act in commerce” under 9 V.S.A. § 2453.	No		✓	✓	✖	✖	✖	✓	✓	✓	✓	✓	✓	✓	✖	✓	✓	✖	✖	There is no required parental monitoring mechanism, but a covered online service that allows such monitoring must signal the monitoring to the child.
South Carolina	Enacted		South Carolina Social Media Regulation Act	H 3431	Covered online services are liable for treble financial damages resulting from violations; officers and employees may be personally liable for willful and wanton violations; dark-pattern violations are unlawful trade practices subject to South Carolina Unfair Trade Practices Act penalties and damages.	Yes	Filed	✓	✓	✖	✖	✖	✓	✓	✓	✓	✓	✖	✓	✓	✓	✓	✖	✓	*Netchoice v. Wilson, No. 3:26-cv-00543 - motion for preliminary injunction.
Vermont	Enacted	01-Jan-27	Vermont Age-Appropriate Design Code Act	Act 63 (S69)	Violation is an “unfair and deceptive act in commerce” under 9 V.S.A. § 2453.	No		✓	✓	✓	✖	✖	✓	✓	✓	✓	✓	✖	✓	✖	✓	✓	✓	✖	Disclosures necessary for algorithmic recommendation system. Designers/Developers must exercise reasonable care to prevent harmful behaviors.

Term	Definition
Reasonable Age Verification Method	A method to determine whether the user is a minor by collecting age-verifying personal information
Age Estimation	Estimate the age of child users with a reasonable level of certainty
Age-Ranged Design	Grouping minor ages into ranges and taking into account these ranges when designing
Data Protection (Impact) Assessment	Survey to assess and mitigate risks that arise from data management practices
Risk Mitigation Plan	A plan to mitigate or eliminate the risks identified
Default High Level Privacy Protection	Configure all default privacy settings to settings that offer a high level of privacy
Data Minimization	Collect, process, retain only the absolutely necessary amount of personal data required for a specific legitimate purpose
Restrict Geolocation Tracking	Not collect, sell, or share any precise geolocation information of minor by default
Restrict Dark Patterns	Not use of dark patterns to lead or encourage children to provide personal information beyond what is reasonably expected
Restrict Automated Profiling	Not perform automated processing of personal information to create a profile by evaluating, analyzing or predicting aspects concerning a natural person’s economic situation, health, personal preferences, interests, behavior, location, or movements
Clear Accessible Age Suited Privacy Policy	Provide any privacy information, terms of service, policies, and community standards concisely, prominently, and using clear language suited to the age of minors likely to access
Privacy Rights Managing/Reporting Tools	Provide prominent, accessible, and responsive tools to help children, or if applicable their parents or guardians, exercise their privacy rights and report concerns
Parental Control/Monitoring Tools	Tool that allows parents or guardians to monitor a minor's online activity or track a minor's location
Monitoring or Tracking Signal	Provide an obvious signal to the minor when the minor is being monitored or tracked by parent or guardian or that precise geolocation information is being collected

Internet-Enabled Device-Based Filter for Harmful Content

State	Legislative Process Status	Effective Date	Statute Name	Statute/Bill	Penalties	Require Age During Device Setup	Automatically Enable Filter	Password to Manage Filter Activation/Deactivation	Notification When Filter Blocks	Attorney General	Private right of action	State Regulator	Comments
Alabama	Enacted	Oct. 1, 2025	SB186	Act 2025-406 (SB186) Ala. Code § 8–19H–1 to § 8–19H–5	Civil penalty up to $5,000 per violation and not exceed $50,000 in aggregate	✓	✓	✓	✓	✓	✖	✖	Applies to video game consoles as well
Illinois	Introduced		Digital Age Assurance Act	HB3304	Civil penalty up to $10,000 per violation.	✓	✓	✖	✖	✓	✖	✖
Illinois	Introduced	Jan. 1, 2026	Digital Age Assurance Act	SB 2037	Attorney General may bring a civil action after written notice and a 45-day cure period; damages up to $10,000 per violation for continuing violations.	✖	✖	✖	✖	✓	✖	✖	*Requires age estimation.
New Hampshire	Introduced	Introduced Jan. 9,2024	Device-Level Age Assurance Act	HB293	Private right of action; civil penalty award of up to $5,000 per violation and not exceed $100,000 in aggregate.	✓	✓	✓	✓	✓	✓	✖	Carried over from the 2025 legislative cycle.
New York	Introduced		Device-Level Age Assurance Act	SB8102 / A8893	Attorney General may bring a civil action or special proceeding to stop violations and seek restitution, disgorgement of profits or gains, destruction of unlawfully obtained data, damages, civil penalties of up to $10,000 per violation, and other court-ordered relief, including preliminary relief.	✖	✓	✖	✖	✓	✖	✖	In committee in the New York Senate.
Idaho	Introduced		Children's Device Protection Act	S.B. 1158	Civil penalties of up to $5,000 per violation and $50,000 in the aggregate.	✓	✓	✓	✓	✓	✖	✖
South Carolina	Introduced	Introduced Jan. 14, 2025	Children's Default to Safety Act	S.B. 4689	Civil penalties of up to $5,000 per violation and $50,000 in the aggregate. In a private action, a parent or legal guardian may recover actual damages, or in the alternative, liquidated damages of $50,000 per violation where actual damages are difficult to ascertain. Punitive damages in an amount determined by the court when a violation is found to be "knowing and willful." Criminal penalties for any person, other than a parent/legal guardian, providing passcode to remove the device filter to a minor.	✖	✓	✓	✓	✓	✓	✖	A good faith defense is available. Section 39-5-930(B) provides that this section does not apply to a manufacturer that makes a "good faith effort to provide a device that, upon activation of the device in this State, automatically enables a generally accepted and commercially reasonable method of filtration in accordance with this section and industry standards".
Utah	Enacted	Jan. 1, 2025	Children's Device Protection Act	Laws 2024, Ch. 166 (SB104) Utah Code § 78B-6-2601 to § 78B-6-2606	Attorney General may recover civil penalty up to $5,000 per violation and not exceed $50,000 in aggregate; ALSO Private right action civil penalty award of $50,000 for each violation	✓	✓	✓	✓	✓	✓	✖	✖

Term	Definition
Filter	Software on a device to prevent access or display of harmful materials through browsers or search engines
Require Age During Device Setup	User to provide age during device activation and account set-up
Automatically Enable Filter	Filter is automatically enabled when the user is a minor based on the age provided
Password to Manage Filter Activation/Deactivation	A non-minor user with a password can activate/deactivate filter
Notification When Filter Blocks	Notify device user when filter blocks device from accessing a website

App Store Accountability (Platform and Developer Obligations)

State	Legislative Process Status	Effective Date	Statute Name	Statute/Bill	Penalties	Reasonable Age Verification Method	Digital Age Signal	Age Category Data	Verifiable Parental Consent before Download/Purchase	Linked Parental Account to Minor's Account	Display Age Ratings	Parental Control Mechanism	Data Minimization	Protect User Data through Encryption	Attorney General	Private right of action	State/Federal Regulator
Federal	Introduced		Parents Over Platforms Act	H.R. 6333	Violations are treated as unfair or deceptive act under the Federal Trade Commission Act.	✓	✓	✓	✓	✖	✖	✖	✖	✖	Federal Trade Commission (FTC)	Federal Trade Commission (FTC)	Federal Trade Commission (FTC)
Federal	Introduced		App Store Accountability Act	S1586/HR3149	Damages, restitution, or other relief as the court may deem appropriate.	✓	✓	✓	✓	✓	✖	✖	✖	✖	Federal Trade Commission (FTC)	Federal Trade Commission (FTC)	Federal Trade Commission (FTC)
Alabama	Enacted	01-Jan-27	App Store Accountability Act	HB161	Civil penalty of up to $7500 per violation, plus attorneys fees and court costs	✓	✓	✓	✓	✓	✓	✖	✓	✓	✓	✖	✖
California	Enacted	01-Jan-27	Digital Age Assurance Act	AB1043	Civil penalty of up to $2,500 per affected child for each negligent violation or up to $7,500 per affected child for each intentional violation	✓	✓	✓	✓	✖	✖	✓	✖	✖	✓	✖	✖
Illinois	Introduced		Digital Age Assurance Act	HB3304	Civil penalty for up to $10,000 per violation	✖	✓	✖	✓	✖	✖	✓	✖	✖	✖	✖	✖
Illinois	Introduced	01-Jan-27	Digital Age Assurance Act	HB 4140	Injunction and civil penalty of up to $2,500 per affected child for each negligent violation or up to $7,500 per affected child for each intentional violation; action may be brought by the Attorney General.	✓	✓	✓	✖	✖	✖	✖	✓	✖	✓	✖	✖
Louisiana	Enacted	01-Jul-26		Act 481 (HB570) La. Stat. Ann. § 51:1761 to § 51:1763	Civil penalty for up to $10,000 per violation	✓	✓	✓	✓	✖	✖	✓	✖	✖	✓	✖	✖
Ohio	Introduced		Age Verification and Parental Consent for App Stores and Covered Applications	HB 302	Civil penalty of up to $1,000 per violation; enforced exclusively by the Attorney General; no private right of action.	✖	✓	✓	✖	✖	✖	✓	✓	✖	✓	✖	✖
Ohio	Introduced	01-Jan-26	Requiring Application Stores to Offer Parental Control Options	HB 226/SB 167	Civil penalty of up to $2500 per violation; enforced exclusively by the Attorney General.	✖	✖	✖	✓	✖	✖	✓	✖	✖	✓	✖	✖
South Carolina	Introduced		App Store Accountability Act	H3405	Civil penalty for up to $10,000 per violation	✓	✓	✓	✓	✖	✓	✓	✖	✖	✓	✖	✖
Texas	Enacted	01-Jan-26	App Store Accountability Act	SB2420/HB4901		✓	✓	✓	✓	✓	✓	✖	✓	✓	✓	✖	✖
Utah	Enacted	07-May-25	App Store Accountability Act	Laws 2025, Ch. 446 (SB0142) Utah Code § 13-75-101 to § 13-75-40	Award a parent/guardian the greater of actual damages or $1,000 for each violation	✓	✓	✓	✓	✖	✖	✖	✓	✓	✖	✓	✖
Virginia	Introduced	01-Jul-27	App Store Accountability Act	SB237	Private right of action for greater of actual damages or $1,000 per violation, plus punitive damages, attorney fees, and litigation costs; Attorney General may seek civil penalty up to $7,500 per violation, injunctions, attorney fees, and litigation and investigation costs.	✓	✓	✓	✓	✓	✓	✖	✓	✓	✓	✓	✖

Term	Definition
Reasonable Age Verification Method	A method to determine whether the user is a minor by collecting age-verifying personal information
Digital Age Signal	User to provide age during device activation and account set-up
Age Category Data	Information that identifies the age category of a user and is collected by a covered app store provider and shared with an app developer
Verifiable Parental Consent before Download/Purchase	Authorization provided by a parent whom has been verified is an adult
Linked Parental Account to Minor's Account	Ensure a minor's account is linked to an established verified parental account
Display Age Ratings	Publicly display the assessment of an app’s appropriateness for the different age categories
Parental Control Mechanism	Provide a parent/guardian a clear and easy mechanism to set filters that prevent a minor from accessing harmful content or usage limits, including daily limits and limitations during school and evening hours
Data Minimization	Limiting the collection and processing of personal data to the minimum amount necessary
Protect User Data through Encryption	Transmitting personal data using industry-standard encryption protocols that ensure data integrity and confidentiality

Social Media Legislation

State	Legislative Process Status	Effective Date	Statute Name	Statute/Bill	Penalties	Challenged in Court	Court Ruling	Reasonable Age Verification Method	Prohibited Personal Information Data Retention after Verification	Restrict Addictive Practices/Design	Access Restriction	Notification Restriction	Default High Level Privacy Protection	No Minor Account Holder	Parental Consent to Create Account	Parental Control or Monitoring Mechanism	Data Minimization	Restrict Targeted Advertising	Restrict Geolocation Tracking	Monitoring or Tracking Signal	Restrict Communications From Non-Connected Users	Privacy Rights Managing/Reporting Tools	Anonymize or De-identify Personal Information Data	Attorney General	Private right of action	State/Federal Regulator
Federal	Introduced		Kids Online Safety Act	SB1748				✖	✖	✓	✖	✓	✓	✖	✓	✓	✖	✖	✓	✓	✓	✓	✖	✓	✖	✓
Federal	Introduced		Sammy's Law	H.R. 2657				✖	✖	✖	✖	✖	✓	✖	✖	✓	✓	✖	✖	✓	✖	✓	✖	✖	✖	✓
Federal	Introduced		Kids Off Social Media Act	S278				✖	✓	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	FTC	✖	✓
Federal	Introduced		Reducing Exploitative Social Media Exposure for Teens (RESET) Act	H.R. 6488				✖	✓	✖	✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✖	FTC	✖	✓
Federal	Introduced		Algorithmic Choice and Transparency Act	H.R. 6253				✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	FTC	✖	✓
Federal	Introduced		Safe Messaging for Kids Act	H.R. 6257				✖	✖	✖	✖	✖	✓	✖	✖	✓	✖	✖	✖	✖	✓	✖	✖	FTC	✖	✓
Federal	Introduced		Kids Internet and Digital Safety (KIDS) Act	H.R. 7757				✓*	✓*	✓	✖	✖	✓	✖	✖	✓	✓*	✓	✓	✓	✓	✓	✖	FTC	✖	✓
Federal	Introduced		Kids Online Safety Act	H.R. 6484				✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖
Federal	Introduced		Shielding Children's Retinas from Egregious Exposure on the Net (SCREEN) Act	H.R. 1623				✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖
Federal	Introduced		Safe Social Media Act	H.R. 6290				✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖
Federal	Introduced		No Fentanyl on Social Media Act	H.R. 6259				✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖
Federal	Introduced		Promoting a Safe Internet for Minors Act	H.R. 6289				✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖
Federal	Introduced		Safeguarding Adolescents from Exploitative (SAFE) Bots	H.R. 6489				✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖
Federal	Introduced		Kids Internet Safety Partnership Act	H.R. 6437				✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖
Federal	Introduced		Safer Guarding of Adolescents from Malicious Interactions on Network Games (GAMING) Act	H.R. 6255				✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖
Federal	Introduced		Assessing Safety Tools for Parents and Minors Act	H.R. 6499				✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖
Federal	Introduced		Stop Profiling Youth and (SPY) Kids Act	H.R. 6273				✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖
Arizona	Enacted	26-Sep-25	Student access to internet; student use of wireless communication devices, policies and procedures, annual notice, definitions	A.R.S. § 15-120.05	N/A	No		✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖
Arkansas	Enacted	01-Sept-23	Social Media Safety Act	Act 689 (SB396) Ark. Code § 4-88-1401 to § 4-88-1404	Under original act, $2,500 per violation, costs, fees and damages available. In 2025, Act 900 (SB611) amended the Act to $10,000 per violation and added a private right of action.	Yes	PERMANENT INJUNCTION (BEING APPEALED BY STATE)	✓	✓	✖	✖	✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖
Arkansas	Enacted	01-Jul-26	Child Content Creation Protection Act	Act 982 (HB1975)	Injunction, damages, fees and costs	No		✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖	✓	✖
Arkansas	Enacted	01-Jul-26	Children And Teens' Online Privacy Protection Act	Act 952 (HB1717)	Enjoin violations, enforce compliance, obtain damages, restitution, or other compensation, and other appropriate relief	No		✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖	✖	✖	✓	✖	✓	✖	✖
Arkansas	Enacted	03-Aug-25	Amend Social Media Safety Act	Act 900 (SB611) Ark. Code § 4-88-1401 to § 4-88-1404	Civil penalty of $10,000 per violation	Yes	PRELIMINARY INJUNCTION (BEING APPEALED BY STATE)	✓	✖	✓	✖	✓	✓	✖	✓	✓	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖
Arkansas	Enacted	05-Aug-25	Regulation of Social Media Platforms	Ark. Code Ann. §§ 4-88-1501 – 4-88-1503 (Act 901 of 2025)	Up to $10,000 civil penalty per violation; Affirmative relief, damages, medical costs, funeral expenses, punitive damages, costs and fees for private suits	Yes	FILED	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖
California	Enacted	01-Jan-25	Protecting Our Kids from Social Media Addiction Act	Stats 2024 ch 321 (SB976) Ca. Health and Saf. Code § 27000 to § 27007	Injunction and other remedies available under different statutes, which can include civil penalties and disgorgement.	Yes	PRELIMINARY INJUNCTION (BEING APPEALED BY STATE)	✓	✓	✓	✓	✓	✓	✖	✓	✓	✖	✖	✖	✖	✓	✖	✖	✓	✖	✖
California	Introduced		Covered platforms: age restriction: e-Safety Advisory Commission	AB 1709	Civil penalty up to $50,000 per affected minor for a knowing violation, up to $25,000 for a negligent violation.	No		✓	✓	✖	✖	✖	✖	✓	✖	✖	✓	✓	✖	✖	✖	✖	✖	✓	✖	✓
Colorado	Enacted	01-Oct-2025	Privacy Protections for Children's Online Data (amending the Colorado Privacy Act)	SB24-041	Injunction and civil penalty of up to $20,000 per violation; enhanced amounts for elders	No		✖	✖	✓	✖	✖	✖	✖	✖	✖	✓	✓	✓	✓	✖	✖	✖	✓	✖	✖
Colorado	Enacted	01-Jan-2026	Healthier Social Media Use by Youth	HB24-1136	Civil penalties up to $20,000 per violation (as amended in 2025). Injunctive relief and restitution also available.	Yes	The U.S. District Court of Colorado issued a preliminary injunction blocking enforcement of the law's warning-label requirements. The State is appealing the preliminary injunction before the U.S. Court of Appeals for the Tenth Circuit. NetChoice v. Weiser, No. 1:25-cv-02538 (D. Colo.), filed Aug.14, 2025.	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖
Connecticut	Enacted	01-Jul-24	Social media platforms and minors. Request to unpublish or delete minor’s account. Enforcement. Penalty.	Conn. Gen. Stat. § 42-528	Injunctive relief, civil penalties of up to $5,000 per willful violation and up to $25,000 per violation of a TRO/injunction.	No		✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✓	✖	✖
Connecticut	Enacted	01-Jul-24	An Act Concerning Online Privacy, Data and Safety Protections	Public Act No. 25-113 § 13 (SB1295) Conn. Gen. Stat. § 42-528	Violation is an unfair trade practice under CUTPA; civil penalties of up to $5,000 per willful violation and up to $25,000 per violation of an injunction/restraining order, plus injunctive relief.	No		✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖	✖	✖
Florida	Enacted	01-Jul-24	Protection of children in online spaces; public records exemption	Florida Statutes §501.1735	Civil penalty up to $50,000 per violation, tripled if involves a Florida child the platform knows is under 18	No		✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✓	✓	✖	✖	✖	✖	✖	✖
Florida	Enacted	01-Jan-25	Online Protections for Minors	2024 Fla. Laws, ch. 54 (HB3) Fla. Stat. § 501.1736	Civil penalty up to $50,000 per violation, tripled if involves a Florida child the platform knows is under 18	Yes	In November 2025, the U.S. Court of Appeals for the Eleventh Circuit's ruling permitted Florida to currently enforce the law while litigation proceeds. Computer & Commc'ns Indus. Ass'n & NetChoice v. Uthmeier, No. 4:24-cv-00438-MW-MAF.	✓	✓	✖	✖	✖	✖	✓	✓	✖	✖	✖	✖	✖	✖	✖	✓	✓	✓	✖
Georgia	Introduced	N/A	Amends Protecting Georgia’s Children on Social Media Act	SB 343	Up to $2,500 per violation and additional remedies available under Fair Business Practices Act	No		✖	✓	✖	✖	✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖
Georgia	Introduced	N/A	Social media and internet safety for minors	SB 165	Up to $50,000 civil penalty per violation plus costs and fees	No		✓	✓	✖	✖	✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖
Georgia	Enacted	01-Jul-25	Protecting Georgia's Children on Social Media Act of 2024	Act 463 (SB351) GA Code § 39-6-1 to § 39-6-5	Civil penalty up to $2,500 per violation; injunction; restitution	Yes	On June 26, 2025, the U.S. District Court for he Northern District of Georgia issued a preliminary injunction, halting enforcement of the law. The State is appealing. NetChoice v. Carr, 1:25-cv-02422-AT.	✓	✓	✖	✖	✖	✖	✖	✓	✖	✓	✓	✖	✖	✖	✖	✖	✓	✖	✖
Idaho	Enacted	01-Jul-26	Stop Harms from Addictive Social Media Act	HB 542	Private right of action for greater of actual damages or $10,000; in addition to enforcement by the Attorney General.	No		✓	✖	✓	✖	✖	✓	✖	✓	✓	✖	✓	✖	✖	✖	✓	✖	✓	✓	✖
Illinois	Introduced	N/A	Parental Consent for Social Media Act	SB2316	Civil penalty up to $2,500 per violation	No		✓	✓	✖	✓	✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖
Indiana	Enacted	01-Jan-27	Stop Harms from Addictive Social Media Act	HB 1408	Enforceable by the Attorney General as a deceptive act under existing Indiana law.td>	No		✓	✓	✓	✖	✖	✖	✖	✓	✓	✓	✓	✖	✖	✓	✖	✖	✓	✖	✖
Iowa	Introduced	N/A	Social Media Parental Authorization Act	HF798/HF278	Attorney General may bring civil penalty up to $1,000 per violation Private right of action damages may equal to the greater of either $10,000 per violation or amount of damages	No		✖	✖	✖	✖	✖	✖	✖	✓	✓	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖
Louisiana	Enacted	01-Jul-25	Protection of Children’s Internet Data	Act No. 656 (HB577)	Civil fine up to $10,000 per violation and injunctive relief, fees and costs available	No		✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖	✖	✖	✖	✓	✖	✖
Louisiana	Enacted	01-Jun-26	Kids Online Protection and Anti-Grooming Act	Act No. 236 (HB 37)	Civil fine up to $10,000 per violation and injunctive relief, fees and costs available	No		✖	✖	✖	✖	✖	✓	✖	✖	✓	✖	✖	✓	✖	✓	✖	✖	✓	✖	✖
Louisiana	Enacted	01-Jul-25	Secure Online Child Interaction and Age Limitation Act	Act 456 (SB162) La. R.S. § 51:1751 to § 51:1753	Civil penalty up to $2,500 per violation	Yes	On December 15, 2025, the U.S. District Court for the Middle District of Louisiana ruled the law violated the First Amendment and was overly broad, permanently enjoining the law. The State has announced intentions to appeal.	✓	✓	✖	✖	✖	✖	✖	✓	✓	✓	✓	✖	✖	✓	✓	✖	✓	✖	✖
Maryland	Enacted	01-Oct-24	Maryland Kids Code	HB 603	Civil penalties up to $2,500 per affected child per negligent violation and $7,500 for intentional and deceptive trade practice remedies.	Yes	Filed	✖	✖	✖	✖	✖	✓	✖	✖	✖	✓	✖	✓	✖	✖	✓	✖	✓	✖	✖
Massachusetts	Introduced	N/A	An Act protecting children from addictive social media feeds	S30 / H4229	Injunctive relief, restitution, disgorgement, damages, civil penalties up to $5,000 per violation and other relief	No		✓	✓	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖	✖
Massachusetts	Introduced	N/A	An Act promoting safe technology use and distraction-free education for youth	H4745/H666	Unfair or deceptive act remedies, private right of action by consumers or businesses for certain sections	No		✓	✖	✓	✓	✓	✓	✖	✖	✖	✖	✖	✖	✖	✖	✓	✓	✓	✓	✖
Massachusetts	Introduced	N/A	Ac Act to Promote Student Learning and Mental Health	S2581/S2561/S2549/S335	Unfair or deceptive act remedies, civil fines up to $5,000 per violation or up to $1,000,000 per day for certain violations, private right of action for damages or multiple damages and injunctive relief	No		✓	✖	✓	✓	✓	✖	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖	✓	✓	✖
Michigan	Introduced	N/A	Social Media Children Protection Act	SB190	Civil fine up to $1,000 per violation and up to $25,000 if persistent and knowing, fees and costs, void and unenforceable contract terms	No		✓	✓	✖	✓	✖	✖	✖	✓	✓	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖
Michigan	Introduced	N/A	Social Media Regulation Act	HB4388	Up to $2,500 civil fine per violation, actual damages, injunctive/declaratory relief, fees and costs, private damages are greater of $2,500 per violation or actual damages	No		✓	✖	✖	✓	✖	✖	✖	✓	✓	✖	✓	✖	✖	✖	✖	✖	✓	✓	✖
Michigan	Introduced	N/A	Stop Addictive Feeds Exploitation for Kids Act	SB 0757	AG civil action: civil fine ≤ $5,000/violation; actual damages; injunctive/declaratory relief; destruction of info; other relief	No		✓	✓	✓	✖	✓	✖	✖	✖	✓	✓	✖	✖	✖	✖	✖	✖	✓	✖	✖
Minnesota	Enacted	01-Jul-26	Stop Harms from Addictive Social Media Act	HB 4138/SF 4696	Private right of action for greater of actual damages or $10,000.	No		✓	✖	✓	✖	✖	✓	✖	✓	✓	✓	✓	✖	✖	✖	✖	✖	✓	✓	✖
Mississippi	Enacted	01-Jul-24	Walker Montgomery Protecting Children Online Act	Laws 2024, Ch. 456 (HB1126) Miss. Code. Ann. § 45-38-1 to §45-38-13	Injunctions, civil penalties up to $10,000 per knowing and willful violation and up to $10,000 per violation of an injunction, restitution, criminal penalties for knowing and willful UDAP violations	Yes	On April 17, 2025, a district court granted a preliminary injunction. On July 17, 2025, the Fifth Circuit stayed the injunction. On August 14, 2025, the U.S. Supreme Court declined to issue an emergency stay. The statute is currently effective while litigation on the merits proceeds.	✓	✖	✖	✖	✖	✖	✖	✓	✖	✓	✖	✓	✖	✖	✖	✖	✓	✓	✖
Nebraska	Enacted	01-Jul-26	Parental Rights in Social Media Act	LB383 Neb. Rev. Stat. § 86-1701 to § 86-1705	Civil penalty up to $2,500 per violation; equitable/declaratory relief and damages, fees and costs	No	On June 27, 2026, the U.S. District Court for the District of Nebraska issued a preliminary injunction.	✓	✓	✖	✖	✖	✖	✓	✓	✓	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖
New York	Introduced	N/A	Children's Online Safety Act	A6549 / S4609	Injunctions, restitution, disgorgement, damages, civil penalties up to $5,000 per violation, and other appropriate relief	No		✓	✖	✖	✖	✖	✓	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖
New York	Enacted	N/A	Stop Addictive Feeds Exploitation (SAFE) For Kids Act	Law 2024, ch 120 (S7694/A8148) N.Y. Gen. Bus. Law §§ 1500–1508	Civil penalty up to $5,000 per violation	No		✓	✓	✖	✖	✓	✖	✖	✖	✖	✓	✖	✖	✖	✖	✖	✓	✓	✖	✖
North Carolina	Introduced	N/A	Social Media Protections for Minors Under 16	H301	Civil penalty up to $50,000 per violation; private damages up to $10,000 plus fees and costs	No		✓	✓	✖	✖	✖	✖	✓	✓	✖	✖	✖	✖	✖	✖	✖	✓	✓	✓	✖
Ohio	Enacted	03-Oct-23	Parental notification by social media operators	HB33 Ohio Rev. Code § 1349.09	Civil penalty of up to $1,000 per day for the first 60 days of noncompliance; up to an additional $5,000 per day for days 61-90; and up to an additional $10,000 per day for days 91 and beyond	Yes	On June 18, 2026, the U.S. Court of Appeals for the Sixth Circuit reversed a district court judgement and upheld Ohio's Parental Notification by Social Media Operators Act. The law is currently effective. NetChoice, LLC v. Yost, 4:26-CV-3149.	✓	✓	✖	✖	✖	✖	✓	✓	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖	✖
Pennsylvania	Introduced	N/A	Social Media Protections for Minors	SB22	Civil penalty up to $2,500 per violation for first offense; $5,000 for second offense; and up to $50,000 for third or subsequent offense	No		✓	✖	✖	✖	✖	✖	✖	✓	✓	✓	✓	✖	✖	✖	✓	✖	✓	✓	✓
South Carolina	Enacted	01-Jan-27	Stop Harm from Addictive Social Media Act	HB 4591	Private right of action for greater of damages or $10,000; in addition to enforcement by the Attorney General.	No	Filed	✓	✓	✓	✖	✖	✓	✖	✓	✓	✖	✓	✖	✖	✖	✓	✖	✓	✓	✖
Tennessee	Enacted	01-Jan-25	Protecting Children from Social Media Act	Act 899 (SB2097/HB1891) TN Code § 47-18-5701 to § 47-18-5706	Civil penalty up to $1,000 per violation, injunctions, restitution, license/certificate revocations, costs and fees	Yes	On June 20, 2025, the U.S. District Court for the Middle District of Tennessee denied NetChoice's motion for a preliminary injunction, allowing the law to remain enforceable. NetChoice v. Skrmetti, No. 3:24-cv-01191. NetChoice appealed. On February 4, 2026, the U.S. Court of Appeals for the Sixth Circuit heard oral arguments regarding the constitutionality of the age-verification and parental consent mechanisms. A final appellate decision is pending.	✓	✓	✖	✓	✖	✖	✓	✓	✓	✖	✖	✖	✖	✖	✖	✖	✓	✖	✓
Texas	Enacted	01-Sep-24	Securing Children Online through Parental Empowerment (SCOPE) Act	Act 795 (HB18) Tex. Bus. & Com. § 509.001 to § 509.152	Injunctions, civil penalty up to $10,000 per violation, restitution, cost/fees	Yes	On July 24, 2026, the U.S. Court of Appeals for the Fifth Circuit upheld portions of the law requiring age-related registration and checks for digital services, while blocking requirements to monitor and filter harmful content for minors. Computer & Commc'ns Indus. Ass'n & NetChoice v. Paxton, No. 24-50721 (5th Cir. 2026).	✓	✖	✖	✖	✖	✖	✖	✖	✓	✓	✓	✓	✖	✖	✓	✖	✓	✖	✖
Utah	Enacted	01-Oct-24	Utah Minor Protection in Social Media Act	Ch. 206 (SB194) UT Code § 13-71-101 to § 13-71-401	Administrative fine up to $2,500 per violation	Yes	In September 2024, the U.S. District Court for Utah granted a preliminary injunction. The State appealed. In November 2025, the U.S. Court of Appeals for the Tenth Circuit heard oral arguments. A final appellate decision is pending.	✓	✖	✓	✖	✖	✓	✖	✖	✓	✓	✖	✖	✖	✓	✓	✖	✓	✖	✓
Utah	Enacted	01-Oct-24	Harm to Minors by Algorithmically Curated Social Media Service	Ch 224 (HB464) UT Code § 78B-3-1101 to § 78B-3-1106	Private right of action damages may equal to the greater of either $10,000 per violation or amount of actual damages	No		✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖
Virginia	Enacted	01-Jan-26	Amending Consumer Data Protection Act	Ch. 703 (SB854) Va. Code Ann. § 59.1-577.1	Injunctive relief and civil penalty up to $7,500 per violation	Yes	On February 27, 2026, the U.S. District Court for Virginia issued a preliminary injunction. The State appealed. A final decision is pending. NetChoice, LLC. V. Miyares, 1:25-cv-02067.	✓	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖	✓	✖	✖	✖	✓	✖	✖
Virginia	Introduced	N/A	Social media platforms; school boards; artificial intelligence systems; civil penalties	SB 245	VCDPA: AG may seek injunction + civil penalties up to $7,500/violation + recover expenses/attorneys’ fees; no private ROA . SB245 adds registration penalties: AG may impose $50/day up to $10,000/year for failure to register + collect unpaid fees + seek injunctive relief	Yes	Filed	✓	✖	✓	✓	✖	✓	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖	✓	✖	✖

Term	Definition
Reasonable Age Verification Method	A method to determine whether the user is a minor by collecting age-verifying personal information
Prohibited Personal Information Data Retention After Verification	Prohibits retaining age-verifying personal information after verification use
Restrict Addictive Practices/Design	Disabling features that prolong minor engagement with the social media platform such as continuous scrolling
Access Restriction	Restricting a minor user from accessing the social media platform between certain hours
Notification Restriction	Restrict displaying notifications to the minor user concerning a social media feed during certain hours
Default High Level Privacy Protection	Configure all default privacy settings to settings that offer a high level of privacy
No Minor Account Holder	Prohibit a minor (defined by state) from entering into a contract with a social media platform to become an account holder
Parental Consent to Create Account	Requires a minor's parent or guardian provides consent for the minor to become an account holder
Parental Control/Monitoring Mechanism	Tool that allows parents or guardians to monitor/control a minor's online activity or track a minor's location
Data Minimization	Collect, process, retain only the absolutely necessary amount of personal data required for a specific legitimate purpose
Restrict Targeted Advertising	Prohibit display of any advertising in the minor account holder's account based on the minor's personal information
Restrict Geolocation Tracking	Not collect, sell, or share any precise geolocation information of minor by default
Monitoring or Tracking Signal	Provide an obvious signal to the minor when the minor is being monitored or tracked by parent or guardian or that precise geolocation information is being collected
Restrict Communications From Non-Connected Users	Limiting the visibility and minor user's account communications (such as sharing content, direct messaging) with connected accounts
Privacy Rights Managing/Reporting Tools	Provide prominent, accessible, and responsive tools to help children, or if applicable their parents or guardians, exercise their privacy rights and report concerns
Anonymize or De-identify Personal Information Data	Keep anonymous or de-identify any personal identifying information used to verify age

Children Data Protection Laws

Note: The scope of this "Children Data Protection Laws" is children-specific legislation and bills. This chart does not include states' comprehensive privacy laws.

State	Legislative Process Status	Effective Date	Statute Name	Statute	Penalties	Reasonable Age Verification Method	Consent Required to Collect or Process Personal Information	Data Minimization	Data Protection (Impact) Assessment	Restriction Data Retention	Clear and Accessible Privacy Notice	Right to Delete, Refuse, Access, or Correct Personal Information	Restrict Targeted Advertising	Restrict Sales of Personal Information	Restrict Geolocation Tracking	Geolocation Tracking Signal	Restrict Dark Patterns	Restrict Automated Profiling	Attorney General	Private right of action	Department/ Division	Comments
Federal	Introduced		Children and Teens’ Online Privacy Protection Act ("COPPA 2.0")	H.R. 6291		✖	✓	✓	✖	✓	✓	✓	✓	✖	✖	✖	✖	✖	State Attorneys General	✖	FTC
Federal	Introduced		Don't Sell Kids Data Act	H.R. 6292	Private right of action for greater of actual damages or $1,000, injunctions, attorneys fees and litigation costs, in addition to enforcement by the FTC and state attorneys general.	✖	✓	✓	✖	✓	✓	✓	✖	✓	✖	✖	✖	✖	State Attorneys General	✓	FTC
Arkansas	Enacted	Jul. 1, 2026	The Arkansas Children And Teens' Online Privacy Protection Act	Act 952 (HB1717) Ark. Code § 4-88-1501 to § 4-88-1505		✓	✓	✓	✖	✓	✓	✓	✓	✖	✖	✖	✖	✖	✓	✖	✖	*Obtain Parent Consent for Child (Under 13) or from teen (13-16) or their parent before collecting, using, or disclosing
Colorado	Enacted	Oct. 1, 2025	Privacy Protections for Children's Online Data	Ch. 296 (SB041) Colo. Rev. Stat. § 6-1-1301 to § 6-1-1313		✖	✖	✓	✓	✖	✖	✖	✓	✓	✖	✖	✖	✖	✓	✖	✖	*Obtain Parent Consent for Child (Under 13) or from minor (13-17) or their parent before collecting, using, or disclosing
Louisiana	Enacted	Jul. 1, 2025	Protection of Children's Internet Data	Act 456 (HB577) La. Stat. Ann. § 51:1761 TO § 51:1763	Civil penalty of $10,000 per violation	✖	✖	✖	✖	✖	✖	✖	✓	✓	✖	✖	✖	✖	✓	✖	✖	*Application is limited to social media companies
Michigan	Introduced	Jan. 1, 2027	Kids Code Act	SB 758	Civil penalty of up to $50,000 per violation.	✖	✓	✓	✖	✓	✓	✖	✓	✖	✖	✓	✓	✓	✓	✖	✖	Introduced December 17, 2025.
New Hampshire	Enacted	Jan. 1, 2027	Prohibiting the Sale of Location and Other Sensitive Data Regarding Children.	HB 1460	Civil penalty of $10,000 per violation	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖
New York	Enacted	Jun. 20, 2025	New York Child Data Protection Act	Ch. 121 (S7695/A8149) N.Y. Gen. Bus. Law. § 899-ee to § 899-mm	Civil penalty of $5,000 per violation	✖	✓	✓	✓	✖	✖	✖	✖	✖	✖	✖	✖	✖	✓	✖	✖	*Obtain Parent Consent for Child (Under 13) or from minor (13-17) or their parent before collecting, using, or disclosing
New York	Introduced		New York Child Data Privacy and Protection Act	S4600	Civil penalty of $10,000 per violation	✖	✖	✖	✓	✖	✓	✖	✓	✖	✖	✖	✖	✖	✓	✖	✖	*Proactively alert when personal data is being collected
New York	Introduced		Parental Disclosure of Minors' Platform Data and Content	A3320		✓	✖	✖	✖	✖	✖	✓	✖	✖	✖	✖	✖	✖	✖	✖	✖	The bill does not require operators to independently verify the age of users/minors. However, it references age verification indirectly: "verified parent" is defined by reference to the parental verification methods under COPPA. The bill grants a verified parent a right to access certain information (specifically, copies of targeted ads shown to the minor and the identifiers generated from the child's activity). The bill does not grant rights to delete, refuse, access, or correct minor's data.
North Carolina	Introduced		Children's Online Safety Act	S722	Civil penalty of $500,000 per violation	✖	✓	✓	✓	✖	✖	✓	✓	✓	✓	✖	✖	✓	✓	✖	✖	Transparency about data use Default High Level Privacy Protection
Oregon	Enacted		Amendments relating to consumer protection	HB2008		✖	✖	✓	✖	✖	✓	✖	✓	✓	✖	✖	✖	✓				*No discriminating against consumers who exercise their data privacy rights, such as by denying services or charging different prices.
South Carolina	Introduced		Child Data Privacy and Protection Act	H3400	Civil penalty of $10,000 per violation	✖	✓	✓	✓	✓	✓	✖	✓	✓	✖	✖	✖	✖	✓	✖	✖	*Prominently display a privacy policy and terms of service

Term	Definition
Reasonable Age Verification Method	A method to determine whether the user is a minor by collecting age-verifying personal information.
Prohibited Personal Information Data Retention After Verification	Prohibits retaining age-verifying personal information after verification use
Data Minimization	Collect, process, retain only the absolutely necessary amount of personal data required for a specific legitimate purpose
Data Protection (Impact) Assessment	Survey to assess and mitigate risks that arise from data management practices
Restrict Data Retention	Prohibit retaining personal information for longer that is reasonably necessary to fulfill a transaction or provide a service
Clear and Accessible Privacy Notice	Provide clear and conspicuous notice of privacy rights and settings
Right to Delete, Refuse, Access or Correct Personal Information	Provide the opportunity at any time to access, delete, challenge accuracy, refuse to disclose personal information
Restrict Targeted Advertising	Prohibit display of any advertising in the minor account holder's account based on the minor's personal information
Restrict Sales of Personal Information	Prohibit sales of personal information
Restrict Geolocation Tracking	Not collect, sell, or share any precise geolocation information of minor by default
Restrict Dark Patterns	Not use of dark patterns to lead or encourage children to provide personal information beyond what is reasonably expected
Restrict Automated Profiling	Not perform automated processing of personal information to create a profile by evaluating, analyzing or predicting aspects concerning a natural person’s economic situation, health, personal preferences, interests, behavior, location, or movements

Current as of August 04, 2026.