{"count":195,"legislations":[{"country":"United States","country_code":"US","effective_date":"April 2000","enactment_status":"active","name":"Children's Online Privacy Protection Act (COPPA)","penalties":{"criminal_penalties":false,"description":"Penalty of up to $53,088 per violation","max_fine":"Penalty of up to $53,088 per violation"},"policy_types":["data_protection"],"resources":[{"label":"Children's Online Privacy Protection Rule \\(\"COPPA\"\\) Complying with COPPA: Frequently Asked Questions","url":"https://www.ftc.gov/business-guidance/resources/complying-coppa-frequently-asked-questions"},{"label":"Children's Online Privacy Protection Act \\(COPPA\\)","url":"https://withpersona.com/identity-glossary/childrens-online-privacy-protection-act-coppa"}],"responsible_parties":["app_developers","online_services"],"summary":"COPPA imposes requirements on web operators or online services directed to children under 13. It details what web operators must include in their privacy policies, when to seek parental consent, and what responsibilities an operator has to protect children's online privacy and safety. The FTC defines eight obligations for companies covered by COPPA: - They must post a clear and comprehensive privacy policy online. - They must provide direct notice to parents and obtain consent before collecting information. - They must give parents the choice to prohibit the disclosure of data to third parties. - They must provide parents access to their childrens’ data upon request - They must give parents the choice to prohibit further use or collection of data. - They must take reasonable steps to maintain the confidentiality and security of collected data. - They must retain childrens’ information only so long as it is required and delete it after use. - They must not encourage children to provide more information than is necessary.","topics":["age_verification","app_stores","explicit_or_harmful_content","online_services","operating_systems","parental_consent","social_media"],"url":"https://www.ftc.gov/business-guidance/resources/complying-coppa-frequently-asked-questions"},{"country":"United States","country_code":"US","enactment_status":"proposed","name":"App Store Accountability Act (S. 1586)","penalties":{"criminal_penalties":false,"description":"Penalties via the FTC","max_fine":"Penalties via the FTC"},"policy_types":["age_assurance"],"resources":[{"label":"S. 1586","url":"https://www.congress.gov/bill/119th-congress/senate-bill/1586#:~:text=S.%201586%20%2D%20119th%20Congress%20\\(2025%2D2026\\"}],"responsible_parties":["app_stores"],"summary":"The App Store Accountability Act is a proposed federal bill that would require app store operators to verify a user's age at the time of account creation using a commercially available method or a process reasonably designed to ensure accuracy. Users must then be sorted into age categories (adult over 18, teen 16 - 17, child 13 - 15, young child under 13). App stores must provide developers with an age category signal. If the age verification process determines a user is a minor, their account must be affiliated with a parent's account. Parents must verify their own age and legal guardian status using \"commercially reasonable\" methods. Parents must also provide approval for every app download or purchase.","topics":["age_verification","app_stores","explicit_or_harmful_content","online_services","operating_systems","parental_consent","social_media"],"url":"https://www.congress.gov/bill/119th-congress/senate-bill/1586#:~:text=S.%201586%20%2D%20119th%20Congress%20(2025%2D2026"},{"country":"United States","country_code":"US","enactment_status":"proposed","name":"Kids Online Safety Act (KOSA, S.1748)","penalties":{"criminal_penalties":false,"description":"Not specified","max_fine":"Not specified"},"policy_types":["age_assurance"],"resources":[{"label":"S. 1748","url":"https://www.congress.gov/bill/119th-congress/senate-bill/1748"}],"responsible_parties":["online_gaming","online_services","social_media","video_platforms"],"summary":"KOSA would require online platforms to implement tools and safeguards to protect users under 17. It creates a duty of care that would require social media companies to prevent and mitigate certain harms. The bill also requires platforms to exercise reasonable care in the design and use of features that increase minors' online activity in order to mitigate harm. Platforms must provide parents with tools to manage their children's privacy settings and monitor their usage. This bill does not include a requirement to implement age verification technology.","topics":["age_verification","app_stores","explicit_or_harmful_content","online_services","operating_systems","parental_consent","social_media"],"url":"https://www.congress.gov/bill/119th-congress/senate-bill/1748"},{"country":"United States","country_code":"US","enactment_status":"proposed","name":"Children and Teens' Online Privacy Protection Act (CTOPPA)","penalties":{"criminal_penalties":false,"description":"Not specified","max_fine":"Not specified"},"policy_types":["data_protection"],"resources":[{"label":"S. 836","url":"https://www.congress.gov/119/bills/s836/BILLS-119s836es.pdf"}],"responsible_parties":["online_services"],"summary":"Often referred to as \"COPPA 2.0,\" this act would extend the privacy protections under COPPA to teens under 17 and would prohibit operators from using personal data for targeted advertising to users under 17. It also includes new data protection provisions such as mechanisms for users to delete personal information.","topics":["age_verification","app_stores","explicit_or_harmful_content","online_services","operating_systems","parental_consent","social_media"],"url":"https://www.congress.gov/119/bills/s836/BILLS-119s836es.pdf"},{"country":"United States","country_code":"US","enactment_status":"proposed","name":"Kids Internet and Digital Safety (KIDS) Act","penalties":{"criminal_penalties":false,"description":"Not specified","max_fine":"Not specified"},"policy_types":["age_assurance"],"resources":[{"label":"HR 7757","url":"https://www.congress.gov/119/bills/hr7757/BILLS-119hr7757ih.pdf"}],"responsible_parties":["online_services"],"summary":"The KIDS act includes several provisions meant to address online harms. It requires platforms with explicit content to implement age verification measures to prevent minors from accessing harmful content via \"commercially reasonable\" methods. The law states that platforms must take reasonable measures to address circumvention of age verification measures and that self-declaration is not sufficient. It also mandates online platforms to establish and enforce policies designed to mitigate harms to minors, including the restriction of design features that encourage compulsive use and ephemeral messaging.","topics":["age_verification","app_stores","explicit_or_harmful_content","online_services","operating_systems","parental_consent","social_media"],"url":"https://www.congress.gov/119/bills/hr7757/BILLS-119hr7757ih.pdf"},{"country":"United States","country_code":"US","enactment_status":"proposed","name":"Kids Off Social Media Act, S.278","penalties":{"criminal_penalties":false,"description":"Violations would be enforced via the FTC with associated monetary penalties","max_fine":"Violations would be enforced via the FTC with associated monetary penalties"},"policy_types":["age_assurance"],"resources":[{"label":"S. 278","url":"https://www.congress.gov/bill/119th-congress/senate-bill/278"}],"responsible_parties":["social_media"],"summary":"This proposed bill would prohibit children under 13 from creating or maintaining social media accounts, regardless of parental consent. It also prohibits platforms from using algorithmic feeds to promote content based on personal data collected from users under the age of 17. It does not include an age verification mandate.","topics":["age_verification","app_stores","explicit_or_harmful_content","online_services","operating_systems","parental_consent","social_media"],"url":"https://www.congress.gov/bill/119th-congress/senate-bill/278"},{"country":"United States","country_code":"US","enactment_status":"proposed","name":"Parents Decide Act (HR 8250)","penalties":{"criminal_penalties":false,"description":"Violators are regulated under the Federal Trade Commission Act regarding unfair or deceptive acts or practices.","max_fine":"Violators are regulated under the Federal Trade Commission Act regarding unfair or deceptive acts or practices."},"policy_types":["age_assurance"],"resources":[{"label":"HR 8250","url":"https://www.congress.gov/bill/119th-congress/house-bill/8250/all-actions"}],"responsible_parties":["operating_systems"],"summary":"This bill would require operating system providers to verify a user's age when setting up a new device. If a user is under 18, a parent or guardian must verify their date of birth. Operating systems must share age signals with app developers.","topics":["age_verification","app_stores","explicit_or_harmful_content","online_services","operating_systems","parental_consent","social_media"],"url":"https://www.congress.gov/bill/119th-congress/house-bill/8250/all-actions"},{"country":"United States","country_code":"US","enactment_status":"proposed","name":"The GUARD Act (S. 3062)","penalties":{"criminal_penalties":true,"description":"Violators may incur civil and criminal penalties up to $100k per violation.","max_fine":"Violators may incur civil and criminal penalties up to $100k per violation."},"policy_types":["age_assurance"],"resources":[{"label":"S. 3062","url":"https://www.congress.gov/119/bills/s3062/BILLS-119s3062is.pdf"}],"responsible_parties":["online_services"],"summary":"The GUARD Act would require AI chatbot providers to verify every user's age using \"reasonable age verification measures\" and ban minors from AI companions. It imposes data minimization, encryption, and no-resale requirements on age data.","topics":["age_verification","app_stores","explicit_or_harmful_content","online_services","operating_systems","parental_consent","social_media"],"url":"https://www.congress.gov/119/bills/s3062/BILLS-119s3062is.pdf"},{"country":"United States","country_code":"US","region":"Alabama","region_code":"AL","effective_date":"January 1, 2027","enactment_status":"in_progress","name":"HB 161, App Store Accountability Act","penalties":{"criminal_penalties":false,"description":"Fines up to $7,500 per violation","max_fine":"Fines up to $7,500 per violation"},"policy_types":["age_assurance"],"resources":[{"label":"HB 161","url":"https://legiscan.com/AL/text/HB161/id/3357012/Alabama-2026-HB161-Enrolled.pdf"}],"responsible_parties":["app_stores"],"summary":"App stores must verify a user's age category using commercially reasonable methods and obtain parental consent before a minor can download or purchase an app. Unlike other state app store laws, Alabama's HB 161 also applies to pre-installed apps, which requires app stores to provide the developers of pre-installed apps with the user's age category information. They must also take \"reasonable measures\" to facilitate parental consent for the use of a pre-installed app if the developer requests it.","topics":["app_stores","explicit_or_harmful_content"],"url":"https://legiscan.com/AL/text/HB161/id/3357012/Alabama-2026-HB161-Enrolled.pdf"},{"country":"United States","country_code":"US","region":"Alabama","region_code":"AL","effective_date":"October 1, 2024","enactment_status":"active","name":"HB 164","penalties":{"criminal_penalties":false,"description":"The state Attorney General may seek penalties up to $10,000 per violation.","max_fine":"The state Attorney General may seek penalties up to $10,000 per violation."},"policy_types":["age_assurance"],"resources":[{"label":"HB 164","url":"https://legiscan.com/AL/text/HB164/id/2979226/Alabama-2024-HB164-Enrolled.pdf"}],"responsible_parties":["adult_content_sites"],"summary":"Any commercial entity on which more than one-third of content is considered explicit or harmful to minors must use a \"reasonable age verification method\" to ensure that minors under 18 cannot access adult material.","topics":["app_stores","explicit_or_harmful_content"],"url":"https://legiscan.com/AL/text/HB164/id/2979226/Alabama-2024-HB164-Enrolled.pdf"},{"country":"United States","country_code":"US","region":"Arkansas","region_code":"AR","effective_date":"July 31, 2023","enactment_status":"active","name":"SB 66","penalties":{"criminal_penalties":false,"description":"Violators are liable to individuals for damages resulting from minors accessing harmful content. There are also penalties (damages, court costs, attorney fees) for knowingly retaining identifying i…","max_fine":"Violators are liable to individuals for damages resulting from minors accessing harmful content. There are also penalties (damages, court costs, attorney fees) for knowingly retaining identifying infromation."},"policy_types":["age_assurance"],"resources":[{"label":"Senate Bill 66","url":"https://www.arkleg.state.ar.us/Home/FTPDocument?path=%2FBills%2F2023R%2FPublic%2FSB66.pdf"}],"responsible_parties":["adult_content_sites"],"summary":"Any commercial entity that publishes content in which a \"substantial portion\" (over 33%) of material harmful to minors must perform \"reasonable age verification\" before granting access. Verification may be completed by using a digitized ID, government-issued ID, or any other method that meets Identity Assurance Level 2 (IAL2) standards. Companies may not retain any identifiying information after access has been granted.","topics":["explicit_or_harmful_content","social_media"],"url":"https://www.arkleg.state.ar.us/Home/FTPDocument?path=%2FBills%2F2023R%2FPublic%2FSB66.pdf"},{"country":"United States","country_code":"US","region":"Arkansas","region_code":"AR","effective_date":"August 3, 2025","enactment_status":"in_progress","name":"Act 689 and SB 611","penalties":{"criminal_penalties":false,"description":"Penalties up to $10,000 per violation. Platforms may also be liable for additional damages.","max_fine":"Penalties up to $10,000 per violation. Platforms may also be liable for additional damages."},"policy_types":["age_assurance"],"resources":[{"label":"SB 611","url":"https://arkleg.state.ar.us/Home/FTPDocument?path=%2FACTS%2F2025R%2FPublic%2FACT900.pdf"},{"label":"Act 689","url":"https://arkleg.state.ar.us/Bills/Detail?id=SB396&ddBienniumSession=2023%2F2023R"}],"responsible_parties":["social_media"],"summary":"Senate Bill 611 amends Arkansas' Social Media Safety Act (Act 689) following a federal court's injunction against the original Act. The revised Act prohibits under-16s from accessing social media platforms without parental consent and requires \"reasonable age verification.\" Platforms must also take steps to prevent circumvention of age verification protocols, including monitoring for suspicious activity and preventing a minor from registering for an account out of state and then using the account within Arkansas. Platforms may not invoke any addictive features for minors and ensure the highest privacy and safety settings for minors by default. Platforms must conduct a quarterly safety audit and develop an online dashboard to allow parents to understand their child's use habits on their platform.","topics":["explicit_or_harmful_content","social_media"],"url":"https://arkleg.state.ar.us/Home/FTPDocument?path=%2FACTS%2F2025R%2FPublic%2FACT900.pdf"},{"country":"United States","country_code":"US","region":"Arizona","region_code":"AZ","effective_date":"September 26, 2025","enactment_status":"active","name":"HB 2112","penalties":{"criminal_penalties":false,"description":"Violators face civil penalties of up to $10,000 per day for age verification failures, $10,000 per instance of improper data handling, and up to $250,000 if a minor accesses harmful material due to…","max_fine":"Violators face civil penalties of up to $10,000 per day for age verification failures, $10,000 per instance of improper data handling, and up to $250,000 if a minor accesses harmful material due to the violation."},"policy_types":["age_assurance"],"resources":[{"label":"HB 2112","url":"https://www.azleg.gov/legtext/57leg/1R/laws/0193.htm"}],"responsible_parties":["adult_content_sites"],"summary":"Any commercial entity that publishes or distributes content in which more than one-third is sexual material harmful to minors must use reasonable age verification methods to ensure that an individual attempting to access the material is 18 or older.","topics":["explicit_or_harmful_content"],"url":"https://www.azleg.gov/legtext/57leg/1R/laws/0193.htm"},{"country":"United States","country_code":"US","region":"California","region_code":"CA","effective_date":"January 1, 2027","enactment_status":"in_progress","name":"Digital Age Assurance Act (Assembly Bill 1043)","penalties":{"criminal_penalties":false,"description":"Penalties for noncompliance include up to $2,500 per affected child for negligent violations and up to $7,500 for intentional violations.","max_fine":"Penalties for noncompliance include up to $2,500 per affected child for negligent violations and up to $7,500 for intentional violations."},"policy_types":["age_assurance"],"resources":[{"label":"AB 1043 Hunton: Califiornia introduces new age verification requirements for software applications","url":"https://www.hunton.com/privacy-and-cybersecurity-law-blog/2025/10"}],"responsible_parties":["app_developers","app_stores","operating_systems"],"summary":"AB 1043 designates age verification requirements for operating system providers. This law mandates that operating systems collect a user's age information during device set-up and convert this data into an age bracket signal. AB 1043 also requires app developers to request that age bracket signal from operating system providers or covered application stores when their app is downloaded and launched. Developers must not request more information than necessary to comply with the Act or share the signal with a third party for any purpose not required by the Act.","topics":["ai","age_appropriate_design","age_verification","app_stores","operating_systems","social_media"],"url":"https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB1043"},{"country":"United States","country_code":"US","region":"California","region_code":"CA","effective_date":"January 1, 2027","enactment_status":"in_progress","name":"Amendment to Digital Age Assurance Act","penalties":{"criminal_penalties":false,"description":"Fines of $2,500 for each negligent violation and $7,500 for each intentional violation","max_fine":"Fines of $2,500 for each negligent violation and $7,500 for each intentional violation"},"policy_types":["age_assurance"],"resources":[{"label":"AB-1856","url":"https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202520260AB1856"}],"responsible_parties":["app_stores","operating_systems"],"summary":"This bill amends California's Digital Age Assurance Act to exempt open-source operating systems from the bill's age assurance requirements. The bill also extends requirements to web browsers and individual websites and mandates that they also collect, transmit, or request age bracket signals from users.","topics":["ai","age_appropriate_design","age_verification","app_stores","operating_systems","social_media"],"url":"https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202520260AB1856"},{"country":"United States","country_code":"US","region":"California","region_code":"CA","effective_date":"January 1, 2027","enactment_status":"in_progress","name":"SB 976, Protecting Our Kids from Social Media Addiction Act","penalties":{"criminal_penalties":false,"description":"The state Attorney General can facilitate civil action penalties.","max_fine":"The state Attorney General can facilitate civil action penalties."},"policy_types":["age_assurance"],"resources":[{"label":"Senate Bill No. 976","url":"https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202320240SB976"}],"responsible_parties":["social_media"],"summary":"SB 976 restricts social media platforms from providing \"addictive feeds\" to users under 18. Platforms cannot provide algorithmically personalized feeds to minors without parental consent. The law mandates strict default settings for minors, including a one-hour daily time limit, and bans notifications to minors during overnight and school hours. Platforms must provide a mechanism for a verified parent of a user to enforce usage controls on notifications, limiting time-based access, set the account to private mode, limit the ability to view likes, and adjust default feed settings.","topics":["ai","age_appropriate_design","age_verification","app_stores","operating_systems","social_media"],"url":"https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202320240SB976"},{"country":"United States","country_code":"US","region":"California","region_code":"CA","enactment_status":"in_progress","name":"California Age-Appropriate Design Code Act (AB 2273 or CAADCA)","penalties":{"criminal_penalties":false,"description":"Companies may be fined up to $2,500 per infraction for negligent violations and up to $7,500 for intentional violations","max_fine":"Companies may be fined up to $2,500 per infraction for negligent violations and up to $7,500 for intentional violations"},"policy_types":["age_assurance"],"resources":[{"label":"AB 2273: The California Age-Appropriate Design Code Act","url":"https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202120220AB2273"}],"responsible_parties":["internet_service_providers","online_services"],"summary":"The CAADCA mandates that any digital products or services likely to be accessed by children must prioritize children's safety and privacy by default. It requires companies to complete a Data Protection Impact Assessment to identify and mitigate any risks to a children's health and wellbeing before any new online services, products, or features within the scope of this bill is offered to the public. Platforms must estimate the age of child users \"with a reasonable level of certainty appropriate to the risks.\" This law is currently undergoing legal challenge in federal court.","topics":["ai","age_appropriate_design","age_verification","app_stores","operating_systems","social_media"],"url":"https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=202120220AB2273"},{"country":"United States","country_code":"US","region":"California","region_code":"CA","effective_date":"January 1, 2026","enactment_status":"active","name":"Companion Chatbot Safety Act (SB 243)","penalties":{"criminal_penalties":false,"description":"$1,000 per violation","max_fine":"$1,000 per violation"},"policy_types":["age_assurance"],"resources":[{"label":"Senate Bill No. 243","url":"https://legiscan.com/CA/text/SB243/id/3269137/California-2025-SB243-Enrolled.html"}],"responsible_parties":["online_services"],"summary":"AI companion chatbot operators must implement safeguards to keep the minor grounded in reality, including clearly disclosing to the minor that they are interacting with artificial intelligence, suitability warnings, and break reminders. Operators must implement safety protocols that prevent the production of content related to harmful material.","topics":["ai","age_appropriate_design","age_verification","app_stores","operating_systems","social_media"],"url":"https://legiscan.com/CA/text/SB243/id/3269137/California-2025-SB243-Enrolled.html"},{"country":"United States","country_code":"US","region":"Colorado","region_code":"CO","effective_date":"January 1, 2026","enactment_status":"active","name":"Healthier Social Media Use by Youth (HB24-1136)","penalties":{"criminal_penalties":false,"description":"No explicit penalty provisions.","max_fine":"No explicit penalty provisions."},"policy_types":["age_assurance"],"resources":[{"label":"HB 24-1136","url":"https://leg.colorado.gov/bill_files/42939/download"}],"responsible_parties":["social_media"],"summary":"Effective January 1, 2026, social media platforms must provide users under 18 with information about how social media impacts the mental health of youth. Platforms must also display usage notifications every 30 minutes to under 18s. Users must self-declare their age and the law has no requirement for the platform to confirm the self-declaration. No age-gating is enforced.","topics":["ai","app_stores","online_platforms","operating_systems","social_media"],"url":"https://leg.colorado.gov/bill_files/42939/download"},{"country":"United States","country_code":"US","region":"Colorado","region_code":"CO","effective_date":"October 2025","enactment_status":"active","name":"Privacy Protections for Children's Online Data (SB24-041)","penalties":{"criminal_penalties":false,"description":"Violators are subject to penalties under the Colorado Privacy Act.","max_fine":"Violators are subject to penalties under the Colorado Privacy Act."},"policy_types":["data_protection"],"resources":[{"label":"SB 24-041","url":"https://leg.colorado.gov/bill_files/46008/download"}],"responsible_parties":["online_services"],"summary":"This bill amends the Colorado Privacy Act to add enhanced protections on minors' (under 18) data. Data controllers are prohibited from targeting advertising using minor's data, selling a minor's personal data, and using system design features to extent a minor's use of the service, among other protections.","topics":["ai","app_stores","online_platforms","operating_systems","social_media"],"url":"https://leg.colorado.gov/bill_files/46008/download"},{"country":"United States","country_code":"US","region":"Colorado","region_code":"CO","effective_date":"July 1, 2028","enactment_status":"in_progress","name":"Age Attestation on Computing Devices","penalties":{"criminal_penalties":false,"description":"Fines of $2,500 for each negligent violation and $7,500 for each intentional violation","max_fine":"Fines of $2,500 for each negligent violation and $7,500 for each intentional violation"},"policy_types":["age_assurance"],"resources":[{"label":"Senate Bill 26-051","url":"https://leg.colorado.gov/bill_files/115998/download"}],"responsible_parties":["app_stores","operating_systems"],"summary":"Similar to California's Digital Age Assurance Act, Colorado requires operating system and app store providers to request a user's self-declared age during account setup. Age signals must be shared with third party apps.","topics":["ai","app_stores","online_platforms","operating_systems","social_media"],"url":"https://leg.colorado.gov/bill_files/115998/download"},{"country":"United States","country_code":"US","region":"Colorado","region_code":"CO","effective_date":"January 1, 2027","enactment_status":"in_progress","name":"HB 1263","penalties":{"criminal_penalties":false,"description":"Up to $5,000 per violation","max_fine":"Up to $5,000 per violation"},"policy_types":["age_assurance"],"resources":[{"label":"HB26-1263","url":"https://leg.colorado.gov/bill_files/116851/download"}],"responsible_parties":["online_services"],"summary":"This law requires conversational AI operators to use commercially reasonable or generally accepted methods to estimate the age or age range of users. If a user is under 18, operators must implement measures to prevent the AI from simulating romantic companionship with a minor, generating explicit or harmful content, and failing to disclose to minors that they are interacting with AI.","topics":["ai","app_stores","online_platforms","operating_systems","social_media"],"url":"https://leg.colorado.gov/bill_files/116851/download"},{"country":"United States","country_code":"US","region":"Connecticut","region_code":"CT","effective_date":"July 1, 2026","enactment_status":"active","name":"Public Act 25-113/Senate Bill 1295","penalties":{"criminal_penalties":false,"description":"The state Attorney General may seek civil penalties under state consumer protection laws","max_fine":"The state Attorney General may seek civil penalties under state consumer protection laws"},"policy_types":["age_assurance","data_protection"],"resources":[{"label":"Public Act 25-113/Senate Bill 1302","url":"https://trackbill.com/bill/connecticut-senate-bill-1295-an-act-concerning-broadband-internet-gaming-social-media-online-services-and-consumer-contracts/2657098/#:~:text=+%20%E2%88%92%20Actions%20\\(22\\"}],"responsible_parties":["online_services","social_media"],"summary":"This Act amended the Connecticut Data Privacy Act to include specific safety requirements for social media platforms and controllers that offer any online service, platform, or feature to consumers that are minors. Platforms are prohibited from processing a minor's personal data for targeted advertising or otherwise selling personal data. Controllers must provide default settings that prevent adults from sending unsolicited communications to minors.","topics":["age_appropriate_design","chatbots","data_privacy","social_media"],"url":"https://trackbill.com/bill/connecticut-senate-bill-1295-an-act-concerning-broadband-internet-gaming-social-media-online-services-and-consumer-contracts/2657098/#:~:text=+%20%E2%88%92%20Actions%20(22"},{"country":"United States","country_code":"US","region":"Connecticut","region_code":"CT","effective_date":"AI companion restrictions effective January 1, 2027. Social media restrictions effective January 1, 2028.","enactment_status":"in_progress","name":"Connecticut Online Safety Act","penalties":{"criminal_penalties":false,"description":"Platforms may incur civil penalties and fines.","max_fine":"Platforms may incur civil penalties and fines."},"policy_types":["age_assurance"],"resources":[{"label":"Public Act No. 26-15","url":"https://www.cga.ct.gov/2026/ACT/PA/PDF/2026PA-00015-R00SB-00005-PA.PDF"}],"responsible_parties":["social_media"],"summary":"Connecticut's Online Safety Act places restrictions on AI chatbots and social media platforms. Social media platforms must implement \"commercially reasonable and technically feasible methods\" to determine whether a user is a minor and prohibit them from accessing algorithms that recommend media unless specific safety requirements and parental consent protocols are met. The bill includes guardrails on how AI chatbots can interact with users under 18 and establishes parental control and consent requirements. Its age assurance requirements are based on the context of the chat. If the user signals they are a minor in the chat, then minor protections will automatically trigger.","topics":["age_appropriate_design","chatbots","data_privacy","social_media"],"url":"https://www.cga.ct.gov/2026/ACT/PA/PDF/2026PA-00015-R00SB-00005-PA.PDF"},{"country":"United States","country_code":"US","region":"Florida","region_code":"FL","effective_date":"November 2025","enactment_status":"active","name":"HB 3","penalties":{"criminal_penalties":false,"description":"The Department of Legal Affairs may collect civil penalties of up to $50,000 per violation, reasonable attorney fees and court costs, and (under certain conditions) punitive damages. Account holder…","max_fine":"The Department of Legal Affairs may collect civil penalties of up to $50,000 per violation, reasonable attorney fees and court costs, and (under certain conditions) punitive damages. Account holders who are minors may also pursue up to $10,000 in damages."},"policy_types":["age_assurance"],"resources":[{"label":"Florida HB 3","url":"https://www.flsenate.gov/Session/Bill/2024/3/BillText/er/PDF"}],"responsible_parties":["social_media"],"summary":"This bill requires social media platforms to prohibit minors under 14 from creating or owning social media accounts. Minors aged 14 - 15 may only hold accounts with the consent of a parent or guardian. This law was challenged in federal court but was stayed in November 2025. It is currently enforceable. Platforms that distribute content that is deemed harmful to minors must verify, offering both \"anonymous and standard age verification methods,\" to check that a user is over 18. Standard Age Verification: This is defined as any commercially reasonable method of age verification that is specifically approved by the commercial entity. Anonymous Age Verification: This method must be conducted by an independent, U.S.-based third party that is prohibited from retaining, using, or sharing any personal identifying information once the user's age is confirmed.","topics":["explicit_or_harmful_content","social_media"],"url":"https://www.flsenate.gov/Session/Bill/2024/3/BillText/er/PDF"},{"country":"United States","country_code":"US","region":"Georgia","region_code":"GA","effective_date":"July 1, 2025","enactment_status":"active","name":"SB 351","penalties":{"criminal_penalties":false,"description":"Penalties for social media violations may incur fines of up to $2,500 per violation. Penalties for violating explicit content laws may result in fines of up to $10,000 per violation.","max_fine":"Penalties for social media violations may incur fines of up to $2,500 per violation. Penalties for violating explicit content laws may result in fines of up to $10,000 per violation."},"policy_types":["age_assurance"],"resources":[{"label":"Senate Bill 351","url":"https://legiscan.com/GA/text/SB351/id/2973892/Georgia-2023-SB351-Enrolled.pdf"}],"responsible_parties":["adult_content_sites","social_media"],"summary":"SB 351 introduces several regulations for social media platforms and websites hosting adult or explicit content. Social media platforms are prohibited from allowing minors under 16 to create accounts without express parental consent. Platforms must make \"commercially reasonable efforts\" to verify whether an account holder is over 16. Commercial entities with over 33% of content defined as sexually explicit must perform age verification before granting access to ensure users are over 18. The law outlines age verification methods, which may include but are not limited to: The submission of a digitized ID card, the submission of government-issued identification, or any commercially reasonable age verification method that meets an Identity Assurance Level 2 standard.","topics":["explicit_or_harmful_content","social_media"],"url":"https://legiscan.com/GA/text/SB351/id/2973892/Georgia-2023-SB351-Enrolled.pdf"},{"country":"United States","country_code":"US","region":"Hawaii","region_code":"HI","effective_date":"July 14, 2026","enactment_status":"active","name":"Artificial Intelligence Disclosure and Safety Act (SB 3001)","penalties":{"criminal_penalties":false,"description":"Up to $10,000 per violation","max_fine":"Up to $10,000 per violation"},"policy_types":["age_assurance"],"resources":[{"label":"SB 3001","url":"https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SB&billnumber=3001&year=2026"}],"responsible_parties":["online_services"],"summary":"This law requires AI chatbot operators to regularly inform users under 18 that they are interacting with AI. It also restricts operators from using “manipulative design” for minors, including unpredictable rewards intended to increase engagement time. Operators must also provide tools to minors and their parents to manage account settings and screen time.","topics":["ai"],"url":"https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SB&billnumber=3001&year=2026"},{"country":"United States","country_code":"US","region":"Iowa","region_code":"IA","effective_date":"July 1, 2026","enactment_status":"active","name":"HF 864 (adult content restrictions)","penalties":{"criminal_penalties":false,"description":"Violators are subject to civil penalties of up to $1,000 per violation, capped at $10,000 in a single day.","max_fine":"Violators are subject to civil penalties of up to $1,000 per violation, capped at $10,000 in a single day."},"policy_types":["age_assurance"],"resources":[{"label":"HF 864","url":"https://www.legis.iowa.gov/docs/publications/LGE/91/attachments/HF864.html"}],"responsible_parties":["adult_content_sites"],"summary":"Sites, applications, or segments of sites or applications, including on social media platforms, on which 33% or more of content is deemed pornographic for minors must use \"reasonable age verification\" to prevent minors from accessing that content. Reasonable methods include digital identification, commercially reasonable methods relying on transactional data (such as credit card verification), or any method approved by the Iowa Attorney General by rule. Sites and third-party verifiers may not retain, sell, lease, or otherwise disseminate identifying information collected for age verification unless required by law or court order and must use reasonable methods to secure collected data.","topics":["explicit_or_harmful_content"],"url":"https://www.legis.iowa.gov/docs/publications/LGE/91/attachments/HF864.html"},{"country":"United States","country_code":"US","region":"Idaho","region_code":"ID","effective_date":"July 1, 2024","enactment_status":"active","name":"HB 498","penalties":{"criminal_penalties":false,"description":"The law grants individuals exposed to material harmful to minors the ability to bring civil action against liable entities. They may pursue statutory damages in an amount no less than $10,000 per v…","max_fine":"The law grants individuals exposed to material harmful to minors the ability to bring civil action against liable entities. They may pursue statutory damages in an amount no less than $10,000 per violation."},"policy_types":["age_assurance"],"resources":[{"label":"HB 498","url":"https://legislature.idaho.gov/wp-content/uploads/sessioninfo/2024/legislation/H0498.pdf"}],"responsible_parties":["adult_content_sites"],"summary":"Idaho's Online Child Safety Act requires explicit content sites to implement \"reasonable age verification methods\" to ensure users are over 18. This may be implemented by providing a digitized identification card or by requiring the user comply with a commercial age verification system that uses government-issued identification or public/private transactional data. The law prohibits companies from retaining any identifying information after the verification process is complete.","topics":["explicit_or_harmful_content","social_media"],"url":"https://legislature.idaho.gov/wp-content/uploads/sessioninfo/2024/legislation/H0498.pdf"},{"country":"United States","country_code":"US","region":"Idaho","region_code":"ID","effective_date":"July 1, 2026","enactment_status":"active","name":"Stop Harms from Addictive Social Media Act (HB 542)","penalties":{"criminal_penalties":false,"description":"Violators may be liable for statutory damages of $10,000 per violation, or greater actual damages.","max_fine":"Violators may be liable for statutory damages of $10,000 per violation, or greater actual damages."},"policy_types":["age_assurance"],"resources":[{"label":"HB 542","url":"https://legislature.idaho.gov/wp-content/uploads/sessioninfo/2026/legislation/H0542E1.pdf"}],"responsible_parties":["social_media"],"summary":"Social media platforms must take \"reasonable means and effective efforts\" to estimate the age of social media account holders. An account holder must be treated as a child unless a platform can conclude with 90% confidence that the user is an adult. If a user is determined to be a child (16 or younger), the platform must obtain parental consent before a minor can maintain an account. For verified minor accounts, the platform must set its most restrictive privacy settings by default and disable features deemed addictive.","topics":["explicit_or_harmful_content","social_media"],"url":"https://legislature.idaho.gov/wp-content/uploads/sessioninfo/2026/legislation/H0542E1.pdf"},{"country":"United States","country_code":"US","region":"Illinois","region_code":"IL","effective_date":"January 1, 2028","enactment_status":"in_progress","name":"Children’s Online Social Media Safety Act (HB 5511)","penalties":{"criminal_penalties":false,"description":"$50,000 per violation","max_fine":"$50,000 per violation"},"policy_types":["age_assurance"],"resources":[{"label":"HB 5511","url":"https://ilga.gov/Legislation/BillStatus/FullText?LegDocId=208832&DocName=10400HB5511enr&DocNum=5511&DocTypeID=HB&LegID=167486&GAID=18&SessionID=114&SpecSess=&Session="}],"responsible_parties":["social_media"],"summary":"This bill requires social media platforms to confirm a user’s age through the device’s operating system. It also requires stronger default privacy settings for minors and bans overnight notifications to minors.","topics":["social_media"],"url":"https://ilga.gov/Legislation/BillStatus/FullText?LegDocId=208832&DocName=10400HB5511enr&DocNum=5511&DocTypeID=HB&LegID=167486&GAID=18&SessionID=114&SpecSess=&Session="},{"country":"United States","country_code":"US","region":"Indiana","region_code":"IN","effective_date":"July 1, 2024","enactment_status":"active","name":"SB 17","penalties":{"criminal_penalties":false,"description":"Violators that do not implement reasonable age verification may incur fines of up to $250,000. The law also includes fines for unlawfully retaining identifying information with damages of up to $5,…","max_fine":"Violators that do not implement reasonable age verification may incur fines of up to $250,000. The law also includes fines for unlawfully retaining identifying information with damages of up to $5,000 per violation."},"policy_types":["age_assurance"],"resources":[{"label":"SB 17","url":"https://iga.in.gov/pdf-documents/123/2024/senate/bills/SB0017/SB0017.05.ENRH.pdf"}],"responsible_parties":["adult_content_sites"],"summary":"Adult-oriented website operators must use a reasonable age verification method to prevent a minor from accessing harmful content. This may include a mobile credential, an independent third party age verification service, or any \"commercially reasonable method that relies on public or private transactional data to verify the age\" of the user. Sites may not retain identifying information.","topics":["explicit_or_harmful_content","social_media"],"url":"https://iga.in.gov/pdf-documents/123/2024/senate/bills/SB0017/SB0017.05.ENRH.pdf"},{"country":"United States","country_code":"US","region":"Indiana","region_code":"IN","effective_date":"January 1, 2027","enactment_status":"in_progress","name":"HB 1408","penalties":{"criminal_penalties":false,"description":"Companies may be fined up to $5,000 per violation.","max_fine":"Companies may be fined up to $5,000 per violation."},"policy_types":["age_assurance"],"resources":[{"label":"Indiana House Bill 1408","url":"https://iga.in.gov/legislative/2026/bills/house/1408/details"}],"responsible_parties":["social_media"],"summary":"Social media platforms with over $1 billion in annual revenue must restrict under-16s from creating accounts without parental consent. Addictive features (infinite scroll, autoplay, and public reaction metrics) must be disabled for minors. The bill also implements an age assurance framework that requires platforms to use \"commercially reasonable methods\" to determine a user's age. Indiana is unique in that they require platforms to implement an ongoing \"age estimation\" system to continuously evaluate whether a user's behavior suggests they are younger than claimed during registration until the account has been held continuously for 10 years.","topics":["explicit_or_harmful_content","social_media"],"url":"https://iga.in.gov/legislative/2026/bills/house/1408/details"},{"country":"United States","country_code":"US","region":"Kansas","region_code":"KS","effective_date":"July 1, 2024","enactment_status":"active","name":"SB 394","penalties":{"criminal_penalties":false,"description":"Violators may be subject to civil penalties of up to $10,000 per violation. Parents may bring a private action against commercial entities to seek statutory damages \"in an amount not less than $50,…","max_fine":"Violators may be subject to civil penalties of up to $10,000 per violation. Parents may bring a private action against commercial entities to seek statutory damages \"in an amount not less than $50,000.\""},"policy_types":["age_assurance"],"resources":[{"label":"Senate Bill No. 394 (2024)","url":"https://legiscan.com/KS/text/SB394/id/2972800/Kansas-2023-SB394-Enrolled.pdf"}],"responsible_parties":["adult_content_sites"],"summary":"Kansas' SB 394 requires age verification for sites on which over 25% of content is deemed harmful to minors. Age verification must be conducted through a commercially available database, or via any other commercially reasonable method.","topics":["explicit_or_harmful_content"],"url":"https://legiscan.com/KS/text/SB394/id/2972800/Kansas-2023-SB394-Enrolled.pdf"},{"country":"United States","country_code":"US","region":"Kentucky","region_code":"KY","effective_date":"July 15, 2024","enactment_status":"active","name":"HB 278","penalties":{"criminal_penalties":false,"description":"Minors or parents may bring civil action against covered platforms to recover damages of up to $10,000 per instance of failed age verification. Retaining identifying information may result in damag…","max_fine":"Minors or parents may bring civil action against covered platforms to recover damages of up to $10,000 per instance of failed age verification. Retaining identifying information may result in damages of up to $1,000 for each 24-hour period that the information is retained."},"policy_types":["age_assurance"],"resources":[{"label":"HB 278","url":"https://apps.legislature.ky.gov/recorddocuments/bill/24RS/hb278/bill.pdf"}],"responsible_parties":["adult_content_sites"],"summary":"Kentucky's HB 278 requires age verification for sites with over one-third of content deemed harmful to minors. Age veriifcation is defined as a state-issued form of identification or \"any commercially reasonable method of identification that relies on public or private transactional data\" to confirm a user is over 18. Sites may not retain identifying information.","topics":["explicit_or_harmful_content"],"url":"https://apps.legislature.ky.gov/recorddocuments/bill/24RS/hb278/bill.pdf"},{"country":"United States","country_code":"US","region":"Louisiana","region_code":"LA","effective_date":"July 1, 2027","enactment_status":"in_progress","name":"Act 481","penalties":{"criminal_penalties":false,"description":"The Attorney General grants violators 45 days to solve any issues before its office initiates civil action. Penalties may reach up to $10,000 per violation, with an additional $5,000 imposed for fa…","max_fine":"The Attorney General grants violators 45 days to solve any issues before its office initiates civil action. Penalties may reach up to $10,000 per violation, with an additional $5,000 imposed for failing to comply with enforcement."},"policy_types":["age_assurance"],"resources":[{"label":"Act 481","url":"https://www.legis.la.gov/legis/ViewDocument.aspx?d=1427667"},{"label":"HB 977 (repeal and reenactment, effective date delayed to July 1, 2027)","url":"https://www.legis.la.gov/legis/ViewDocument.aspx?d=1465290"}],"responsible_parties":["app_developers","app_stores"],"summary":"This bill mandates that app stores verify the age category of users located in the state at the time of account creation. If the app store identifies a user as a minor, the account must be linked to a parent's account. Stores must obtain verifiable parental consent before a minor can download or purchase an app. Developers of applications must verify the age category of users through the covered application store's data sharing methods and any other source of data or information that the developer determines is recommended or appropriate to comply with applicable law. Act 481 was subsequently repealed and reenacted by HB 977, signed May 15, 2026, which delayed the effective date by one year to July 1, 2027.","topics":["age_verification","app_stores","explicit_or_harmful_content"],"url":"https://www.legis.la.gov/legis/ViewDocument.aspx?d=1427667"},{"country":"United States","country_code":"US","region":"Louisiana","region_code":"LA","effective_date":"January 1, 2023","enactment_status":"active","name":"Act 440 , HB 142","penalties":{"criminal_penalties":false,"description":"Violators are liable for damages resulting from a minor's access to harmful material or for knowingly retaining identifying information.","max_fine":"Violators are liable for damages resulting from a minor's access to harmful material or for knowingly retaining identifying information."},"policy_types":["age_assurance"],"responsible_parties":["adult_content_sites"],"summary":"Age verification is required for sites on which over one-third of content is deemed harmful to minors. Reasonable age verification methods include the provision of a digitized ID card or requiring users to comply with a commercial age verification system. Sites may not retain identifying information.","topics":["age_verification","app_stores","explicit_or_harmful_content"],"url":"https://legis.la.gov/legis/ViewDocument.aspx?d=1289498"},{"country":"United States","country_code":"US","region":"Maryland","region_code":"MD","effective_date":"October 2024","enactment_status":"active","name":"Maryland Kid's Code (HB 603/SB 571)","penalties":{"criminal_penalties":false,"description":"Violations are subject to fines of $2,500 per infraction for negligent violations and $7,500 per infraction for intentional violations.","max_fine":"Violations are subject to fines of $2,500 per infraction for negligent violations and $7,500 per infraction for intentional violations."},"policy_types":["age_assurance"],"resources":[{"label":"Maryland SB 0571","url":"https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0571?ys=2024rs"}],"responsible_parties":["online_services"],"summary":"Maryland's Kid's Code applies to any online products or services likely to be accessed by children, and meets commercial requirements including: Annual gross revenues in excess of $25 million, buys, receives, or shares personal data of 50,000 or more consumers, or derives at least 50% of its annual revenue from sale of consumer personal data. It requires companies to complete a DPIA (data protection impact assessment) for any product that is targeted at or likely to be accessed by, children and requires privacy protections for children.","topics":["age_appropriate_design"],"url":"https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0571?ys=2024rs"},{"country":"United States","country_code":"US","region":"Minnesota","region_code":"MN","effective_date":"July 1, 2027","enactment_status":"in_progress","name":"Stop Harms from Addictive Social Media Act","penalties":{"criminal_penalties":false,"description":"$10,000 per violation in statutory damages","max_fine":"$10,000 per violation in statutory damages"},"policy_types":["age_assurance"],"resources":[{"label":"HF 4138","url":"https://www.revisor.mn.gov/bills/94/2026/0/HF/4138/versions/4/"}],"responsible_parties":["social_media"],"summary":"This bill requires parental consent for children under 16 to create a social media account on platforms with over 10,000 account holders. Platforms must use \"reasonable efforts\" to estimate a new account holder's age with at least 80% confidence. The law also requires verifiable parental consent before a minor can open or maintain an account, restrictions on features deemed addictive, and automatic default high privacy settings for minors.","topics":["social_media"],"url":"https://www.revisor.mn.gov/bills/94/2026/0/HF/4138/versions/4/"},{"country":"United States","country_code":"US","region":"Missouri","region_code":"MO","effective_date":"November 30, 2025","enactment_status":"active","name":"Rule 15 CSR 60-18 and HB 1839 (age verification for explicit content).","penalties":{"criminal_penalties":false,"description":"Violators may incur fines of up to $10,000 per violation.","max_fine":"Violators may incur fines of up to $10,000 per violation."},"policy_types":["age_assurance"],"resources":[{"label":"Rule 15 CSR 60-18","url":"https://www.sos.mo.gov/CMSImages/AdRules/csr/current/15csr/15c60-18.pdf"},{"label":"House Bill 1839","url":"https://documents.house.mo.gov/billtracking/bills261/hlrbillspdf/4734H.04T.pdf"}],"responsible_parties":["adult_content_sites"],"summary":"This rule requires adult content sites to implement reasonable age verification methods to ensure their users are over 18. Age verification methods may include the provision of digital identification or compliance with a commercial age verification system that verifies age using either (1) government-issued identification or (2) a commercially reasonable method that relies on public or private transactional data to verify the user's age. Rule 15 CSR 60-18 was codified by HB 1839 in July 2026.","topics":["explicit_or_harmful_content"],"url":"https://www.sos.mo.gov/CMSImages/AdRules/csr/current/15csr/15c60-18.pdf"},{"country":"United States","country_code":"US","region":"Mississippi","region_code":"MS","effective_date":"July 2024","enactment_status":"active","name":"House Bill No. 1126 (Walker Montgomery Protecting Children Online Act)","penalties":{"criminal_penalties":false,"description":"A minor's parent or guardian may seek a declaratory judgement or injunction for violations","max_fine":"A minor's parent or guardian may seek a declaratory judgement or injunction for violations"},"policy_types":["age_assurance"],"resources":[{"label":"House Bill No. 1126","url":"https://billstatus.ls.state.ms.us/documents/2024/pdf/HB/1100-1199/HB1126SG.pdf"}],"responsible_parties":["online_services"],"summary":"This law aims to safeguard children from harmful online content by requiring digital service providers to verify user ages and obtain express parental consent for minors' to own accounts. The law also limits the collection of minors' personal data to information reasonably necessary to provide the digital service. Digital service providers are also required to moderate content that promotes or facilites harmful behaviors or illegal activity.","topics":["age_verification","explicit_or_harmful_content","parental_consent"],"url":"https://billstatus.ls.state.ms.us/documents/2024/pdf/HB/1100-1199/HB1126SG.pdf"},{"country":"United States","country_code":"US","region":"Mississippi","region_code":"MS","effective_date":"July 1, 2023","enactment_status":"active","name":"SB 2346","penalties":{"criminal_penalties":false,"description":"Violators are liable for damages resulting from a minor's access to harmful material or for knowingly retaining identifying information.","max_fine":"Violators are liable for damages resulting from a minor's access to harmful material or for knowingly retaining identifying information."},"policy_types":["age_assurance"],"resources":[{"label":"SB 2346","url":"https://legiscan.com/MS/text/SB2346/id/2767747/Mississippi-2023-SB2346-Enrolled.html"}],"responsible_parties":["adult_content_sites"],"summary":"Explicit content sites must use reasonable age verification methods to verify that their users are over 18. \"Reasonable methods\" include the provision of a digitized identification card or requiring users to comply with a commercial age verification system that either (1) verifies a government-issued ID or (2) conducts any commercially reasonable method relying on public or private transactional data. Sites may not retain any identifying information.","topics":["age_verification","explicit_or_harmful_content","parental_consent"],"url":"https://legiscan.com/MS/text/SB2346/id/2767747/Mississippi-2023-SB2346-Enrolled.html"},{"country":"United States","country_code":"US","region":"Montana","region_code":"MT","effective_date":"January 1, 2024","enactment_status":"active","name":"SB 544","penalties":{"criminal_penalties":false,"description":"Violators are liable for damages resulting from a minor's access to harmful material or for knowingly retaining identifying information.","max_fine":"Violators are liable for damages resulting from a minor's access to harmful material or for knowingly retaining identifying information."},"policy_types":["age_assurance"],"resources":[{"label":"SB 544 2023","url":"https://legiscan.com/MT/text/SB544/id/2797254/Montana-2023-SB544-Enrolled.pdf"}],"responsible_parties":["adult_content_sites"],"summary":"Companies on which over 33% of material is deemed harmful to minors must perform reasonable age verification methods to ensure users are over 18. This may include either the provision of (1) a digitized identification card or (2) requiring the user to comply with a commercial age verification system that conducts verification either via government ID or through any commercially reasonable method that relies on public or private transactional data to verify age. Sites may not retain identifying information used for age verification purposes.","topics":["explicit_or_harmful_content"],"url":"https://legiscan.com/MT/text/SB544/id/2797254/Montana-2023-SB544-Enrolled.pdf"},{"country":"United States","country_code":"US","region":"North Carolina","region_code":"NC","effective_date":"January 1, 2024","enactment_status":"active","name":"HB 8","penalties":{"criminal_penalties":false,"description":"Violators are liable for damages resulting from a minor's access to harmful material or for knowingly retaining identifying information. Courts may also award compensatory and punitive damages.","max_fine":"Violators are liable for damages resulting from a minor's access to harmful material or for knowingly retaining identifying information. Courts may also award compensatory and punitive damages."},"policy_types":["age_assurance"],"resources":[{"label":"House Bill 8","url":"https://dashboard.ncleg.gov/api/Services/BillSummary/2023/H8-SMBN-39(e3"}],"responsible_parties":["adult_content_sites"],"summary":"North Carolina's \"Pornography Age Verification Enforcement Act\" requires explicit content sites to conduct age verification to ensure users are over 18. Companies are prohibited from retaining identifying information.","topics":["explicit_or_harmful_content"],"url":"https://dashboard.ncleg.gov/api/Services/BillSummary/2023/H8-SMBN-39(e3"},{"country":"United States","country_code":"US","region":"North Dakota","region_code":"ND","effective_date":"August 1, 2025","enactment_status":"active","name":"HB 1561","penalties":{"criminal_penalties":false,"description":"Commercial entities are liable for damages.","max_fine":"Commercial entities are liable for damages."},"policy_types":["age_assurance"],"resources":[{"label":"HB 1561","url":"https://legiscan.com/ND/text/HB1561/id/3201225/North_Dakota-2025-HB1561-Enrolled.pdf"}],"responsible_parties":["adult_content_sites"],"summary":"Sites where over 33% of content is deemed sexually explicit must implement reasonable age verification methods to ensure users are over 18. This includes (1) a digitized identification card or (2) any commercially reasonable method that relies on public or private transactional data to verify a user is over 18. Companies are prohibited from retaining identifying information.","topics":["explicit_or_harmful_content"],"url":"https://legiscan.com/ND/text/HB1561/id/3201225/North_Dakota-2025-HB1561-Enrolled.pdf"},{"country":"United States","country_code":"US","region":"Nebraska","region_code":"NE","effective_date":"July 19, 2024","enactment_status":"active","name":"LB 1092","penalties":{"criminal_penalties":false,"description":"Violators are liable for damages resulting from a minor's access to harmful material or for knowingly retaining identifying information.","max_fine":"Violators are liable for damages resulting from a minor's access to harmful material or for knowingly retaining identifying information."},"policy_types":["age_assurance"],"resources":[{"label":"Legislative Bill 1092","url":"https://nebraskalegislature.gov/FloorDocs/108/PDF/Final/LB1092.pdf"}],"responsible_parties":["adult_content_sites"],"summary":"Sites where over 33% of material is deemed harmful to minors must perform reasonable age verification methods to ensure users are over 18. This may include (1) a digitized identification card, including a digital copy of a driver's license, (2) a government-issued ID, (3) a financial document or other document that is a reasonable proxy for age, or (4) any commercially reasonable method that relies on public or private transactional data to verify age. Sites must not retain identifying information used for age verification purposes.","topics":["ai","account_access","age_appropriate_design","explicit_or_harmful_content","parental_consent"],"url":"https://nebraskalegislature.gov/FloorDocs/108/PDF/Final/LB1092.pdf"},{"country":"United States","country_code":"US","region":"Nebraska","region_code":"NE","effective_date":"July 1, 2026","enactment_status":"blocked","name":"LB 383 (Parental Rights in Social Media Act)","penalties":{"criminal_penalties":false,"description":"Companies may be fined up to $2,500 per violation","max_fine":"Companies may be fined up to $2,500 per violation"},"policy_types":["age_assurance"],"resources":[{"label":"Legislative Bill 383","url":"https://legiscan.com/NE/text/LB383/id/3230530/Nebraska-2025-LB383-Enrolled.pdf"}],"responsible_parties":["social_media"],"summary":"This law requires social media companies to verify the age of every user and mandates parental consent before minors can create online accounts. The law states that social media companies must use either a digitized identification card or other \"commercially reasonable method\" to confirm a user's age. It explicitly allows companies to outsource the age verification process to third-party vendors. Platforms must also verify the age of the parent and the parent must then provide an oath or affirmation confirming their legal relationship to the minor. A federal judge granted a preliminary injunction in June 2026, blocking LB 383 from taking effect on First Amendment grounds.","topics":["ai","account_access","age_appropriate_design","explicit_or_harmful_content","parental_consent"],"url":"https://legiscan.com/NE/text/LB383/id/3230530/Nebraska-2025-LB383-Enrolled.pdf"},{"country":"United States","country_code":"US","region":"Nebraska","region_code":"NE","effective_date":"January 1, 2026; civil penalties July 1, 2026","enactment_status":"active","name":"Age-appropriate Online Design Code Act (LB 504 ) and amendments","penalties":{"criminal_penalties":false,"description":"The state Attorney General has authority to seek civil penalties up to $50,000 per violation.","max_fine":"The state Attorney General has authority to seek civil penalties up to $50,000 per violation."},"policy_types":["age_assurance"],"resources":[{"label":"LB 504","url":"https://legiscan.com/NE/text/LB504/2025"}],"responsible_parties":["online_services"],"summary":"This law requires covered companies to implement high-privacy default settings, provide tools for parental oversight, and allow minors to opt out of addictive features such as personalized recommendation feeds. It uses an \"actual knowledge\" standard for age assurance based on self-reported age or inferences from marketing and advertising data. In April 2026, the state passed an amendment (LB 838) which adds new provisions with a framework for how platforms must identify minors, including requiring the use of a \"reasonable age verification method\"to confirm a user's age before they create an account. Users under 18 must obtain parental consent before creating an account.","topics":["ai","account_access","age_appropriate_design","explicit_or_harmful_content","parental_consent"],"url":"https://legiscan.com/NE/text/LB504/2025"},{"country":"United States","country_code":"US","region":"Nebraska","region_code":"NE","effective_date":"July 1, 2027","enactment_status":"in_progress","name":"Conversational AI Safety Act LB 525","penalties":{"criminal_penalties":false,"description":"Civil penalties of at least $1,000 per violation, capped at $500,000 per operator","max_fine":"Civil penalties of at least $1,000 per violation, capped at $500,000 per operator"},"policy_types":["age_assurance"],"resources":[{"label":"LB 525","url":"https://nebraskalegislature.gov/FloorDocs/109/PDF/Engrossed/LB525.pdf"}],"responsible_parties":["online_services"],"summary":"Conversational AI operators must clearly disclose to minor users that they are interacting with AI. Operators must also implement guardrails for minors to prevent explicit or harmful content, emotional manipulation, and addictive engagement features.","topics":["ai","account_access","age_appropriate_design","explicit_or_harmful_content","parental_consent"],"url":"https://nebraskalegislature.gov/FloorDocs/109/PDF/Engrossed/LB525.pdf"},{"country":"United States","country_code":"US","region":"New York","region_code":"NY","effective_date":"January 25, 2027","enactment_status":"in_progress","name":"SAFE for Kids Act (\"Stop Additive Feeds Exploitation\" for Kids Act)","penalties":{"criminal_penalties":false,"description":"The state Attorney General can impose fines of up to $5,000 per violation.","max_fine":"The state Attorney General can impose fines of up to $5,000 per violation."},"policy_types":["age_assurance"],"resources":[{"label":"SAFE for Kids Act Implementing Rules","url":"https://ag.ny.gov/safe-for-kids-act-final-rule"}],"responsible_parties":["online_services"],"summary":"The SAFE for Kids Act prohibits platforms from offering addictive feeds to minors (under 18) unless they implement commercially reasonable age assurance or obtain verifiable parental consent. The state Attorney General also released accompanying implementing rules, which lists specific outcome metrics for age assurance methods and certification requirements for providers. The law also prohibits nighttime notifications to minors. The law applies to any platform that offers \"addictive feeds,\" which is defined as accounting for 20% or more of the time users spend on the platform. The law offers an exemption based on platform size. Platforms with fewer than 5 million monthly active users, or with fewer than 20,000 monthly active users who are minors are exempt. However, platforms whose primary user base are minors are not exempt, no matter their size. Platforms must offer at least one method that is not Gov ID. Platforms must offer a way for users to appeal inconclusive results or appeal once they turn 18.","topics":["age_verification","social_media"],"url":"https://www.nysenate.gov/legislation/bills/2023/S7694/amendment/A"},{"country":"United States","country_code":"US","region":"Ohio","region_code":"OH","effective_date":"September 30, 2025","enactment_status":"active","name":"HB 96","penalties":{"criminal_penalties":false,"description":"The Attorney General can file a civil action seeking injunctive relief against violators (blocking the site).","max_fine":"The Attorney General can file a civil action seeking injunctive relief against violators (blocking the site)."},"policy_types":["age_assurance"],"resources":[{"label":"HB 96","url":"https://legiscan.com/OH/text/HB96/id/3259417/Ohio-2025-HB96-Enrolled.pdf"}],"responsible_parties":["adult_content_sites"],"summary":"Ohio's law mandates that sites that distribute material that is obscene or harmful to minors must verify the age of their users to ensure they are over 18. Methods include (1) commercial age verification systems that use photo ID or public or private transactional data or (2) third-party and government databases that use a commercial age verification system. Notably, the law specifies that organizations must reverify a user's age every two years.","topics":["explicit_or_harmful_content","social_media"],"url":"https://legiscan.com/OH/text/HB96/id/3259417/Ohio-2025-HB96-Enrolled.pdf"},{"country":"United States","country_code":"US","region":"Ohio","region_code":"OH","effective_date":"June 18, 2026 following a court decision","enactment_status":"active","name":"Ohio Social Media Parental Notification Act (HB 33)","penalties":{"criminal_penalties":false,"description":"Violators may incur fines of up to $10,000 per day","max_fine":"Violators may incur fines of up to $10,000 per day"},"policy_types":["age_assurance"],"resources":[{"label":"HB 33","url":"https://codes.ohio.gov/assets/laws/revised-code/authenticated/13/1349/1349.09/10-3-2023/1349.09-10-3-2023.pdf"}],"responsible_parties":["social_media"],"summary":"Online operators must obtain verifiable parental consent before allowing children under 16 to maintain or create social media accounts. If a parent decides to withdraw consent at any point, the operator must terminate a child’s access within 30 days.","topics":["explicit_or_harmful_content","social_media"],"url":"https://codes.ohio.gov/assets/laws/revised-code/authenticated/13/1349/1349.09/10-3-2023/1349.09-10-3-2023.pdf"},{"country":"United States","country_code":"US","region":"Oklahoma","region_code":"OK","effective_date":"November 1, 2024","enactment_status":"active","name":"SB 1959","penalties":{"criminal_penalties":false,"description":"Violators are subject to nominal damages, actual damages, court costs, and reasonable attorney fees.","max_fine":"Violators are subject to nominal damages, actual damages, court costs, and reasonable attorney fees."},"policy_types":["age_assurance"],"resources":[{"label":"Bill No. 1959","url":"https://legiscan.com/OK/text/SB1959/id/2986697/Oklahoma-2024-SB1959-Enrolled.pdf"}],"responsible_parties":["adult_content_sites"],"summary":"Sites on which over one-third of content is deemed harmful to minors must implement reasonable age verification methods to ensure users are over 18. This includes (1) the use of a digitized identification card (2) verification through an independent, third-party age verification service that compares information to a commercially available database, or aggregate of databases, that is regularly used by government agencies and businesses for purpose of age and identity verification or (3) any commercially reasonable method that relies on public or private transactional data to verify the age of the user. Companies may not retain identifying information. This law also states that entities must provide internet and cell service subscribers the opportunity to request that access to the website be blocked for their line(s).","topics":["explicit_or_harmful_content"],"url":"https://legiscan.com/OK/text/SB1959/id/2986697/Oklahoma-2024-SB1959-Enrolled.pdf"},{"country":"United States","country_code":"US","region":"Oregon","region_code":"OR","effective_date":"January 1, 2027","enactment_status":"in_progress","name":"SB 1546","penalties":{"criminal_penalties":false,"description":"Up to $1,000 per violation","max_fine":"Up to $1,000 per violation"},"policy_types":["age_assurance"],"resources":[{"label":"SB 1546","url":"https://olis.oregonlegislature.gov/liz/2026R1/Downloads/MeasureDocument/SB1546"}],"responsible_parties":["online_services"],"summary":"This law requires operators of AI companions and AI companion platforms to implement safeguards for users, including minors. Operators must provide AI notices and avoid techniques designed to create emotional dependency.","topics":["ai"],"url":"https://olis.oregonlegislature.gov/liz/2026R1/Downloads/MeasureDocument/SB1546"},{"country":"United States","country_code":"US","region":"South Carolina","region_code":"SC","effective_date":"February 2026","enactment_status":"active","name":"South Carolina Social Media Regulation Act (H3431)","penalties":{"criminal_penalties":false,"description":"Violators are liable for treble damages, meaning covered services must pay three times the financial damages resulting from a violation","max_fine":"Violators are liable for treble damages, meaning covered services must pay three times the financial damages resulting from a violation"},"policy_types":["age_assurance"],"resources":[{"label":"H3431","url":"https://www.scstatehouse.gov/sess126_2025-2026/bills/3431.htm"}],"responsible_parties":["online_services"],"summary":"South Carolina recently passed a rule imposing new restrictions on online services reasonably likely to be accessed by minors. The law covers any online service that exceeds $25m in annual gross revenue OR that derives over half of that revenue from selling or sharing personal data. The law limits the collection of personal data for minors to only data used to provide the online service and prohibits the use of 'dark patterns' to manipulate minors. Services must also provide parents with tools to manage minors' account setings. The law does not mandate a specific age assurance method, but states that services are held to higher standards of care when they have \"actual knowledge\" that a user is under 18. The law states that if a covered service must treat all individuals using the site or service as minors by default. Services can exempt a user from these minor-oriented protections if it has actual knowledge that the user is not a minor. Actual knowledge includes all information and inferences known to the covered online service relating to the age of the individual including, but not limited to, self-identified age, and including any age the covered online service has attributed or associated with the individual for any purpose including, but not limited to, marketing, advertising, or product development purposes.","topics":["age_appropriate_design","explicit_or_harmful_content"],"url":"https://www.scstatehouse.gov/sess126_2025-2026/bills/3431.htm"},{"country":"United States","country_code":"US","region":"South Carolina","region_code":"SC","effective_date":"January 1, 2025","enactment_status":"active","name":"HB 3424","penalties":{"criminal_penalties":false,"description":"Violators are subject to nominal damages, actual damages, court costs, and reasonable attorney fees.","max_fine":"Violators are subject to nominal damages, actual damages, court costs, and reasonable attorney fees."},"policy_types":["age_assurance"],"resources":[{"label":"HB 3424","url":"https://legiscan.com/SC/text/H3424/id/2995408/South_Carolina-2023-H3424-Amended.html"}],"responsible_parties":["adult_content_sites"],"summary":"Sites on which over one-third of content is deemed harmful to minors must implement \"reasonable age verification\" methods to ensure users are over 18. This includes (1) use of a digitized identification card (2) verification through an independent, third-party age verification services that compares a user's information to a commercially available database that is regularly used by government agencies and businesses for the purpose of age verification, or (3) any commercially reasonable method that relies on public or private transactional data to verify the age of the user. Companies may not retain any identifying information used for age verification purposes.","topics":["age_appropriate_design","explicit_or_harmful_content"],"url":"https://legiscan.com/SC/text/H3424/id/2995408/South_Carolina-2023-H3424-Amended.html"},{"country":"United States","country_code":"US","region":"South Dakota","region_code":"SD","effective_date":"July 1, 2025","enactment_status":"active","name":"HB 1053","penalties":{"criminal_penalties":true,"description":"This bill includes both criminal and civil penalties. A first violation of the age verification or data privacy requirements is a Class 1 misdemeanor, and subsequent violations are a Class 6 felony…","max_fine":"This bill includes both criminal and civil penalties. A first violation of the age verification or data privacy requirements is a Class 1 misdemeanor, and subsequent violations are a Class 6 felony. Violators are also liable for civil penalties of up to $5,000 per violation."},"policy_types":["age_assurance"],"resources":[{"label":"HB 1053","url":"https://legiscan.com/SD/text/HB1053/id/3132258/South_Dakota-2025-HB1053-Enrolled.pdf"}],"responsible_parties":["adult_content_sites"],"summary":"Websites that regularly create, host, or make available material harmful to minors must implement reasonable age verification to ensure a user is over 18. These methods include (1) a state-issued drivers licenses or ID card, (2) the individual's bank account information, (3) a debit or credit card that requires the card owner to be over 18, or (4) any other method or document that reliably and accurately indicates if a uesr is a minor. Companies may not retain any identifying information used for age verification purposes.","topics":["explicit_or_harmful_content"],"url":"https://legiscan.com/SD/text/HB1053/id/3132258/South_Dakota-2025-HB1053-Enrolled.pdf"},{"country":"United States","country_code":"US","region":"Tennessee","region_code":"TN","effective_date":"July 1, 2024","enactment_status":"active","name":"HB 1614/SB 1792","penalties":{"criminal_penalties":true,"description":"The primary enforcement mechanism is criminal prosecution. Non-compliance is considered a Class C felony. Violators are also subject to civil lawsuits for violating minor access or data retention l…","max_fine":"The primary enforcement mechanism is criminal prosecution. Non-compliance is considered a Class C felony. Violators are also subject to civil lawsuits for violating minor access or data retention laws."},"policy_types":["age_assurance"],"resources":[{"label":"SB 1792","url":"https://capitol.tn.gov/Bills/113/Bill/SB1792.pdf"}],"responsible_parties":["adult_content_sites"],"summary":"The Protect Tennessee Minors Act requires sites on which over one-third of content is deemed harmful to minors to implement reasonable age verification methods. Notably, Tennessee's law specifies that \"reasonable age verification methods\" include photo ID matching (liveness check) in addition to the use of a commercially reasonable method that relies on transactional data. This law is also unique in that it requires re-verification after every 60 minute session. Tennessee also requires 7-year retention of anonymized historical verification data. Sites may not retain personally identifying information once the age verification is complete.","topics":["explicit_or_harmful_content","social_media"],"url":"https://capitol.tn.gov/Bills/113/Bill/SB1792.pdf"},{"country":"United States","country_code":"US","region":"Tennessee","region_code":"TN","effective_date":"January 1, 2025","enactment_status":"active","name":"Protecting Children from Social Media Act (HB 1891)","penalties":{"criminal_penalties":false,"description":"The state attorney general may conduct investigations and bring action to recover penalties.","max_fine":"The state attorney general may conduct investigations and bring action to recover penalties."},"policy_types":["age_assurance"],"resources":[{"label":"HB 1891","url":"https://legiscan.com/TN/text/SB2097/id/2996678"}],"responsible_parties":["social_media"],"summary":"This law requires minors under 18 to have express parental consent to create social media accounts. Social media platforms are required to verify the age of users and implement parental supervision tools to protect children from online content deemed harmful. Social media companies are not required to reverify the individual's age unless parental consent is revoked.","topics":["explicit_or_harmful_content","social_media"],"url":"https://legiscan.com/TN/text/SB2097/id/2996678"},{"country":"United States","country_code":"US","region":"Texas","region_code":"TX","effective_date":"January 1, 2026","enactment_status":"active","name":"App Store Accountability Act (Senate Bill 2420)","penalties":{"criminal_penalties":false,"description":"Violations of the Act constitute deceptive trade practices under Texas’s Deceptive Trade Practices-Consumer Protection Act, which permits the Texas attorney general to seek injunctive relief and im…","max_fine":"Violations of the Act constitute deceptive trade practices under Texas’s Deceptive Trade Practices-Consumer Protection Act, which permits the Texas attorney general to seek injunctive relief and impose civil penalties, and also allows for consumer remedies."},"policy_types":["age_assurance"],"resources":[{"label":"SB 2420","url":"https://capitol.texas.gov/BillLookup/history.aspx?LegSess=89R&Bill=SB2420"},{"label":"Texas Attorney General: Fifth Circuit stay allows SB 2420 enforcement","url":"https://www.texasattorneygeneral.gov/news/releases/attorney-general-ken-paxton-secures-major-victory-protecting-children-online-requiring-age"}],"responsible_parties":["app_developers","app_stores"],"summary":"This bill requires app store operators to verify the age category of all users and classify them as children (under 13), younger teens (13 - 16), older teens (16 - 18), or adults. For users under 18, the bill requires app stores to link the minor's account to a verified parent account. App stores must obtain parental consent for every app download, purchase, or in-app transaction made by a minor. Software developers must also assign age ratings to their apps, implement age verification systems that use age category from app store and other required information to verify user age, and notify app stores of any significant changes to their privacy policies. The law also imposes data protection standards that limit the collection of personal data to the minimum necessary for age verification. Industry-standard encryption to transmit personal data is also required. This bill was signed into law and initially blocked by a federal judge in December 2025, but the U.S. Court of Appeals for the Fifth Circuit stayed that injunction, allowing enforcement to begin on June 4, 2026 while the First Amendment challenge continues on appeal.","topics":["age_verification","app_stores","explicit_or_harmful_content"],"url":"https://capitol.texas.gov/BillLookup/history.aspx?LegSess=89R&Bill=SB2420"},{"country":"United States","country_code":"US","region":"Texas","region_code":"TX","effective_date":"September 1, 2023","enactment_status":"active","name":"HB 1181","penalties":{"criminal_penalties":false,"description":"Failure to verify age may result in fines of up to $10,000 per day. If a minor is able to access harmful materials due to failure to implement age verification, an entity may incur an additional pe…","max_fine":"Failure to verify age may result in fines of up to $10,000 per day. If a minor is able to access harmful materials due to failure to implement age verification, an entity may incur an additional penalty of up to $250,000. The law also includes a penalty of $10,000 per data retention violation."},"policy_types":["age_assurance"],"resources":[{"label":"HB 1181","url":"https://legiscan.com/TX/text/HB1181/id/2819916/Texas-2023-HB1181-Enrolled.html"}],"responsible_parties":["adult_content_sites"],"summary":"Sites on which over one-third of content is deemed harmful to minors must implement reasonable age verification methods. Methods include the provision of digital identification or compliance with a commercial age verification system that uses government-issued ID or a commercially reasonable method relying on public or private transactional data. Sites may not retain any identifying information.","topics":["age_verification","app_stores","explicit_or_harmful_content"],"url":"https://legiscan.com/TX/text/HB1181/id/2819916/Texas-2023-HB1181-Enrolled.html"},{"country":"United States","country_code":"US","region":"Utah","region_code":"UT","effective_date":"May 6, 2026","enactment_status":"active","name":"SB 287 and SB 73 (VPN restrictions and adult content sites)","penalties":{"criminal_penalties":false,"description":"SB 73 adds fines to SB 0287. Fines include up to $2,500 for each age verification violation or up to $5,000 per violation if the company has also violated a court order.","max_fine":"SB 73 adds fines to SB 0287. Fines include up to $2,500 for each age verification violation or up to $5,000 per violation if the company has also violated a court order."},"policy_types":["age_assurance"],"resources":[{"label":"SB 287","url":"https://le.utah.gov/~2023/bills/static/SB0287.html"},{"label":"SB 73 amendment 2026","url":"https://le.utah.gov/Session/2026/bills/enrolled/SB0073.pdf"}],"responsible_parties":["adult_content_sites"],"summary":"Sites on which over one-third of content is deemed harmful to minors must implement reasonable age verification systems. \"Reasonable methods\" include (1) the use of a digitized information card, (2) verification through a third-party verification service that uses commercially available databases, or (3) any commercially reasonable method that relies on transactional data. As of May 2026, amendment SB 73 prohibits adult content sites from facilitating or encouraging the use of VPNs to circumvent age verification requirements. Sites may not provide instructions on how to use a VPN to access the site or means for users in Utah to circumvent geo-blocking. The law specifies that a user is considered to be accessing a website from Utah if they are physically located in the state, regardless of whether they are using a VPN to mask their location.","topics":["app_stores","explicit_or_harmful_content"],"url":"https://le.utah.gov/~2023/bills/static/SB0287.html"},{"country":"United States","country_code":"US","region":"Utah","region_code":"UT","effective_date":"May 6, 2027","enactment_status":"in_progress","name":"App Store Accountability Act (SB 142) and Amendments (HB 498)","penalties":{"criminal_penalties":false,"description":"Utah states that a violation of this law constitutes a deceptive trade practice. Minors and their parents can sue app stores or developers for violations ($1,000 per violation or more in damages).…","max_fine":"Utah states that a violation of this law constitutes a deceptive trade practice. Minors and their parents can sue app stores or developers for violations ($1,000 per violation or more in damages). The law includes a \"safe harbor\" clause shielding app developers (but not app stores) from liability if they can show they complied properly with the app store's age verification system."},"policy_types":["age_assurance"],"resources":[{"label":"SB 142: App Store Accountability Act","url":"https://le.utah.gov/~2025/bills/static/SB0142.html"},{"label":"HB 498 Utah App Store Accountability Act Amendments","url":"https://le.utah.gov/~2026/bills/static/HB0498.html"},{"label":"Utah enacts app store accountability act","url":"https://www.insideprivacy.com/united-states/state-legislatures/utah-enacts-app-store-accountability-act/"}],"responsible_parties":["app_developers","app_stores"],"summary":"Utah's App Store Accountability Act requires app store providers to conduct age verification on all users located in the state at the time of account creation. If a user is under 18, app store providers must require the account to be affiliated with a parent account and obtain parental consent for a minor to download or purchase apps and make in-app purchases. The law also mandates that developers must verify through the app store's data sharing methods the age category of users and whether parental consent has been obtained. The Act also includes data safeguards on age verification data. To account for constitutional claims against SB 142, Utah passed an amendment to the Act (HB 498). These amendments extend age verification and parental consent obligations to cover browsers, search engines, and messaging apps bundled onto devices at purchase. The amendments also streamline age verification by requiring \"commercially available methods reasonably designed to ensure accuracy.\" HB 498, enacted March 18, 2026, also delayed the Act's effective date by one year to May 6, 2027 and removed the Attorney General's enforcement authority, leaving only a private right of action for injured minors and their parents.","topics":["app_stores","explicit_or_harmful_content"],"url":"https://le.utah.gov/~2025/bills/static/SB0142.html"},{"country":"United States","country_code":"US","region":"Virginia","region_code":"VA","effective_date":"July 1, 2023","enactment_status":"active","name":"SB 1515","penalties":{"criminal_penalties":false,"description":"Violators are subject to civil liability for damages","max_fine":"Violators are subject to civil liability for damages"},"policy_types":["age_assurance"],"resources":[{"label":"S 1515","url":"https://legiscan.com/VA/text/SB1515/id/2729908/Virginia-2023-SB1515-Enrolled.html"}],"responsible_parties":["adult_content_sites"],"summary":"Sites on which over one-third of content is deemed harmful to minors must implement age verification via (1) a commercially available database or (2) another reasonable method of age and identity verification.","topics":["explicit_or_harmful_content","social_media"],"url":"https://legiscan.com/VA/text/SB1515/id/2729908/Virginia-2023-SB1515-Enrolled.html"},{"country":"United States","country_code":"US","region":"Virginia","region_code":"VA","effective_date":"January 2026","enactment_status":"blocked","name":"SB 854, amendment to the Virginia Consumer Data Protection Act","penalties":{"criminal_penalties":false,"description":"Violators subject to fines per violation under the Virginia Consumer Protection Act.","max_fine":"Violators subject to fines per violation under the Virginia Consumer Protection Act."},"policy_types":["age_assurance"],"resources":[{"label":"SB 584","url":"https://lis.virginia.gov/bill-details/20251/SB854/text/SB854ER"}],"responsible_parties":["social_media"],"summary":"Social media paltforms must use commercially reasonable methods to screen for whether a user is younger than 16 years of age. If they are under 16, the user must be limited to one hour per day (for the platform), with an option for a verified parent to give consent to increase or decrease the daily time limit. Platforms may not use personal data for any other purpose other than age verification. In February 2026, a federal judge issued an injunction to block enforcement of the law.","topics":["explicit_or_harmful_content","social_media"],"url":"https://lis.virginia.gov/bill-details/20251/SB854/text/SB854ER"},{"country":"United States","country_code":"US","region":"Vermont","region_code":"VT","effective_date":"January 1, 2027","enactment_status":"in_progress","name":"Act 63","penalties":{"criminal_penalties":false,"description":"Violators will be penalized under the Vermont Consumer Protection Act","max_fine":"Violators will be penalized under the Vermont Consumer Protection Act"},"policy_types":["age_assurance"],"resources":[{"label":"No. 63 Summary of Act No. 63","url":"https://legislature.vermont.gov/Documents/2026/Docs/ACTS/ACT063/ACT063%20Act%20Summary.pdf"}],"responsible_parties":["app_developers","online_services"],"summary":"This act creates the Vermont age-appropriate design code, which requires covered businesses to protect minors from certain harms when processing the data of minors and when its digital products are used by minors. The act requires covered businesses to have the default privacy setting of its digital products set to the highest level of privacy when used by a minor. The law authorizes the Vermont Attorney General to issue rules, including guidance on privacy-preserving ways for businesses to estimate users’ ages and identify potentially harmful design practices.","topics":["age_appropriate_design"],"url":"https://legislature.vermont.gov/Documents/2026/Docs/ACTS/ACT063/ACT063%20As%20Enacted.pdf"},{"country":"United States","country_code":"US","region":"Washington","region_code":"WA","effective_date":"January 1, 2027","enactment_status":"in_progress","name":"AI chatbot law","penalties":{"criminal_penalties":false,"description":"Violations constitute unfair or deceptive acts under Washington's Consumer Protection Act.","max_fine":"Violations constitute unfair or deceptive acts under Washington's Consumer Protection Act."},"policy_types":["age_assurance"],"resources":[{"label":"HB 2225","url":"https://app.leg.wa.gov/billsummary?Year=2025&BillNumber=2225"}],"responsible_parties":["online_services"],"summary":"This law implements AI safeguards for minors, including recurring disclosures that the chatbot is artificial and not human, with hourly disclosures when the operator knows the user is a minor or the chatbot is directed to minors. Operators must implement reasonable measures to prevent manipulative engagement techniques and maintain protocols to detect or respond to suicidal ideation or self harm.","topics":["ai"],"url":"https://app.leg.wa.gov/billsummary?Year=2025&BillNumber=2225"},{"country":"United States","country_code":"US","region":"West Virginia","region_code":"WV","effective_date":"June 12, 2026","enactment_status":"active","name":"Child Online Protection and Liability Act (HB 4412)","penalties":{"criminal_penalties":false,"description":"Violators may incur $10,000 per violation or per day for certain violations, plus additional civil penalties up to $250,000 when minors access covered material.","max_fine":"Violators may incur $10,000 per violation or per day for certain violations, plus additional civil penalties up to $250,000 when minors access covered material."},"policy_types":["age_assurance"],"resources":[{"label":"HB 4412","url":"https://legiscan.com/WV/text/HB4412/id/3397968"}],"responsible_parties":["adult_content_sites"],"summary":"Websites that distribute explicit material deemed harmful to minors must implement strict age verification protocols to ensure a user is over 18 using any commercially reasonable method. Companies must not retain any identifying information after the user has been granted access to the material. Data cannot be used for any purpose apart from verification.","topics":["explicit_or_harmful_content"],"url":"https://legiscan.com/WV/text/HB4412/id/3397968"},{"country":"United States","country_code":"US","region":"Wyoming","region_code":"WY","effective_date":"July 1, 2025","enactment_status":"active","name":"HB 43","penalties":{"criminal_penalties":false,"description":"Penalties of up to $5,000 per violation.","max_fine":"Penalties of up to $5,000 per violation."},"policy_types":["age_assurance"],"resources":[{"label":"HB 43","url":"https://www.wyoleg.gov/Legislation/2025/HB0043"}],"responsible_parties":["adult_content_sites"],"summary":"Wyoming's adult content law does not establish a percentage threshold for the amount of adult content required. The law applies to any entity or site that creates, hosts, or makes available content deemed harmful to minors, regardless of the proportion. Reasonable age verification measures include a state driver's license or ID card, a valid US passport or military card, a tribal identification card, a credit or debit card, or any other method that \"reliably and accurately\" can determine whether a user is a minor. Sites may not retain identifying information.","topics":["explicit_or_harmful_content"],"url":"https://www.wyoleg.gov/Legislation/2025/HB0043"},{"country":"United Arab Emirates","country_code":"AE","effective_date":"January 1, 2026","enactment_status":"active","name":"Child Digital Safety Law","penalties":{"criminal_penalties":false,"description":"Repeated violations will incur fines and suspension of authorization in the UAE.","max_fine":"Repeated violations will incur fines and suspension of authorization in the UAE."},"policy_types":["age_assurance","data_protection"],"resources":[{"label":"Federal decree by law No. 26 of 2025 regarding child digital safety UAE issues new Child Digital Safety law","url":"https://www.bakermckenzie.com/en/insight/publications/2026/01/uae-issues-new-child-digital-safety-law"}],"responsible_parties":["internet_service_providers","online_services"],"summary":"The UAE's Child Digital Safety Law mandates that platforms cannot collect or share personal data for children under 13 without parental consent. Article 8 outlines an age verification provision and states that digital platforms are required to adopt \"effective and reasonable age-verification mechanisms, standards, and procedures.\" Platforms must also implement tools to block or filter harmful content, set daily usage limits, and implement privacy by default for children's accounts.","topics":["age_verification","online_services","social_media"],"url":"https://uaelegislation.gov.ae/en/legislations/3912"},{"country":"United Arab Emirates","country_code":"AE","effective_date":"June 2026","enactment_status":"active","name":"Social media ban","penalties":{"criminal_penalties":false,"description":"Administrative sanctions including warnings, closure, partial blocking, or total blocking.","max_fine":"Administrative sanctions including warnings, closure, partial blocking, or total blocking."},"policy_types":["age_assurance"],"resources":[{"label":"Cabinet Resolution No. 106 of 2026","url":"https://uaelegislation.gov.ae/en/legislations/4506/download"}],"responsible_parties":["social_media"],"summary":"In June 2026, the UAE prohibited children under 15 from creating or using social media accounts. Platforms can allow teens aged 15 and 16 only if enhanced online safety measures are enacted, including age-appropriate content controls and restrictions on stranger interactions. Platforms must disable accounts created by children under 15, must prevent users from circumventing age verification systems, and must not use children's personal data for behavioral profiling or advertising. Article 4 includes specific age verification provisions and mandates that age assurance systems achieve a high level of accuracy, that they comply with data minimization principles, that they shall not result in unjustified discrimination, and that data may only be used for age verification purposes. Methods may include digital government ID, age estimation technologies, or any other mechanisms approved by the Child Digital Safety Council. Social media companies will have 12 months from June 2026 to comply with these new rules.","topics":["age_verification","online_services","social_media"],"url":"https://uaelegislation.gov.ae/en/legislations/4506/download"},{"country":"Argentina","country_code":"AR","enactment_status":"proposed","name":"Comprehensive Digital Protection Law for Children and Adolescents","penalties":{"criminal_penalties":false,"description":"Companies can be fined up to 4% of their total global annual revenue.","max_fine":"Companies can be fined up to 4% of their total global annual revenue."},"policy_types":["age_assurance"],"resources":[{"label":"LEY INTEGRAL DE PROTECCIÓN DIGITAL DE NIÑOS, NIÑAS Y ADOLESCENTES","url":"https://www4.hcdn.gob.ar/dependencias/dsecretaria/Periodo2025/PDF2025/TP2025/4691-D-2025.pdf"}],"responsible_parties":["online_services","social_media"],"summary":"This legislation would prohibit under-14s from creating social media accounts. It would require verifiable parental consent for adolescents between the ages of 14 and 16. It would also mandate that digital platforms implement robust age verification systems with methods that are least intrusive to privacy while being technically feasible. It lists age verification methods in order of priority, which include: 1. Verification via Argentina's digital identity system 2. Verification via third parties that certify age without sharing personal data with the platform 3. Other methods such as age estimation provided that biometric data are processed instantaneously and deleted immediately, without being stored or shared.","topics":["online_services","social_media"],"url":"https://www4.hcdn.gob.ar/dependencias/dsecretaria/Periodo2025/PDF2025/TP2025/4691-D-2025.pdf"},{"country":"Argentina","country_code":"AR","enactment_status":"proposed","name":"Protection of Personal Data (Law 25.326)","penalties":{"criminal_penalties":false,"description":"The bill does not outline new or specific penalties.","max_fine":"The bill does not outline new or specific penalties."},"policy_types":["data_protection"],"resources":[{"label":"Law 25.326","url":"https://servicios.infoleg.gob.ar/infolegInternet/anexos/60000-64999/64790/texact.htm"},{"label":"Modificiations to Law No. 25.326","url":"https://rest.hcdn.gob.ar/web/tramites-parlamentarios/render/adjunto/691c787d26b56.pdf"}],"responsible_parties":["online_services"],"summary":"Argentina is considering changes to its core data protection law. This would allow minors to demand the deletion of their personal data from the internet and establishes that at age 14, adolescents can provide their own valid consent for the processing of their personal data. It prohibits the massive or indiscriminate collection of sensitive data from minors.","topics":["online_services","social_media"],"url":"https://rest.hcdn.gob.ar/web/tramites-parlamentarios/render/adjunto/691c787d26b56.pdf"},{"country":"Austria","country_code":"AT","effective_date":"August 2021","enactment_status":"active","name":"Audiovisual Media Services Act (AMD-G)","penalties":{"criminal_penalties":false,"description":"Minor violations will incur fines up to €8,000. Repeat violations may incur fines up to €40,000.","max_fine":"Minor violations will incur fines up to €8,000. Repeat violations may incur fines up to €40,000."},"policy_types":["age_assurance"],"resources":[{"label":"Joint guidelines for the protection of minors in audiovisual content from Austria","url":"https://www.jugendmedienschutz.at/verhaltensrichtlinien/"},{"label":"Audiovisual Media Services Act","url":"http://google.com/url?q=https://www.ris.bka.gv.at/geltendefassung.wxe?abfrage%3Dbundesnormen%26gesetzesnummer%3D20001412&sa=D&source=editors&ust=1774049341470528&usg=AOvVaw0BH8rWfS0dPVJD5Y6pdL4J"}],"responsible_parties":["video_platforms"],"summary":"These guidelines aim to establish a uniform system for the protection of minors from potentially harmful content in audiovisual services (broadcasting, on-demand services). The law states that any content that could impair the development of minors must be restricted. The law includes age verification for content deemed explicit or \"seriously harmful.\" It also states that companies can use an access control system to make access to harmful content dependent on the entry of a code (password, PIN, or similar) which is only available to adult users. The law also states that media providers are required to assess content before making it available, with content categorized into specific age labels ranging from 18+, 16+, 12+, 6+, and all ages.","topics":["explicit_or_harmful_content","social_media"],"url":"https://www.ris.bka.gv.at/geltendefassung.wxe?abfrage=bundesnormen&gesetzesnummer=20001412"},{"country":"Austria","country_code":"AT","enactment_status":"proposed","name":"Social media ban for children under 14: AMD-G Proposed Amendment","penalties":{"criminal_penalties":false,"description":"Very large platforms may incur fines of up to 6% of worldwide annual turnover for violations.","max_fine":"Very large platforms may incur fines of up to 6% of worldwide annual turnover for violations."},"policy_types":["age_assurance"],"resources":[{"label":"Audiovisual Media Services Act, KommAustria Act, Amendment","url":"https://www.parlament.gv.at/gegenstand/XXVIII/ME/132"},{"label":"Press release: Federal Government sets minimum age for social media","url":"https://www.bundeskanzleramt.gv.at/bundeskanzleramt/nachrichten-der-bundesregierung/2026/03/bundesregierung-setzt-mindestalter-fuer-social-media-fest.html"}],"responsible_parties":["social_media","video_platforms"],"summary":"Austria is drafting legislation to restrict under-14 access to algorithm-based video-sharing and social media platforms with specified addictive features. The proposal would require privacy-preserving age verification and excludes messenger services and child-friendly areas.","topics":["explicit_or_harmful_content","social_media"],"url":"https://www.parlament.gv.at/gegenstand/XXVIII/ME/132"},{"country":"Australia","country_code":"AU","effective_date":"December 2025","enactment_status":"active","name":"Online Safety Amendment (Social Media Minimum Age) Bill","penalties":{"criminal_penalties":false,"description":"The eSafety Commissioner can fine companies up to $49.5 million AUD for failing to take reasonable steps to prevent people under the age of 16 from creating or continuing to hold accounts.","max_fine":"The eSafety Commissioner can fine companies up to $49.5 million AUD for failing to take reasonable steps to prevent people under the age of 16 from creating or continuing to hold accounts."},"policy_types":["age_assurance"],"resources":[{"label":"Online Safety Amendment (Social Media Minimum Age) Bill 2024","url":"https://parlinfo.aph.gov.au/parlInfo/download/legislation/bills/r7284_aspassed/toc_pdf/24150b01.pdf;fileType=application%2Fpdf#search=%22legislation/bills/r7284_aspassed/0000%22"},{"label":"Australia eSafety Commissioner: Social media age restrictions","url":"http://google.com/url?q=https://www.esafety.gov.au/about-us/industry-regulation/social-media-age-restrictions&sa=D&source=editors&ust=1774049168734684&usg=AOvVaw0zT2lJw-3Rj71R2JR9VjbE"},{"label":"eSafety Commissioner: Regulatory guidance","url":"https://www.esafety.gov.au/industry/regulatory-guidance#social-media-minimum-age"},{"label":"March 2026 Amendment","url":"https://www.legislation.gov.au/F2026L00370/asmade/text"}],"responsible_parties":["online_gaming","social_media"],"summary":"Social media platforms in Australia must take reasonable steps to prevent Australians under the age of 16 from creating or keeping accounts. This rule applies to any service that meets the following conditions: 1. If the sole purpose, or a significant purpose, of the service is to enable online social interaction between two or more end-users 2. If the service allows end-users to link to, or interact with, some or all of the other end-users 3. If the service allows end-users to post material on the service. Platforms are responsible for implementing age assurance methods. Self-declaration is explicitly not sufficient. Acceptable methods include age verification, age estimation, or age inference and the law is technology-neutral. Data collected for age assurance purposes must be destroyed after use.","topics":["data_privacy","explicit_or_harmful_content","social_media"],"url":"https://parlinfo.aph.gov.au/parlInfo/download/legislation/bills/r7284_aspassed/toc_pdf/24150b01.pdf;fileType=application%2Fpdf#search=%22legislation/bills/r7284_aspassed/0000%22"},{"country":"Australia","country_code":"AU","effective_date":"December 2025","enactment_status":"active","name":"Online Safety Codes and Standards","penalties":{"criminal_penalties":false,"description":"Breach of an industry code can result in fines up to AUD $49.5 million","max_fine":"Breach of an industry code can result in fines up to AUD $49.5 million"},"policy_types":["age_assurance"],"resources":[{"label":"Online Safety Codes and Standards","url":"https://www.esafety.gov.au/industry/codes"}],"responsible_parties":["online_services"],"summary":"The Online Safety Codes and Standards were developed in two phases: 1. Unlawful Material Codes and Standards. This includes six codes and two standards to address 'class 1A' and 'class 1B' online material, which cover the most harmful online content (e.g. pro-terror or child exploitation material). The codes apply to all social media services, app distribution services, hosting services, search, and other online services. 2. Age-Restricted Material Codes. Phase 2 is designed to reduce children's exposure to age-inappropriate content. App stores: App stores must take appopriate steps to block downloads of apps rated R18+ AI chatbots: Chatbots must prevent minors from generating sexually explicit, violent, or self-harm material Messaging: Users may be asked to verify their age on adult messaging services that specialize in distributing pornography or self-harm material Online gaming: Users must complete age assurance to access games rated R18+ Adult content sites: Users must confirm their age when accessing age-restricted material. Self-declaration is not sufficient. Search engines: Search results containing pornography and violence will be blurred by default for users not logged into an account Social media: Sites that allow pornography and self-harm material must ensure users are over 18 before giving them access. The Online Safety Codes will have a phased rollout of December 2025 for search, hosting, and internet carriage, March 9, 2026 for social media, messaging, and gaming, and September 9 for age assurance measures for app stores.","topics":["data_privacy","explicit_or_harmful_content","social_media"],"url":"https://www.esafety.gov.au/industry/codes"},{"country":"Australia","country_code":"AU","effective_date":"December 10, 2026","enactment_status":"in_progress","name":"Children's Online Privacy Code","penalties":{"criminal_penalties":false,"description":"Entities that fail to comply with the Code will be subject to the same regulatory and penalty framework that applies to other privacy breaches in Australia, including civil penalties.","max_fine":"Entities that fail to comply with the Code will be subject to the same regulatory and penalty framework that applies to other privacy breaches in Australia, including civil penalties."},"policy_types":["data_protection"],"resources":[{"label":"Children's Online Privacy Code","url":"https://www.oaic.gov.au/privacy/privacy-registers/privacy-codes/childrens-online-privacy-code"}],"responsible_parties":["social_media"],"summary":"The Office of the Australian Information Commissioner (OAIC) is developing a Children's Online Privacy Code to enhance privacy protections for minors (i.e., those under 18). The code is expected to be finalized by December 2026.","topics":["data_privacy","explicit_or_harmful_content","social_media"],"url":"https://www.oaic.gov.au/privacy/privacy-registers/privacy-codes/childrens-online-privacy-code"},{"country":"Bangladesh","country_code":"BD","effective_date":"November 6, 2025","enactment_status":"active","name":"Personal Data Protection Act 2026","penalties":{"criminal_penalties":false,"description":"Child-data consent violations may incur fines up to BDT 500,000; broader non-compliance may incur administrative fines up to BDT 5 million.","max_fine":"Child-data consent violations may incur fines up to BDT 500,000; broader non-compliance may incur administrative fines up to BDT 5 million."},"policy_types":["age_assurance","data_protection"],"resources":[{"label":"Bangladesh Personal Data Protection Act, 2026","url":"http://bdlaws.minlaw.gov.bd/act-1692.html"}],"responsible_parties":["online_services"],"summary":"Bangladesh's comprehensive data protection law includes key provisions for children. Verifiable parental or guardian consent is required before processing children's personal data, and the law defines children as people under 18. Consent for a child's data remains valid until the child turns 18.","topics":["data_privacy"],"url":"http://bdlaws.minlaw.gov.bd/act-1692.html"},{"country":"Belgium","country_code":"BE","enactment_status":"proposed","name":"Social media minimum age bill","penalties":{"criminal_penalties":false,"description":"Violators are subject to fines under the DSA Article 52 sanctions framework (up to 6% of global annual turnover for non-compliance; up to 1% for information/inspection violations; periodic payments…","max_fine":"Violators are subject to fines under the DSA Article 52 sanctions framework (up to 6% of global annual turnover for non-compliance; up to 1% for information/inspection violations; periodic payments up to 5% of average daily turnover for non-compliance with orders)."},"policy_types":["age_assurance"],"resources":[{"label":"Flemish Media Decree","url":"https://themis.vlaanderen.be/files/27269db0-2f74-11f1-b668-a33ddcd6343c/download?name=VR%202026%200304%20DOC.0350-3%20Toegangsbeperking%20tussenhandeldiensten%20-%20MvT%20TER.pdf&content-disposition=inline"}],"responsible_parties":["social_media","video_platforms"],"summary":"This proposal is a Flemish regional initiative, not a national mandate. In April 2026, the Government of Flanders approved a draft decree that would prohibit under 13s from accessing social media platforms. Platforms would be responsible for implementing age control systems that are \"appropriate and effective.\" Systems must meet the requirements of the Digital Services Act. This measure would apply to users located in Flanders and the Brussels-Capital region. This has not yet been formally enacted into law.","topics":["social_media"],"url":"https://themis.vlaanderen.be/files/27269db0-2f74-11f1-b668-a33ddcd6343c/download?name=VR%202026%200304%20DOC.0350-3%20Toegangsbeperking%20tussenhandeldiensten%20-%20MvT%20TER.pdf&content-disposition=inline"},{"country":"Bulgaria","country_code":"BG","enactment_status":"proposed","name":"Bill No. 52-654-01-84: Social media restriction for under-16s","penalties":{"criminal_penalties":false,"description":"Proposed sanctions include fines of €100,000 for individuals and property sanctions of €150,000 for legal entities, increasing for repeat violations.","max_fine":"Proposed sanctions include fines of €100,000 for individuals and property sanctions of €150,000 for legal entities, increasing for repeat violations."},"policy_types":["age_assurance"],"resources":[{"label":"Bill No. 52-654-01-84","url":"https://www.parliament.bg/pub/plenary_documents/52-654-01-84_.pdf"}],"responsible_parties":["social_media","video_platforms"],"summary":"This proposed bill would prohibit children under 16 from creating, registering, holding, or managing public or partially public social media and video-sharing profiles. It would establish a national Digital Wallet application to support age verification.","topics":["social_media"],"url":"https://www.parliament.bg/pub/plenary_documents/52-654-01-84_.pdf"},{"country":"Brazil","country_code":"BR","effective_date":"March 17, 2026","enactment_status":"active","name":"Digital Statute of the Child and Adolescent (Digital ECA)","penalties":{"criminal_penalties":false,"description":"Penalties may include warnings, fines up to 50 million reais or 10% of the economic group's revenue in Brazil, temporary suspension of activities, or prohibition from exercising activities.","max_fine":"Penalties may include warnings, fines up to 50 million reais or 10% of the economic group's revenue in Brazil, temporary suspension of activities, or prohibition from exercising activities."},"policy_types":["age_assurance"],"resources":[{"label":"Brazil Digital ECA Law","url":"https://www.planalto.gov.br/ccivil_03/_ato2023-2026/2025/lei/L15211.htm"},{"label":"Future of Privacy Forum: Brazil's Digital ECA","url":"https://fpf.org/wp-content/uploads/2025/12/Issue-Brief-Brazils-Digital-ECA.pdf"},{"label":"From Persona: The Digital ECA: Important context for Brazil's age assurance regulation","url":"https://withpersona.com/blog/brazil-digital-eca-age-assurance-regulation"},{"label":"Technology Radar No. 5 - Age Assurance Mechanisms","url":"https://www.gov.br/anpd/pt-br/centrais-de-conteudo/documentos-tecnicos-orientativos/radar-tecnologico-5-mecanismos-de-afericao-de-idade-em-lingua-inglesa.pdf/view"},{"label":"ECA Digital: Preliminary Guidelines and Implementation Timeline","url":"https://www.gov.br/anpd/pt-br/assuntos/eca-digital/eca-digital"},{"label":"Q&A for the Digital ECA","url":"https://www.gov.br/anpd/pt-br/assuntos/eca-digital/perguntas_respostas_eca_digital_18032026.pdf/view"}],"responsible_parties":["app_stores","social_media"],"summary":"The Digital ECA protects children's online safety and privacy. The law requires digital service providers to prioritize full and special protection of children. The ECA mandates that platforms design for child safety by default, inform users about age classification policies, implement parental controls, provide systems to prevent children from encountering harmful content, prevent compulsive use of their services by children, and conduct ongoing risk assessments of their systems. Users under 16 must link their accounts to a legal parent or guardian. Parents and guardians must consent to interaction functionalities (e.g., chat) for children in games. Platforms with over one million users under 18 in Brazil must publish semiannual transparency reports. The ECA bans self-declaration as an age assurance mechanism. Providers must establish secure age verification systems to prevent children from accessing inappropriate or harmful content. The ECA explicitly prohibits loot boxes for children, behavioral advertising profiling for children, and emotional and psychological manipulation of children. The ECA is rolling out in phases. The first phase prioritizes app stores and operating systems. The second phase, scheduled for August 2026, will monitor other sectors to be defined based on information gathered in the first phase.","topics":["online_services"],"url":"https://www.planalto.gov.br/ccivil_03/_ato2023-2026/2025/lei/L15211.htm"},{"country":"Brazil","country_code":"BR","effective_date":"September 18, 2020","enactment_status":"active","name":"Lei Geral de Proteção de Dados (LGPD)","penalties":{"criminal_penalties":false,"description":"Fines can reach up to 2% of a company's revenue in Brazil, with a maximum of R$50 million.","max_fine":"Fines can reach up to 2% of a company's revenue in Brazil, with a maximum of R$50 million."},"policy_types":["data_protection"],"resources":[{"label":"Brazilian Data Protection Law LGPD","url":"https://www.gov.br/anpd/pt-br/centrais-de-conteudo/outros-documentos-e-publicacoes-institucionais/lgpd-en-lei-no-13-709-capa.pdf"}],"responsible_parties":["online_services"],"summary":"The LGPD is Brazil's data protection and privacy law, similar to the European Union's GDPR. It establishes a legal framework for how personal information is collected, stored, and shared. It requires organizations to maintain high transparency and security standards while granting individuals specific rights over their data. The law is enforced through the National Data Protection Agency (ANPD).","topics":["online_services"],"url":"https://www.gov.br/anpd/pt-br/centrais-de-conteudo/outros-documentos-e-publicacoes-institucionais/lgpd-en-lei-no-13-709-capa.pdf"},{"country":"Brazil","country_code":"BR","effective_date":"March 18, 2026","enactment_status":"active","name":"Decree No. 12.880","penalties":{"criminal_penalties":false,"description":"Violators are subject to penalties under Article 35 of Law 15.211/2025.","max_fine":"Violators are subject to penalties under Article 35 of Law 15.211/2025."},"policy_types":["age_assurance"],"resources":[{"label":"Decree No. 12.880","url":"https://www2.camara.leg.br/legin/fed/decret/2026/decreto-12880-18-marco-2026-798813-publicacaooriginal-178481-pe.html"}],"responsible_parties":["online_services"],"summary":"This decree complements the Digital ECA and operationalizes the law. It establishes the National Policy for the Promotion and Protection of the Rights of Children and Adolescents in the Digital Environment. Providers of products or services that offer content prohibited for children (alcohol, gambling, loot boxes, adult content) must implement effective age verification mechanisms. Self-declaration is explicitly prohibited. Key sections include Article 9, which requires providers to implement mechanisms to prevent excessive, problematic, or compulsive use of their platforms by children. Article 21 requires app stores and operating systems to prevent the availability of products or services to children that promote loot boxes or lotteries of any kind. App stores must provide age signals to app providers. Article 23 requires electronic game providers with loot boxes to verify the age of users to prevent access by children and adolescents. The decree sets standards for age verification mechanisms, including proportionality, data minimization, inclusion, and privacy by design.","topics":["online_services"],"url":"https://www2.camara.leg.br/legin/fed/decret/2026/decreto-12880-18-marco-2026-798813-publicacaooriginal-178481-pe.html"},{"country":"Canada","country_code":"CA","effective_date":"2004","enactment_status":"active","name":"Personal Information Protection and Electronic Documents Act (PIPEDA)","penalties":{"criminal_penalties":false,"description":"Fines up to $100,000 CAD per violation","max_fine":"Fines up to $100,000 CAD per violation"},"policy_types":["data_protection"],"resources":[{"label":"PIPEDA requirements in brief","url":"https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/pipeda_brief/"},{"label":"PIPEDA legislation","url":"https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/r_o_p/"}],"responsible_parties":["data_controllers"],"summary":"PIPEDA is Canada's primary data protection law. It requires parental consent for companies to collect personal information for children under 13 and ensures privacy by default for minors.","topics":["age_verification","chatbots","explicit_or_harmful_content","online_services","social_media"],"url":"https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/r_o_p/"},{"country":"Canada","country_code":"CA","enactment_status":"proposed","name":"Bill S-209 (Protecting Young Persons from Exposure to Pornography Act)","penalties":{"criminal_penalties":false,"description":"First offense may incur penalties up to $250,000","max_fine":"First offense may incur penalties up to $250,000"},"policy_types":["age_assurance"],"resources":[{"label":"S. 209","url":"https://www.parl.ca/legisinfo/en/bill/45-1/s-209"}],"responsible_parties":["internet_service_providers","online_services"],"summary":"If enacted, this bill would introduce a federal framework requiring organizations—including internet service providers and digital platforms—to prevent individuals under 18 from accessing pornographic content online. While it does not prescribe a specific age assurance method, it creates strong incentives to implement age verification or estimation, as doing so is necessary to establish a legal defense against liability.","topics":["age_verification","chatbots","explicit_or_harmful_content","online_services","social_media"],"url":"https://www.parl.ca/legisinfo/en/bill/45-1/s-209"},{"country":"Canada","country_code":"CA","enactment_status":"proposed","name":"Bill C-34 (Safe Social Media Act)","penalties":{"criminal_penalties":false,"description":"Administrative monetary penalties may reach the greater of $10 million and 3% of a company's gross global revenue.","max_fine":"Administrative monetary penalties may reach the greater of $10 million and 3% of a company's gross global revenue."},"policy_types":["age_assurance"],"resources":[{"label":"Bill C-34, Digital Safety Act","url":"https://www.parl.ca/DocumentViewer/en/45-1/bill/C-34/first-reading"}],"responsible_parties":["online_services","social_media"],"summary":"Canada's proposed Safe Social Media Act would enact two new statutes: The Digital Safety Act and the Digital Safety Commission of Canada Act. It includes a ban on social media for minors under 16 and requires platforms to implement effective age assurance measures. The draft bill regulates social media and chatbot services with an additional catch-all category for online services that pose \"significant risk of harm to children.\" Adult content providers must also implement age assurance measures to prevent minors from accessing harmful content. The bill would create a new regulatory body with enforcement power. The bill does not specify any age assurance methods, but states that an age verification tool be effective, that it cannot use collected information for any purpose other than verifying age, and that it must be immediately destroyed once verification is complete. Notably, the bill expressly excludes private messaging features.","topics":["age_verification","chatbots","explicit_or_harmful_content","online_services","social_media"],"url":"https://www.parl.ca/DocumentViewer/en/45-1/bill/C-34/first-reading"},{"country":"Switzerland","country_code":"CH","effective_date":"January 2025","enactment_status":"active","name":"Federal Act on the Protection of Minors in the Area of Films and Video Games (JSFVG),","penalties":{"criminal_penalties":false,"description":"Fines up to 40,000 CHF","max_fine":"Fines up to 40,000 CHF"},"policy_types":["age_assurance"],"resources":[{"label":"JSFVG","url":"https://www.fedlex.admin.ch/eli/cc/2024/331/de"}],"responsible_parties":["online_gaming","online_services","video_platforms"],"summary":"The JSFVG requires age classification and age verification controls for films and video games across film, retail, online distribution, and on-demand platforms through a co-regulation system that requires industry associations to develop their own protection standards. These standards will then be reviewed by the federal government and applied to the entire sector. Partial implementation went into effective January 2025 and full implementation is still pending.","topics":["explicit_or_harmful_content","gaming"],"url":"https://www.pxl-vision.com/en/glossary/jsfvg"},{"country":"Chile","country_code":"CL","enactment_status":"proposed","name":"Bulletin 17.624-19","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Boletin 17.624-19","url":"https://obtienearchivo.bcn.cl/obtienearchivo?id=recursoslegales/10221.3/79878/12/Bol17624-19_20250630.pdf#:~:text=La%20presente%20ley%20tiene%20por%20objeto%20regular,afectaci%C3%B3n%20emocional%2C%20fortaleciendo%20as%C3%AD%20la%20salud%20mental"}],"responsible_parties":["online_services","social_media"],"summary":"This proposed law would regulate the content that digital service platforms deliver to children and adolescents and prohibit children under 14 from using social media accounts. A key goal of these rules is to prevent social media addiction and protect children's emotional wellbeing. The legislation targets \"addictive content\" and \"retention methods.\" Article 5 states that operators must implement an age verification system that enables the reliable determination of its user's ages.","topics":["online_services","social_media"],"url":"https://obtienearchivo.bcn.cl/obtienearchivo?id=recursoslegales/10221.3/79878/12/Bol17624-19_20250630.pdf#:~:text=La%20presente%20ley%20tiene%20por%20objeto%20regular,afectaci%C3%B3n%20emocional%2C%20fortaleciendo%20as%C3%AD%20la%20salud%20mental"},{"country":"Chile","country_code":"CL","enactment_status":"proposed","name":"Bulletin 18090-19","penalties":{"criminal_penalties":false,"description":"The proposed legislation states that digital service providers who fail to comply will face severe financial penalties or may be temporarily banned from operating within Chile.","max_fine":"The proposed legislation states that digital service providers who fail to comply will face severe financial penalties or may be temporarily banned from operating within Chile."},"policy_types":["age_assurance"],"resources":[{"label":"Boletin 18090-19","url":"https://tramitacion.senado.cl/appsenado/templates/tramitacion/index.php?boletin_ini=18090-19"}],"responsible_parties":["social_media"],"summary":"This proposed legislation would restrict under-16s from creating social media platforms. This law would require social media platforms to create and implement age verification systems to ensure that under-16s are not granted access.","topics":["online_services","social_media"],"url":"https://tramitacion.senado.cl/appsenado/templates/tramitacion/index.php?boletin_ini=18090-19"},{"country":"Chile","country_code":"CL","effective_date":"December 2026","enactment_status":"in_progress","name":"Ley 21.719","penalties":{"criminal_penalties":false,"description":"Penalties escalate for repeated infractions, which may be set at 2% or 4% of the company's total annual revenue, based on severity of the infraction.","max_fine":"Penalties escalate for repeated infractions, which may be set at 2% or 4% of the company's total annual revenue, based on severity of the infraction."},"policy_types":["data_protection"],"resources":[{"label":"Ley 21.719","url":"https://www.bcn.cl/leychile/navegar?idNorma=1209272"}],"responsible_parties":["online_services"],"summary":"Chile recently reformed their data protection law. It is modeled after the GDPR and establishes age-based consent thresholds. Personal data processing for children under 14 requires prior, express consent from a parent or guardian. Sensitive personal data processing, including biometric data, requires parental or guardian consent for adolescents under 16.","topics":["online_services","social_media"],"url":"https://www.bcn.cl/leychile/navegar?idNorma=1209272"},{"country":"Colombia","country_code":"CO","effective_date":"July 2025","enactment_status":"active","name":"Ley 2489 de 2025","penalties":{"criminal_penalties":false,"description":"The law does not establish specific penalties","max_fine":"The law does not establish specific penalties"},"policy_types":["age_assurance"],"resources":[{"label":"Ley 2489 de 2025 Congreso de la Republica","url":"https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=260756"}],"responsible_parties":["online_services"],"summary":"Ley 2489 is a framework for healthy digital environments for children and adolescents. It requires platforms to take steps to protect minors from online harms including harmful content, cyberbullying, and exploitation. It states that online platforms have a \"co-responsibility\" alongside parents and governments to protect minors.","topics":["explicit_or_harmful_content","online_services","social_media"],"url":"https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=260756"},{"country":"Colombia","country_code":"CO","enactment_status":"proposed","name":"Ley 074 de 2025","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Ley No 074 de 2025","url":"https://www.camara.gov.co/wp-content/uploads/2025/10/proyectos-ley/publicaciones/proyecto-33952/INFORME-DE-PONENCIA-PARA-PRIMER-DEBATE-PL-074-2025c-1.pdf"}],"responsible_parties":["social_media"],"summary":"Ley 074 is a proposed law that would restrict children under 14 from creating accounts on social media platforms. It has not yet been enacted.","topics":["explicit_or_harmful_content","online_services","social_media"],"url":"https://www.camara.gov.co/wp-content/uploads/2025/10/proyectos-ley/publicaciones/proyecto-33952/INFORME-DE-PONENCIA-PARA-PRIMER-DEBATE-PL-074-2025c-1.pdf"},{"country":"Colombia","country_code":"CO","effective_date":"2012","enactment_status":"active","name":"Ley 1581 de 2012","penalties":{"criminal_penalties":false,"description":"Penalties include fines, suspension of data processing activities, temporary or permanent shutdown.","max_fine":"Penalties include fines, suspension of data processing activities, temporary or permanent shutdown."},"policy_types":["data_protection"],"resources":[{"label":"Ley Estatutaria 1581 de 2012","url":"https://esdegue.edu.co/sites/default/files/Normatividad/LEY%20TRATAMIENTO%20DE%20DATOS%20-%20LEY%201581%20DE%202012.pdf"}],"responsible_parties":["online_services"],"summary":"Colombia was one of the first Latin American countries to establish a robust data protection law. Ley 1581 is Colombia's personal data protection statute. It prohibits processing of personal data for children and adolescents except where data is public.","topics":["explicit_or_harmful_content","online_services","social_media"],"url":"https://esdegue.edu.co/sites/default/files/Normatividad/LEY%20TRATAMIENTO%20DE%20DATOS%20-%20LEY%201581%20DE%202012.pdf"},{"country":"Costa Rica","country_code":"CR","enactment_status":"proposed","name":"Law to regulate access to and use of digital platforms by minors","penalties":{"criminal_penalties":false,"description":"Violators may incur fines and operational sanctions.","max_fine":"Violators may incur fines and operational sanctions."},"policy_types":["age_assurance"],"resources":[{"label":"Law to regulate access to and use of digital platforms by minors","url":"https://delfino.cr/asamblea/proyecto/25336"}],"responsible_parties":["social_media"],"summary":"This proposed bill would prohibit children under 14 from creating or using social media accounts, unless those accounts have certified children's versions with active parental controls and without addictive functionalities by default. Adolescents aged 14-18 may create accounts if platforms implement robust and proportional measures to determine if a user is a minor, offering multiple alternatives, including verification by accredited third parties, digital credentials, or age estimation. One highlighted age verification option for users aged 14-18 is the use of the Minor Identity Card.","topics":["social_media"],"url":"https://delfino.cr/asamblea/proyecto/25336"},{"country":"Cyprus","country_code":"CY","enactment_status":"proposed","name":"Draft social media ban","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Minimum Age for Social Media Accounts Set at 15, President Says","url":"https://en.politis.com.cy/social-lens/998592/minimum-age-for-social-media-accounts-set-at-15-president-says"}],"responsible_parties":["social_media"],"summary":"Cyprus’s president announced a measure to restrict social media access for under-15s. The proposal will be incorporated into the national “Digital Citizen” application.","topics":["social_media"]},{"country":"Germany","country_code":"DE","effective_date":"December 2025","enactment_status":"active","name":"The Interstate Treaty on the Protection of Minors in the Media (JMStV)","penalties":{"criminal_penalties":false,"description":"The Commission for the Protection of Minors in the Media (KJM) is the enforcing body of the JMStV and can levy fines for violations of age assurance requirements.","max_fine":"The Commission for the Protection of Minors in the Media (KJM) is the enforcing body of the JMStV and can levy fines for violations of age assurance requirements."},"policy_types":["age_assurance"],"resources":[{"label":"Interstate Treaty on the Protection of Minors in the Media \\(JMStV\\)","url":"https://www.die-medienanstalten.de/service/rechtsgrundlagen/jugendmedienschutz-staatsvertrag/"},{"url":"https://avpassociation.com/germany/"},{"label":"AVPA: Germany","url":"https://avpassociation.com/germany/"}],"responsible_parties":["adult_content_sites"],"summary":"Germany's JMStV establishes uniform legal protection of minors in electronic media, including the internet and TV. Under this rule, explicit content deemed harmful to minors may only be available within a closed user group. To qualify, access must be restricted to adults only, age verification must be robust and reliable, self-declaration is banned, and the system must prevent minors from gaining access. Germany specifies how platforms should conduct age assurance via the Commission for the Protection of Minors in Media (KJM). The accepted methods for initial age verification include in-person ID checks, online ID document verification, qualified electronic IDs, and video-based identification. Once age is verified, sites must conduct ongoing authentication via secure credentials linked to the verified adult, hardware or software tokens, or account-based authentication tied to the verified identity.","topics":["explicit_or_harmful_content","social_media"],"url":"https://www.die-medienanstalten.de/service/rechtsgrundlagen/jugendmedienschutz-staatsvertrag/"},{"country":"Germany","country_code":"DE","enactment_status":"proposed","name":"Strengthening the Protection of Children and Young People in Social Media","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Strengthening the Protection of Children and Young People in Social Media","url":"https://dserver.bundestag.de/brd/2026/0169-26.pdf"}],"responsible_parties":["social_media"],"summary":"Germany is considering a ban on social media for children under 14 and may require youth versions of social media platforms for adolescents aged 15-16. The proposals require social media platforms to implement effective age verification.","topics":["explicit_or_harmful_content","social_media"],"url":"https://dserver.bundestag.de/brd/2026/0169-26.pdf"},{"country":"Denmark","country_code":"DK","enactment_status":"proposed","name":"Agreement to ban social media access for children under 15","penalties":{"criminal_penalties":false,"description":"Fines up to 6% of global income","max_fine":"Fines up to 6% of global income"},"policy_types":["age_assurance"],"resources":[{"label":"AP: Denmark plans to severely restrict social media use for young people","url":"https://apnews.com/article/denmark-social-media-ban-australia-1e96a3df3276cc2033a6f04effb89f51"},{"label":"AP: Denmark's government aims to ban access to social media for children under 15","url":"https://apnews.com/article/denmark-social-media-ban-children-7862d2a8cc590b4969c8931a01adc7f4"}],"responsible_parties":["social_media"],"summary":"Denmark's proposed law would ban access to social media for anyone under the age of 15. The measure would have a parental consent provision that would give parents the right to allow children 13 and older to access social media. Lawmakers estimate the law may be in effect by mid to late 2026. Denmark has a national electronic ID system which covers nearly all Danish citizens over 13. Denmark plans to set up an age verification app that will likely work in conjunction with this age verification law.","topics":["social_media"]},{"country":"Algeria","country_code":"DZ","enactment_status":"proposed","name":"Draft law on regulation of digital platforms","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Algeria moves to tighten regulation of TikTok, Facebook, and YouTube","url":"https://www.wearetech.africa/en/fils-uk/news/tech/algeria-moves-to-tighten-regulation-of-tiktok-facebook-and-youtube"}],"responsible_parties":["social_media"],"summary":"Algeria is considering a law that would require platforms with more than one million Algerian users (or who meet certain revenue thresholds) to establish local offices within Algeria and store user data within Algeria. Platforms must implement parental controls to manage minors' access to social media. The bill is still under parliamentary review and has not been enacted into law.","topics":["social_media"]},{"country":"Ecuador","country_code":"EC","enactment_status":"proposed","name":"Reform of Children and Adolescents Code","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Article: The Children's Commission is analyzing a proposal to regulate the use of social media by children under 15","url":"https://www.asambleanacional.gob.ec/es/node/114513"}],"responsible_parties":["social_media"],"summary":"In February 2026, Ecuador's National Assembly put forth a proposal to the Children's Commission to regulate and limit the use of social media networks by children under 15.","topics":["online_services","social_media"]},{"country":"Ecuador","country_code":"EC","effective_date":"2025","enactment_status":"active","name":"Organic Law on Personal Data Protection","penalties":{"criminal_penalties":false,"description":"None specified","max_fine":"None specified"},"policy_types":["data_protection"],"resources":[{"label":"Ley Orgánica de Protección de Datos Personales, Art. 1","url":"https://www.gob.ec/regulaciones/ley-organica-proteccion-datos-personales"}],"responsible_parties":["online_services"],"summary":"Ecuador's regulatory framework mandates privacy and security controls throughout the entire software development lifecycle. For platforms processing sensitive data of under-18s, the framework requires explicit, documented justification for any data collection.","topics":["online_services","social_media"],"url":"https://www.gob.ec/regulaciones/ley-organica-proteccion-datos-personales"},{"country":"Egypt","country_code":"EG","enactment_status":"proposed","name":"Proposed social media age restriction","penalties":{"criminal_penalties":false,"description":"Not yet announced","max_fine":"Not yet announced"},"policy_types":["age_assurance"],"resources":[{"label":"Egypt to adopt restrictions on children's social media use to fight 'digital chaos'","url":"https://apnews.com/article/egypt-parliament-social-media-children-elsissi-8ea06fec852f3a2addb13eb341527732"}],"responsible_parties":["social_media"],"summary":"Egypt's parliament has stated its intent to draft legislation regulating children's use of social media. A draft law has not yet been released.","topics":["social_media"]},{"country":"Spain","country_code":"ES","enactment_status":"proposed","name":"Organic Law for the Protection of Minors in Digital Environments","penalties":{"criminal_penalties":false,"description":"Not yet announced","max_fine":"Not yet announced"},"policy_types":["age_assurance"],"resources":[{"label":"Draft Organic Law for the protection of minors in digital environments Congress gives the green light to the processing of the organic law for the protection of minors in digital environments","url":"https://www.mpr.gob.es/prencom/notas/paginas/2025/100925-tramitacion-lo-proteccion-menores-entornos.aspx"}],"responsible_parties":["social_media"],"summary":"Social media platforms will be required to have effective age verification systems to restrict children under 16 from registering accounts. This new law would also criminalize manipulating algorithms to amplify illegal content.","topics":["social_media"],"url":"https://www.mpr.gob.es/prencom/notas/paginas/2025/100925-tramitacion-lo-proteccion-menores-entornos.aspx"},{"country":"Ethiopia","country_code":"ET","effective_date":"2024","enactment_status":"active","name":"Personal Data Protection Proclamation No. 1321/2024","penalties":{"criminal_penalties":false,"description":"Administrative fines of up to 4% of the institution's total worldwide turnover","max_fine":"Administrative fines of up to 4% of the institution's total worldwide turnover"},"policy_types":["data_protection"],"resources":[{"label":"Personal Data Protection Proclamation, 2024","url":"https://www.dataguidance.com/sites/default/files/personal_data_protection_proclamation_1321-2024.pdf"}],"responsible_parties":["online_services"],"summary":"Ethiopia's data processing law includes an age verification provision that requires digital platforms to make reasonable efforts to verify a minor's age. Article 11 states that data controllers must verify the minor's age considering available technology and verify the validity of parental/guardian consent. Processing minors' data for marketing or profiling is expressly prohibited.","topics":["age_verification","online_services"],"url":"https://www.dataguidance.com/sites/default/files/personal_data_protection_proclamation_1321-2024.pdf"},{"country":"European Union","country_code":"EU","effective_date":"April 15, 2026 (announced)","enactment_status":"in_progress","name":"EU Age Verification App","policy_types":["age_assurance"],"resources":[{"label":"EU Age Verification Blueprint - the dedicated technical portal","url":"https://ageverification.dev/"},{"label":"EU Age Verification Solution: Roadmap","url":"https://ageverification.dev/Roadmap/"},{"label":"EU Age Verification Solution: Q&A","url":"https://digital-strategy.ec.europa.eu/en/faqs/eu-age-verification-solution"},{"label":"EU Age Verification Framework","url":"https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=OJ:L_202601035"}],"responsible_parties":["social_media"],"summary":"In April 2026, the EU announced a voluntary age verification app as an interim technical solution for relying parties to verify user age, pending broader EU digital wallet rollout. This is not binding legislation — it is a blueprint and pilot tool provided by the European Commission.","topics":["age_verification","data_privacy","online_platforms","online_services","social_media"],"url":"https://ageverification.dev/"},{"country":"European Union","country_code":"EU","enactment_status":"proposed","name":"Digital Fairness Act","penalties":{"criminal_penalties":false,"description":"Not yet announced","max_fine":"Not yet announced"},"policy_types":["consumer_protection"],"resources":[{"label":"Digital Fairness Act","url":"https://www.europarl.europa.eu/legislative-train/theme-protecting-our-democracy-upholding-our-values/file-digital-fairness-act"}],"responsible_parties":["online_services"],"summary":"The Digital Fairness Act is a proposed rule to update online consumer protection laws in Europe. It aims to address digital practices deemed harmful to minors, including features like infinite scroll, autoplay, engagement streaks, and push notifications.","topics":["age_verification","data_privacy","online_platforms","online_services","social_media"],"url":"https://www.europarl.europa.eu/legislative-train/theme-protecting-our-democracy-upholding-our-values/file-digital-fairness-act"},{"country":"European Union","country_code":"EU","effective_date":"February 2024","enactment_status":"active","name":"EU Digital Services Act","penalties":{"criminal_penalties":false,"description":"Up to 6% of global annual revenue plus additional penalties and temporary suspensions for ongoing noncompliance","max_fine":"Up to 6% of global annual revenue plus additional penalties and temporary suspensions for ongoing noncompliance"},"policy_types":["content_moderation","reporting"],"resources":[{"label":"EU Digital Services Act","url":"https://digital-strategy.ec.europa.eu/en/policies/digital-services-act#new-rules-in-a-nutshell"},{"label":"What is the Digital Services Act, and who does it impact?","url":"https://withpersona.com/blog/digital-services-act-dsa"}],"responsible_parties":["app_stores","online_services","social_media"],"summary":"The Digital Services Act (DSA) creates a single framework across the EU to stop the spread of disinformation online, protect children online, remove illegal content from online marketplaces, give users more control over their online experience, create transparency in content moderation, and help smaller platforms compete and grow in the EU.","topics":["age_verification","data_privacy","online_platforms","online_services","social_media"],"url":"https://digital-strategy.ec.europa.eu/en/policies/digital-services-act#new-rules-in-a-nutshell"},{"country":"European Union","country_code":"EU","effective_date":"May 25, 2018","enactment_status":"active","name":"General Data Protection Regulation (GDPR)","penalties":{"criminal_penalties":false,"description":"Violators may face fines up to €20 million or 4% of the firm's worldwide annual revenue from the preceding financial year, whichever amount is higher.","max_fine":"Violators may face fines up to €20 million or 4% of the firm's worldwide annual revenue from the preceding financial year, whichever amount is higher."},"policy_types":["data_protection"],"resources":[{"label":"GDPR","url":"https://gdpr-info.eu/"},{"label":"Complete guide to GDPR compliance","url":"https://gdpr.eu/"},{"label":"Persona: General Data Protection Regulation (GDPR)","url":"https://withpersona.com/identity-glossary/general-data-protection-regulation-gdpr"}],"responsible_parties":["data_controllers"],"summary":"The General Data Protection Regulation (GDPR) is a comprehensive set of data privacy laws for businesses that collect data on EU citizens. Under GDPR, businesses are responsible for safeguarding numerous types of personal data, including personal data, health data, biometric data, web data, and other personal information such as ethnic origins and political opinions.","topics":["age_verification","data_privacy","online_platforms","online_services","social_media"],"url":"https://gdpr-info.eu/"},{"country":"European Union","country_code":"EU","enactment_status":"proposed","name":"EU-wide social media age minimum","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Special panel report on child safety online","url":"https://commission.europa.eu/topics/digital-economy-and-society/special-panel_en"}],"responsible_parties":["online_services","social_media"],"summary":"In July 2026, a European Commission special panel recommended a harmonized EU-wide access restriction for children under 13, with limited supervised or educational access below that age. No legislative instrument has been published.","topics":["age_verification","data_privacy","online_platforms","online_services","social_media"]},{"country":"European Union","country_code":"EU","region":"Austria","region_code":"AT","effective_date":"August 2021","enactment_status":"active","name":"Audiovisual Media Services Act (AMD-G)","penalties":{"criminal_penalties":false,"description":"Minor violations will incur fines up to €8,000. Repeat violations may incur fines up to €40,000.","max_fine":"Minor violations will incur fines up to €8,000. Repeat violations may incur fines up to €40,000."},"policy_types":["age_assurance"],"resources":[{"label":"Joint guidelines for the protection of minors in audiovisual content from Austria","url":"https://www.jugendmedienschutz.at/verhaltensrichtlinien/"},{"label":"Audiovisual Media Services Act","url":"http://google.com/url?q=https://www.ris.bka.gv.at/geltendefassung.wxe?abfrage%3Dbundesnormen%26gesetzesnummer%3D20001412&sa=D&source=editors&ust=1774049341470528&usg=AOvVaw0BH8rWfS0dPVJD5Y6pdL4J"}],"responsible_parties":["video_platforms"],"summary":"These guidelines aim to establish a uniform system for the protection of minors from potentially harmful content in audiovisual services (broadcasting, on-demand services). The law states that any content that could impair the development of minors must be restricted. The law includes age verification for content deemed explicit or \"seriously harmful.\" It also states that companies can use an access control system to make access to harmful content dependent on the entry of a code (password, PIN, or similar) which is only available to adult users. The law also states that media providers are required to assess content before making it available, with content categorized into specific age labels ranging from 18+, 16+, 12+, 6+, and all ages.","topics":["explicit_or_harmful_content","social_media"],"url":"https://www.ris.bka.gv.at/geltendefassung.wxe?abfrage=bundesnormen&gesetzesnummer=20001412"},{"country":"European Union","country_code":"EU","region":"Austria","region_code":"AT","enactment_status":"proposed","name":"Social media ban for children under 14: AMD-G Proposed Amendment","penalties":{"criminal_penalties":false,"description":"Very large platforms may incur fines of up to 6% of worldwide annual turnover for violations.","max_fine":"Very large platforms may incur fines of up to 6% of worldwide annual turnover for violations."},"policy_types":["age_assurance"],"resources":[{"label":"Audiovisual Media Services Act, KommAustria Act, Amendment","url":"https://www.parlament.gv.at/gegenstand/XXVIII/ME/132"},{"label":"Press release: Federal Government sets minimum age for social media","url":"https://www.bundeskanzleramt.gv.at/bundeskanzleramt/nachrichten-der-bundesregierung/2026/03/bundesregierung-setzt-mindestalter-fuer-social-media-fest.html"}],"responsible_parties":["social_media","video_platforms"],"summary":"Austria is drafting legislation to restrict under-14 access to algorithm-based video-sharing and social media platforms with specified addictive features. The proposal would require privacy-preserving age verification and excludes messenger services and child-friendly areas.","topics":["explicit_or_harmful_content","social_media"],"url":"https://www.parlament.gv.at/gegenstand/XXVIII/ME/132"},{"country":"European Union","country_code":"EU","region":"Bulgaria","region_code":"BG","enactment_status":"proposed","name":"Bill No. 52-654-01-84: Social media restriction for under-16s","penalties":{"criminal_penalties":false,"description":"Proposed sanctions include fines of €100,000 for individuals and property sanctions of €150,000 for legal entities, increasing for repeat violations.","max_fine":"Proposed sanctions include fines of €100,000 for individuals and property sanctions of €150,000 for legal entities, increasing for repeat violations."},"policy_types":["age_assurance"],"resources":[{"label":"Bill No. 52-654-01-84","url":"https://www.parliament.bg/pub/plenary_documents/52-654-01-84_.pdf"}],"responsible_parties":["social_media","video_platforms"],"summary":"This proposed bill would prohibit children under 16 from creating, registering, holding, or managing public or partially public social media and video-sharing profiles. It would establish a national Digital Wallet application to support age verification.","topics":["social_media"],"url":"https://www.parliament.bg/pub/plenary_documents/52-654-01-84_.pdf"},{"country":"European Union","country_code":"EU","region":"Cyprus","region_code":"CY","enactment_status":"proposed","name":"Draft social media ban","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Minimum Age for Social Media Accounts Set at 15, President Says","url":"https://en.politis.com.cy/social-lens/998592/minimum-age-for-social-media-accounts-set-at-15-president-says"}],"responsible_parties":["social_media"],"summary":"Cyprus’s president announced a measure to restrict social media access for under-15s. The proposal will be incorporated into the national “Digital Citizen” application.","topics":["social_media"]},{"country":"European Union","country_code":"EU","region":"Germany","region_code":"DE","effective_date":"December 2025","enactment_status":"active","name":"The Interstate Treaty on the Protection of Minors in the Media (JMStV)","penalties":{"criminal_penalties":false,"description":"The Commission for the Protection of Minors in the Media (KJM) is the enforcing body of the JMStV and can levy fines for violations of age assurance requirements.","max_fine":"The Commission for the Protection of Minors in the Media (KJM) is the enforcing body of the JMStV and can levy fines for violations of age assurance requirements."},"policy_types":["age_assurance"],"resources":[{"label":"Interstate Treaty on the Protection of Minors in the Media \\(JMStV\\)","url":"https://www.die-medienanstalten.de/service/rechtsgrundlagen/jugendmedienschutz-staatsvertrag/"},{"url":"https://avpassociation.com/germany/"},{"label":"AVPA: Germany","url":"https://avpassociation.com/germany/"}],"responsible_parties":["adult_content_sites"],"summary":"Germany's JMStV establishes uniform legal protection of minors in electronic media, including the internet and TV. Under this rule, explicit content deemed harmful to minors may only be available within a closed user group. To qualify, access must be restricted to adults only, age verification must be robust and reliable, self-declaration is banned, and the system must prevent minors from gaining access. Germany specifies how platforms should conduct age assurance via the Commission for the Protection of Minors in Media (KJM). The accepted methods for initial age verification include in-person ID checks, online ID document verification, qualified electronic IDs, and video-based identification. Once age is verified, sites must conduct ongoing authentication via secure credentials linked to the verified adult, hardware or software tokens, or account-based authentication tied to the verified identity.","topics":["explicit_or_harmful_content","social_media"],"url":"https://www.die-medienanstalten.de/service/rechtsgrundlagen/jugendmedienschutz-staatsvertrag/"},{"country":"European Union","country_code":"EU","region":"Germany","region_code":"DE","enactment_status":"proposed","name":"Strengthening the Protection of Children and Young People in Social Media","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Strengthening the Protection of Children and Young People in Social Media","url":"https://dserver.bundestag.de/brd/2026/0169-26.pdf"}],"responsible_parties":["social_media"],"summary":"Germany is considering a ban on social media for children under 14 and may require youth versions of social media platforms for adolescents aged 15-16. The proposals require social media platforms to implement effective age verification.","topics":["explicit_or_harmful_content","social_media"],"url":"https://dserver.bundestag.de/brd/2026/0169-26.pdf"},{"country":"European Union","country_code":"EU","region":"Denmark","region_code":"DK","enactment_status":"proposed","name":"Agreement to ban social media access for children under 15","penalties":{"criminal_penalties":false,"description":"Fines up to 6% of global income","max_fine":"Fines up to 6% of global income"},"policy_types":["age_assurance"],"resources":[{"label":"AP: Denmark plans to severely restrict social media use for young people","url":"https://apnews.com/article/denmark-social-media-ban-australia-1e96a3df3276cc2033a6f04effb89f51"},{"label":"AP: Denmark's government aims to ban access to social media for children under 15","url":"https://apnews.com/article/denmark-social-media-ban-children-7862d2a8cc590b4969c8931a01adc7f4"}],"responsible_parties":["social_media"],"summary":"Denmark's proposed law would ban access to social media for anyone under the age of 15. The measure would have a parental consent provision that would give parents the right to allow children 13 and older to access social media. Lawmakers estimate the law may be in effect by mid to late 2026. Denmark has a national electronic ID system which covers nearly all Danish citizens over 13. Denmark plans to set up an age verification app that will likely work in conjunction with this age verification law.","topics":["social_media"]},{"country":"European Union","country_code":"EU","region":"Spain","region_code":"ES","enactment_status":"proposed","name":"Organic Law for the Protection of Minors in Digital Environments","penalties":{"criminal_penalties":false,"description":"Not yet announced","max_fine":"Not yet announced"},"policy_types":["age_assurance"],"resources":[{"label":"Draft Organic Law for the protection of minors in digital environments Congress gives the green light to the processing of the organic law for the protection of minors in digital environments","url":"https://www.mpr.gob.es/prencom/notas/paginas/2025/100925-tramitacion-lo-proteccion-menores-entornos.aspx"}],"responsible_parties":["social_media"],"summary":"Social media platforms will be required to have effective age verification systems to restrict children under 16 from registering accounts. This new law would also criminalize manipulating algorithms to amplify illegal content.","topics":["social_media"],"url":"https://www.mpr.gob.es/prencom/notas/paginas/2025/100925-tramitacion-lo-proteccion-menores-entornos.aspx"},{"country":"European Union","country_code":"EU","region":"France","region_code":"FR","effective_date":"May 21, 2024","enactment_status":"active","name":"Law on Securing and Regulating the Digital Space (SREN Law)","penalties":{"criminal_penalties":false,"description":"If a website is found to not comply with ARCOM’s standards, but minors are unable to access pornographic content, ARCOM will notify the website operators that they have a month to bring their age v…","max_fine":"If a website is found to not comply with ARCOM’s standards, but minors are unable to access pornographic content, ARCOM will notify the website operators that they have a month to bring their age verification measures up to standard. If the website still does not comply, ARCOM is empowered to impose a penalty up to the higher of either: (A) Two percent of the website’s worldwide turnover (minus VAT) from the previous financial year or (B) €150,000"},"policy_types":["age_assurance"],"resources":[{"label":"SREN Law","url":"http://google.com/url?q=https://www.legifrance.gouv.fr/jorf/id/JORFTEXT000049563368&sa=D&source=editors&ust=1774048847783885&usg=AOvVaw0QiEyCHp_HNRh5uemrbkhn"},{"label":"France and age assurance: a complete guide to comply with the SREN Law and ARCOM requirements","url":"https://withpersona.com/blog/arcom-age-verification"}],"responsible_parties":["adult_content_sites"],"summary":"France's SREN Law focuses on child protection, digital sovereignty, and online fraud. In reference to age assurance, it emphasizes protecting minors from explicit and pornographic content. Age assurance: Any website accessible in France that contains pornography must implement age verification at the beginning of each session. The law states that websites and platforms must offer users at least one age verification option that adheres to the concept of \"double anonymity.\" The age assurance provider must be legally and technically independent from the website in question. The solution provider must guarantee that the website will never have access to the data used to verify the user's age. The age verification solution is not allowed to retain users' personal information Digital Ban for Cyberbullies: Individuals convicted of online harassment, hate speech, or extortion can be banned from social media platforms for up to 6 months","topics":["explicit_or_harmful_content","social_media"],"url":"https://www.legifrance.gouv.fr/jorf/id/JORFTEXT000049563368"},{"country":"European Union","country_code":"EU","region":"France","region_code":"FR","effective_date":"N/A","enactment_status":"blocked","name":"Bill aimed at protecting minors from the risks to which the use of social networks exposes them","penalties":{"criminal_penalties":false,"description":"Administrative sanctions and fines","max_fine":"Administrative sanctions and fines"},"policy_types":["age_assurance"],"resources":[{"label":"Protecting minors from the risks to which they are exposed by using social networks","url":"https://www.assemblee-nationale.fr/dyn/17/dossiers/proteger_mineurs_reseaux_sociaux_17e"},{"label":"Conseil constitutionnel: Décision n° 2026-911 DC du 14 août 2026","url":"https://www.conseil-constitutionnel.fr/actualites/communique/decision-n-2026-911-dc-du-14-aout-2026-communique-de-presse"},{"label":"BBC: France's top court blocks social media ban for under-15s","url":"https://www.bbc.com/news/articles/cx2vj433xqlo"}],"responsible_parties":["social_media"],"summary":"France's social media restriction for under-15s was blocked by the country's top court in August 2026. The law would have required platforms to implement robust age assurance to verify users' age at signup. The law did not mandate any particular age assurance method but said that platforms must have an appeals process in place.","topics":["explicit_or_harmful_content","social_media"],"url":"https://www.assemblee-nationale.fr/dyn/17/dossiers/proteger_mineurs_reseaux_sociaux_17e"},{"country":"European Union","country_code":"EU","region":"Greece","region_code":"GR","effective_date":"Q1 2027","enactment_status":"in_progress","name":"Restrictions on Minors' Access to Social Media","penalties":{"criminal_penalties":false,"description":"Violators may be fined up to 6% of global turnover.","max_fine":"Violators may be fined up to 6% of global turnover."},"policy_types":["age_assurance"],"resources":[{"label":"Establishing an age limit for access to social media","url":"https://www.government.gov.gr/thespisi-oriou-ilikias-gia-tin-prosvasi-sta-mesa-kinonikis-diktiosis-ke-tin-prostasia-ton-anilikon-apo-ton-psifiako-ethismo/"}],"responsible_parties":["social_media"],"summary":"Beginning January 2027, social media platforms must implement reliable age verification mechanisms to ban access to social media for children under 15. Platforms must re-verify all existing accounts to identify and block accounts held by children.","topics":["social_media"],"url":"https://www.government.gov.gr/thespisi-oriou-ilikias-gia-tin-prosvasi-sta-mesa-kinonikis-diktiosis-ke-tin-prostasia-ton-anilikon-apo-ton-psifiako-ethismo/"},{"country":"European Union","country_code":"EU","region":"Ireland","region_code":"IE","effective_date":"July 21, 2025","enactment_status":"active","name":"Online Safety Code","penalties":{"criminal_penalties":false,"description":"Companies can be fined up to €20 million or 10% of their annual revenue.","max_fine":"Companies can be fined up to €20 million or 10% of their annual revenue."},"policy_types":["age_assurance"],"resources":[{"label":"Coimisiun na Mean: Online Safety Code","url":"https://www.cnam.ie/app/uploads/2024/11/Coimisiun-na-Mean-Online-Safety-Code.pdf"},{"label":"Ireland's Online Safety Code: What you need to know","url":"https://withpersona.com/blog/irelands-online-safety-code#:~:text=Ireland's%20Online%20Safety%20Code%20\\(OSC\\"}],"responsible_parties":["video_platforms"],"summary":"Ireland's Online Safety Code addresses harmful and illegal content on video-sharing platform services (VSPSs). Content includes user-generated videos, platform-produced videos, and comments associated with videos. VSPSs must (1) Restrict users from uploading and sharing videos with content deemed harmful, including cyberbullying, racism, incitement of hatred, and others. (2) Use effective age assurance methods to keep children from pornographic content or gratuitous violence. Specific age assurance methods are not specified. (3) Create reporting and flagging mechanisms to allow users to easily report harmful content (4) Publish an annual action plan outlining how the VSPS will promote media literacy to its users (5) Avoid using children's data for commercial purposes (6) Provide parental controls for harmful content that may affect children under 15","topics":["explicit_or_harmful_content"],"url":"https://www.cnam.ie/app/uploads/2024/11/Coimisiun-na-Mean-Online-Safety-Code.pdf"},{"country":"European Union","country_code":"EU","region":"Italy","region_code":"IT","effective_date":"April 2025","enactment_status":"active","name":"Caivano Decree (Law No. 159)","penalties":{"criminal_penalties":false,"description":"Failure to comply can lead to warnings, fines, and ultimately the blocking of the website in Italy.","max_fine":"Failure to comply can lead to warnings, fines, and ultimately the blocking of the website in Italy."},"policy_types":["age_assurance"],"resources":[{"label":"Law No. 159","url":"https://www.gazzettaufficiale.it/eli/id/2023/11/14/23A06292/sg"},{"label":"AGCOM Delibera 96/25/CONS \\(implementation rules\\)","url":"https://www.agcom.it/provvedimenti/delibera-96-25-cons"}],"responsible_parties":["adult_content_sites","video_platforms"],"summary":"The Caivano decree includes multiple child protections laws, including a provision on digital safety for minors that mandates age verification for adult content providers. Chapter 4 states that telecom providers must include parental control applications in service contracts. It also includes a ban on minors accessing pornographic content online, with AGCOM (Italy's communications authority) enforcing age verification for online platforms. AGCOM requires a double-blind, two-step process involving an independent, certified third party-age verifier to guarantee anonymity for the user and for the verifier. The law states that users must be authenticated for every session to prevent a minor from using an already logged in device. AGCOM specifies that systems must be accurate, secure, user friendly, inclusive (non-discriminatory) and must minimize data collection. AGCOM Resolution No. 96/25/CONS includes the detailed technical requirements for age verification","topics":["ai","explicit_or_harmful_content","social_media"],"url":"https://www.gazzettaufficiale.it/eli/id/2023/11/14/23A06292/sg"},{"country":"European Union","country_code":"EU","region":"Italy","region_code":"IT","enactment_status":"proposed","name":"Atto Camera C. 2777 (Social media restriction for under-15s)","penalties":{"criminal_penalties":false,"description":"AGCOM may impose administrative fines of up to 6% of worldwide annual turnover and may order blocking for continued noncompliance.","max_fine":"AGCOM may impose administrative fines of up to 6% of worldwide annual turnover and may order blocking for continued noncompliance."},"policy_types":["age_assurance"],"resources":[{"label":"C. 2777","url":"https://www.camera.it/leg19/126?leg=19&idDocumento=2777"}],"responsible_parties":["social_media"],"summary":"This draft bill would introduce a tiered age structure for access to social media. Under-15s would be banned from creating and accessing social media accounts. Minors between 15 and 17 would be able to access social media with verifiable parental consent. Platforms would be required to enforce maximum privacy and security settings for minors under 18 and restrict exposure to harmful content.","topics":["ai","explicit_or_harmful_content","social_media"],"url":"https://www.camera.it/leg19/126?leg=19&idDocumento=2777"},{"country":"European Union","country_code":"EU","region":"Italy","region_code":"IT","effective_date":"October 10, 2025","enactment_status":"active","name":"Legge 132/2025","penalties":{"criminal_penalties":false,"description":"Sanctions apply under Italy's AI governance and EU AI Act framework; no standalone penalty is specified for the under-14 parental-consent rule.","max_fine":"Sanctions apply under Italy's AI governance and EU AI Act framework; no standalone penalty is specified for the under-14 parental-consent rule."},"policy_types":["age_assurance"],"resources":[{"label":"Legge 132","url":"https://images.processopenaleegiustizia.it/f/sentenze/documento_7cTPl_ppg.pdf"}],"responsible_parties":["online_services"],"summary":"Minors under the age of 14 require consent from the person exercising parental responsibility to access AI technologies and for related personal data processing.","topics":["ai","explicit_or_harmful_content","social_media"],"url":"https://images.processopenaleegiustizia.it/f/sentenze/documento_7cTPl_ppg.pdf"},{"country":"European Union","country_code":"EU","region":"Malta","region_code":"MT","enactment_status":"proposed","name":"Draft social media ban","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Green Paper on social media reform","url":"https://reforms.gov.mt/wp-content/uploads/2025/12/GREEN-PAPER-REFORM-ENG.pdf"}],"responsible_parties":["social_media"],"summary":"In late 2025, Malta’s government launched a Green Paper on social media reform. The consultation explores a mandatory restriction on social media access for children under 13, asks what minimum age and verification measures should apply, and notes that no official legislation has been introduced.","topics":["explicit_or_harmful_content"],"url":"https://reforms.gov.mt/wp-content/uploads/2025/12/GREEN-PAPER-REFORM-ENG.pdf"},{"country":"European Union","country_code":"EU","region":"Netherlands","region_code":"NL","effective_date":"2024","enactment_status":"active","name":"Bundled information regarding legal age limits and online age verification","penalties":{"criminal_penalties":false,"description":"Remote gambling act: basic fine levels can reach €4 million depending on the category of violation. For larger operators fines may be calculated as about 4% of turnover or higher depending on circu…","max_fine":"Remote gambling act: basic fine levels can reach €4 million depending on the category of violation."},"policy_types":["age_assurance"],"resources":[{"label":"Gebundelde informatie rondom wettelijke leeftijdsgrenzen en online leeftijdsverificatie","url":"https://open.overheid.nl/documenten/5e46723f-3980-4d20-986c-dae1cbaad1d5/file"}],"responsible_parties":["adult_content_sites","online_gambling"],"summary":"This government document clarifies legal age limits and online age verification requirements for social media, gambling, and online pornographic content. It states that operators must verify the identity of players and confirm they are over 18 before registration. It explicitly states that the government does not support a blanket age ban for social media.","topics":["explicit_or_harmful_content"],"url":"https://open.overheid.nl/documenten/5e46723f-3980-4d20-986c-dae1cbaad1d5/file"},{"country":"European Union","country_code":"EU","region":"Poland","region_code":"PL","enactment_status":"proposed","name":"Draft social media age restriction","penalties":{"criminal_penalties":false,"description":"Companies may be fined up to 6% of their turnover","max_fine":"Companies may be fined up to 6% of their turnover"},"policy_types":["age_assurance"],"resources":[{"label":"Reuters: Polish ruling party plans social media ban for children under 15","url":"https://www.reuters.com/business/media-telecom/poland-plans-social-media-ban-children-under-15-bloomberg-news-reports-2026-02-27/"}],"responsible_parties":["social_media"],"summary":"Poland recently announced plans to draft legislation restricting children under 15 from social media platforms.","topics":["explicit_or_harmful_content","social_media"]},{"country":"European Union","country_code":"EU","region":"Poland","region_code":"PL","effective_date":"12 months after publication in the Journal of Laws","enactment_status":"proposed","name":"Draft Act on the Protection of Minors against Access to Pornographic Content on the Internet","penalties":{"criminal_penalties":false,"description":"Fines up to PLN 1,000,000 for failure to implement age verification","max_fine":"Fines up to PLN 1,000,000 for failure to implement age verification"},"policy_types":["age_assurance"],"responsible_parties":["adult_content_sites","online_services"],"summary":"Poland's draft bill requires digital service providers to implement effective age verification mechanisms to prevent minors under 18 from accessing pornographic content online.","topics":["explicit_or_harmful_content","social_media"],"url":"https://www.gov.pl/web/premier/projekt-ustawy-o-ochronie-maloletnich-przed-dostepem-do-tresci-pornograficznych-w-internecie"},{"country":"European Union","country_code":"EU","region":"Portugal","region_code":"PT","enactment_status":"proposed","name":"Projeto de Lei nº 398/XVII/1ª -- Measures for Protection of Children in Digital Environments","penalties":{"criminal_penalties":false,"description":"Companies face up to €2M or up to 2% of annual worldwide turnover, whichever is higher","max_fine":"Companies face up to €2M or up to 2% of annual worldwide turnover, whichever is higher"},"policy_types":["age_assurance"],"resources":[{"label":"Projeto de Lei nº 398/XVII/1ª Reuters: Portugal approves restrictions on social media access for children","url":"https://www.reuters.com/world/europe/portugal-approves-restrictions-social-media-access-children-2026-02-12/"}],"responsible_parties":["online_services"],"summary":"This bill would establish a minimum digital age of 16. Children under 13 are prohibited from accessing social media and digital platforms entirely, while children aged 13-15 may access only with verified parental consent. Self-declaration is explicitly prohibited. Platforms must implement age verification compatible with Portugal's Chave Móvel Digital, the EU digital identity wallet, or equivalent privacy-preserving systems (including zero-knowledge proofs). The proposal received first stage parliamentary approval in February 2026. Key platform obligations include: - Age verification for all users before granting access - Safe default settings for under-16 accounts: private profile, non-searchable, hidden social metrics, age-appropriate algorithmic recommendations - Prohibition of addictive design for under-16 accounts: autoplay, infinite scroll, loot boxes, non-essential notifications - Parental control panel for setting time limits, monitoring suspicious contacts, and adjusting privacy settings - Grooming and cyberbullying protections: automatic blocking of violent/sexual content, suspicious contact detection, 24-hour response to reports involving children - High-risk content providers (violent, sexual, addictive) must prevent children's access or face access suspension in Portugal.","topics":["social_media"],"url":"https://app.parlamento.pt/webutils/docs/doc.pdf?path=effQ8LlsUxFfUEOBQ0vksWyVrrpwRA4DQlt6D%252fZo0aAOlAGoi5wwp79ZZdh34xpHGnl%252bQoWwhDjSDZHV%252bmCeL41jomz9q1FuvS1PFB00WbG3UaeTk%252b5uy4XCpfDQgEk%252bw%252bGu95BB%252bHndk2Fn40GFOcUVXRQ2znpHTL6IfACx0dC%252fr5X4B1o8pkEDPGZRfMHPJUxdmJyvRm92AF5k7sL%252fKLsh0DSQTwsaFsk10cdgjRTzJJLfCAzQ38qxZqB%252fPd3b0MkU%252fgbYK5IWL1MGIYO5oewhYjNI0WG6IVDv2D1KTUeO4NkJUgSDXIaoQkFRi8ZzxsJSEGSOPyLheDm9LMLjW%252bUD%252fpQz0PY0I7Rz5vQQNy8%253d&fich=55e6d2f3-1519-4120-8c31-a4056a9509fd.docx&Inline=true"},{"country":"European Union","country_code":"EU","region":"Slovenia","region_code":"SI","enactment_status":"proposed","name":"Draft social media ban","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Slovenia prepares legislation to ban social media for under-15s","url":"https://www.reuters.com/world/europe/slovenia-preparing-law-ban-access-social-media-minors-under-15-2026-02-05/"}],"responsible_parties":["social_media"],"summary":"In February 2026, the Slovenian government announced it would prepare legislation to ban social media for under-15s","topics":["social_media"]},{"country":"European Union","country_code":"EU","region":"Slovakia","region_code":"SK","effective_date":"July 2024","enactment_status":"active","name":"Law on Media Services (Law No. 264/2022)","penalties":{"criminal_penalties":false,"description":"Digital platforms and intermediaries are subject to fines under the European Digital Services Act, which can reach up to 6% of the provider's global annual turnover.","max_fine":"Digital platforms and intermediaries are subject to fines under the European Digital Services Act, which can reach up to 6% of the provider's global annual turnover."},"policy_types":["age_assurance"],"resources":[{"label":"Slovakia Law 264/2022 Digital Policy Alert: Slovakia","url":"https://digitalpolicyalert.org/event/28951-law-no-2642022-on-media-services-including-content-moderation-regulation-enters-into-force"}],"responsible_parties":["video_platforms"],"summary":"Slovakia's Law on Media Services requires video-sharing platforms to take appropriate measures to restrict minors from content that may impair their physical, mental, or moral development. These measures include age verification systems, parental controls, and user reporting tools.","topics":["explicit_or_harmful_content"],"url":"https://www.slov-lex.sk/ezbierky/pravne-predpisy/SK/ZZ/2022/264/20240724.html#error=login_required&state=3bc7945c-4a8a-4a83-b8d6-8a2df05daebf"},{"country":"Fiji","country_code":"FJ","enactment_status":"proposed","name":"Proposed social media age restriction","penalties":{"criminal_penalties":false,"description":"Not yet announced","max_fine":"Not yet announced"},"policy_types":["age_assurance"],"resources":[{"label":"Fiji awaits draft of social media restrictions","url":"https://www.abc.net.au/pacific/programs/pacificbeat/socialmediabanfiji/104798442"}],"responsible_parties":["social_media"],"summary":"In February 2026, Fiji convened a task force with the goal of drafting legislation to prevent children under 16 from accessing social media. No legislation has yet been introduced.","topics":["social_media"]},{"country":"France","country_code":"FR","effective_date":"May 21, 2024","enactment_status":"active","name":"Law on Securing and Regulating the Digital Space (SREN Law)","penalties":{"criminal_penalties":false,"description":"If a website is found to not comply with ARCOM’s standards, but minors are unable to access pornographic content, ARCOM will notify the website operators that they have a month to bring their age v…","max_fine":"If a website is found to not comply with ARCOM’s standards, but minors are unable to access pornographic content, ARCOM will notify the website operators that they have a month to bring their age verification measures up to standard. If the website still does not comply, ARCOM is empowered to impose a penalty up to the higher of either: (A) Two percent of the website’s worldwide turnover (minus VAT) from the previous financial year or (B) €150,000"},"policy_types":["age_assurance"],"resources":[{"label":"SREN Law","url":"http://google.com/url?q=https://www.legifrance.gouv.fr/jorf/id/JORFTEXT000049563368&sa=D&source=editors&ust=1774048847783885&usg=AOvVaw0QiEyCHp_HNRh5uemrbkhn"},{"label":"France and age assurance: a complete guide to comply with the SREN Law and ARCOM requirements","url":"https://withpersona.com/blog/arcom-age-verification"}],"responsible_parties":["adult_content_sites"],"summary":"France's SREN Law focuses on child protection, digital sovereignty, and online fraud. In reference to age assurance, it emphasizes protecting minors from explicit and pornographic content. Age assurance: Any website accessible in France that contains pornography must implement age verification at the beginning of each session. The law states that websites and platforms must offer users at least one age verification option that adheres to the concept of \"double anonymity.\" The age assurance provider must be legally and technically independent from the website in question. The solution provider must guarantee that the website will never have access to the data used to verify the user's age. The age verification solution is not allowed to retain users' personal information Digital Ban for Cyberbullies: Individuals convicted of online harassment, hate speech, or extortion can be banned from social media platforms for up to 6 months","topics":["explicit_or_harmful_content","social_media"],"url":"https://www.legifrance.gouv.fr/jorf/id/JORFTEXT000049563368"},{"country":"France","country_code":"FR","effective_date":"N/A","enactment_status":"blocked","name":"Bill aimed at protecting minors from the risks to which the use of social networks exposes them","penalties":{"criminal_penalties":false,"description":"Administrative sanctions and fines","max_fine":"Administrative sanctions and fines"},"policy_types":["age_assurance"],"resources":[{"label":"Protecting minors from the risks to which they are exposed by using social networks","url":"https://www.assemblee-nationale.fr/dyn/17/dossiers/proteger_mineurs_reseaux_sociaux_17e"},{"label":"Conseil constitutionnel: Décision n° 2026-911 DC du 14 août 2026","url":"https://www.conseil-constitutionnel.fr/actualites/communique/decision-n-2026-911-dc-du-14-aout-2026-communique-de-presse"},{"label":"BBC: France's top court blocks social media ban for under-15s","url":"https://www.bbc.com/news/articles/cx2vj433xqlo"}],"responsible_parties":["social_media"],"summary":"France's social media restriction for under-15s was blocked by the country's top court in August 2026. The law would have required platforms to implement robust age assurance to verify users' age at signup. The law did not mandate any particular age assurance method but said that platforms must have an appeals process in place.","topics":["explicit_or_harmful_content","social_media"],"url":"https://www.assemblee-nationale.fr/dyn/17/dossiers/proteger_mineurs_reseaux_sociaux_17e"},{"country":"Gabon","country_code":"GA","effective_date":"April 2026","enactment_status":"active","name":"Regulating the use of social networks via digital platforms: Ordonnance n°0011/PR/2026 du 26 février 2026 (under 16 social media restriction)","penalties":{"criminal_penalties":false,"description":"Violators are subject to fines of up to 50 million FCFA and imprisonment penalties for certain violations.","max_fine":"Violators are subject to fines of up to 50 million FCFA and imprisonment penalties for certain violations."},"policy_types":["age_assurance"],"resources":[{"label":"Ordonnance n°0011/PR/2026 du 26 février 2026","url":"https://droit-et-politique-en-afrique.info/wp-content/uploads/2026/04/Ordonnance-du-26-fevrier-2026-reglementation-de-lusage-des-reseaux-sociaux-Journal-Officiel-n%C2%B0110-du-8-au-15-avril-2026.pdf"}],"responsible_parties":["adult_content_sites","social_media"],"summary":"This law sets a legal digital majority age of 16. Children under 16 are restricted from creating accounts on social media platforms without verifiable parental consent. Access to pornographic content is prohibited for children under 18, and adult content providers must implement age verification. Platforms must submit quarterly reports to authorities detailing the number of accounts held by children that were detected, blocked, and deleted, as well as the verification methods used.","topics":["explicit_or_harmful_content","gaming","social_media"],"url":"https://droit-et-politique-en-afrique.info/wp-content/uploads/2026/04/Ordonnance-du-26-fevrier-2026-reglementation-de-lusage-des-reseaux-sociaux-Journal-Officiel-n%C2%B0110-du-8-au-15-avril-2026.pdf"},{"country":"United Kingdom","country_code":"GB","effective_date":"July 2025","enactment_status":"active","name":"Online Safety Act","penalties":{"criminal_penalties":true,"description":"Companies can be fined up to £18 million or 10 percent of their qualifying worldwide revenue, whichever is greater. Criminal action can be taken against senior managers who fail to ensure companie…","max_fine":"Companies can be fined up to £18 million or 10 percent of their qualifying worldwide revenue, whichever is greater."},"policy_types":["age_assurance"],"resources":[{"label":"Online Safety Act 2023 Ofcom Online Safety Act Explainer","url":"https://www.gov.uk/government/publications/online-safety-act-explainer/online-safety-act-explainer"},{"label":"Online Safety Act: Everything You Need to Know","url":"https://withpersona.com/blog/online-safety-act"}],"responsible_parties":["social_media"],"summary":"The Online Safety Act is a law that regulates online content in the UK. It creates a duty of care for online platforms and is designed to \"keep the internet safe for children\" while giving adults more control over their online experiences. Its primary provisions include: Age assurance and verification: Platforms must implement age assurance and verification systems to prevent under-18s from exposure to harmful or age-inappropriate material (pornographic content or content promoting self-harm, eating disorders, or bullying) Annual risk assessment: online service providers must conduct a children's risk assessment at least annually Safer algorithms: Platforms must prevent users from encountering harmful content. If a platform's risk assessment concludes that their service is of \"medium\" or \"high\" risk for harmful content, providers must ensure that algorithms exclude potential harmful content in users' feeds.","topics":["data_privacy","online_services","social_media"]},{"country":"United Kingdom","country_code":"GB","effective_date":"September 2020","enactment_status":"active","name":"Age Appropriate Design Code (Children's Code)","penalties":{"criminal_penalties":false,"description":"The ICO can issue fines of up to €20 million or 4% of a company's annual worldwide turnover, whichever is higher","max_fine":"The ICO can issue fines of up to €20 million or 4% of a company's annual worldwide turnover, whichever is higher"},"policy_types":["data_protection"],"resources":[{"label":"Age appropriate design: a code of practice for online services","url":"https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/childrens-information/childrens-code-guidance-and-resources/age-appropriate-design-a-code-of-practice-for-online-services/executive-summary/"}],"responsible_parties":["online_gaming","online_services","social_media","video_platforms"],"summary":"The UK's Children's Code applies to any online service that children under 18 will likely access, even if they are not the target audience or user. It contains 15 standards that online services must follow to protect children's data online. This includes privacy by default and data minimization standards for children, geolocation turned off by default, parental controls, and other standards to ensure that online services prioritize the privacy and safety of under-18s by design.","topics":["data_privacy","online_services","social_media"],"url":"https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/childrens-information/childrens-code-guidance-and-resources/age-appropriate-design-a-code-of-practice-for-online-services/executive-summary/"},{"country":"United Kingdom","country_code":"GB","effective_date":"December 11, 2003","enactment_status":"active","name":"Privacy and Electronic Communications Regulations (PECR)","penalties":{"criminal_penalties":false,"description":"£17.5 million or 4% of global annual turnover","max_fine":"£17.5 million or 4% of global annual turnover"},"policy_types":["data_protection","consumer_protection"],"resources":[{"label":"The Privacy and Electronic Communications (EC Directive) Regulations 2003","url":"https://www.legislation.gov.uk/uksi/2003/2426/contents"}],"responsible_parties":["online_services"],"summary":"Operating alongside the UK GDPR, the Privacy and Electronic Communications Regulations (PECR) govern electronic privacy and tracking technologies. The legislation mandates that businesses obtain explicit user consent before sending unsolicited marketing via email, text, or automated calls. Website operators must secure permission to deploy non-essential cookies. Non-compliance results in enforcement action by the Information Commissioner's Office (ICO).","topics":["data_privacy","online_services","social_media"],"url":"https://www.legislation.gov.uk/uksi/2003/2426/contents"},{"country":"United Kingdom","country_code":"GB","effective_date":"January 1, 2021","enactment_status":"active","name":"UK General Data Protection Regulation (UK GDPR)","penalties":{"criminal_penalties":false,"description":"£17.5 million or 4% of global annual turnover","max_fine":"£17.5 million or 4% of global annual turnover"},"policy_types":["data_protection"],"resources":[{"label":"Regulation (EU) 2016/679 of the European Parliament and of the Council","url":"https://www.legislation.gov.uk/eur/2016/679/contents"}],"responsible_parties":["internet_service_providers"],"summary":"The UK GDPR is a legal framework for data protection in the UK and governs how organizations collect, process, and secure personal information. It impacts businesses by mandating strict accountability and robust security measures, such as data encryption and multi-factor authentication, to prevent breaches. It empowers individuals with enhanced data rights, including the right to access their personal information or request its deletion.","topics":["data_privacy","online_services","social_media"],"url":"https://www.legislation.gov.uk/eur/2016/679/contents"},{"country":"United Kingdom","country_code":"GB","effective_date":"Spring 2027","enactment_status":"in_progress","name":"Social Media Restriction","policy_types":["age_assurance"],"resources":[{"label":"Fact Sheet: New Rules to protect children online","url":"https://www.gov.uk/government/publications/fact-sheet-new-rules-to-protect-children-online/fact-sheet-new-rules-to-protect-children-online#:~:text=has%20a%20credit%20card%20connected,8"}],"responsible_parties":["social_media"],"summary":"The UK recently announced plans to ban under-16s from social media and to limit features deemed harmful on other online services (e.g. livestreaming and permitting strangers to contact under-18s). Guidelines for age assurance requirements will be set by Ofcom.","topics":["data_privacy","online_services","social_media"],"url":"https://www.gov.uk/government/publications/fact-sheet-new-rules-to-protect-children-online/fact-sheet-new-rules-to-protect-children-online#:~:text=has%20a%20credit%20card%20connected,8"},{"country":"Ghana","country_code":"GH","enactment_status":"proposed","name":"Electronic Transactions Bill, 2025","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Electronic Transactions Bill, 2025","url":"https://nita.gov.gh/wp-content/uploads/2025/NITA-ETA-public-consultation-2025.docx"}],"responsible_parties":["online_services"],"summary":"This is a draft bill. Any online platform likely to be accessed by children would need to implement robust age verification mechanisms to prevent unauthorized access by underaged users. This bill has not yet been enacted.","topics":["online_services"],"url":"https://nita.gov.gh/wp-content/uploads/2025/NITA-ETA-public-consultation-2025.docx"},{"country":"Greece","country_code":"GR","effective_date":"Q1 2027","enactment_status":"in_progress","name":"Restrictions on Minors' Access to Social Media","penalties":{"criminal_penalties":false,"description":"Violators may be fined up to 6% of global turnover.","max_fine":"Violators may be fined up to 6% of global turnover."},"policy_types":["age_assurance"],"resources":[{"label":"Establishing an age limit for access to social media","url":"https://www.government.gov.gr/thespisi-oriou-ilikias-gia-tin-prosvasi-sta-mesa-kinonikis-diktiosis-ke-tin-prostasia-ton-anilikon-apo-ton-psifiako-ethismo/"}],"responsible_parties":["social_media"],"summary":"Beginning January 2027, social media platforms must implement reliable age verification mechanisms to ban access to social media for children under 15. Platforms must re-verify all existing accounts to identify and block accounts held by children.","topics":["social_media"],"url":"https://www.government.gov.gr/thespisi-oriou-ilikias-gia-tin-prosvasi-sta-mesa-kinonikis-diktiosis-ke-tin-prostasia-ton-anilikon-apo-ton-psifiako-ethismo/"},{"country":"Indonesia","country_code":"ID","effective_date":"March 6, 2026","enactment_status":"active","name":"Minister of Communication and Digital Regulation Number 9 of 2026 (social media ban)","penalties":{"criminal_penalties":false,"description":"Non-compliance will result in administrative sanctions including fines, temporary suspension, and termination of access.","max_fine":"Non-compliance will result in administrative sanctions including fines, temporary suspension, and termination of access."},"policy_types":["age_assurance"],"resources":[{"label":"Ministerial Regulation No. 9 of 2026","url":"https://peraturan.bpk.go.id/Details/346040/permenkomdigi-no-9-tahun-2026"},{"label":"Official video statement","url":"https://www.instagram.com/reel/DViJDXDEaPe/?utm_source=ig_web_copy_link"}],"responsible_parties":["social_media"],"summary":"The Indonesian Ministry of Communication and Digital Affairs issued a ban on social media for children under the age of 16. Starting March 2026, accounts of children under 16 on \"high risk\" platforms would begin to be deactivated, starting with the eight most used applications (YouTube, TikTok, Facebook, Instagram, Threads, X, Bigo Live, and Roblox). Children ages 13 to 15 would still be able to use platforms that the country deems \"lower risk.\" Platforms that are deemed \"high risk\" must adjust their minimum age to comply with the 16+ requirement, deactivate existing accounts of users under 16, and independently assess the risks their platforms pose to minors. The law also requires digital products to be tailored to specific age brackets, including 3 - 5 years, 6 - 9 years, 10 - 12 years, 13 - 15 years, and 16 - 18 years. Children under 13 may only have accounts for low-risk products specifically designed for children and with parental consent. eCommerce platforms are also already in scope under the broader Penyelenggara Sistem Elektronik (PSE) self-assessment framework; as of June 2026, platforms including Shopee, Tokopedia, Lazada, and TikTok Shop had already submitted PP TUNAS self-assessments. The March 28 enforcement focus was specifically on social media and other high-risk platforms.","topics":["age_verification","data_privacy","social_media"],"url":"https://peraturan.bpk.go.id/Details/346040/permenkomdigi-no-9-tahun-2026"},{"country":"Indonesia","country_code":"ID","effective_date":"October 17, 2024","enactment_status":"active","name":"Law No. 27 of 2022 on Personal Data Protection","penalties":{"criminal_penalties":true,"description":"For individuals, fines can reach up to six billion rupiah, with separate fines for data misuse, including: Unlawful collection, unlawful disclosure, unlawful use, and creating fake data. In additio…","max_fine":"For individuals, fines can reach up to six billion rupiah, with separate fines for data misuse, including: Unlawful collection, unlawful disclosure, unlawful use, and creating fake data. In addition to fines, depending on the severity of the infraction, a user may also be imprisoned."},"policy_types":["data_protection"],"responsible_parties":["online_services"],"summary":"The Indonesian Personal Data Protection (PDP) Law (Law Number 27 of 2022) is a legal framework established to secure citizens' personal data and guarantee their constitutional rights to personal privacy. It governs how individuals, public agencies, and organizations process, transfer, and manage both general and specific personal data. Furthermore, the law clearly defines the rights of data subjects alongside the obligations of data controllers and processors, defined similarly to GDPR, enforcing these rules through strict administrative and criminal sanctions for non-compliance.","topics":["age_verification","data_privacy","social_media"],"url":"https://peraturan.bpk.go.id/Details/229798/uu-no-27-tahun-2022"},{"country":"Indonesia","country_code":"ID","effective_date":"March 27, 2025","enactment_status":"active","name":"Governance of Electronic System Implementation in Child Protection (Government Regulation Number 17 of 2025)","penalties":{"criminal_penalties":false,"description":"Violators may receive written warnings, administrative fines, temporary suspension, or access blocking.","max_fine":"Violators may receive written warnings, administrative fines, temporary suspension, or access blocking."},"policy_types":["age_assurance"],"resources":[{"label":"English translation of Government Regulation Number 17","url":"https://5rightsfoundation.com/wp-content/uploads/2026/01/Indoneisa-Official-translation.pdf"}],"responsible_parties":["online_services"],"summary":"Electronic system providers (ESPs) are required to self-assess the risk level their platform may pose to children. ESPs likely to be accessed by children must provide a mechanism to verify child users. Data used for age verification must be deleted immediately once the purpose is fulfilled. ESPs must provide a mechanism for users to contest or correct inaccurate age identification.","topics":["age_verification","data_privacy","social_media"],"url":"https://peraturan.bpk.go.id/Details/316698/pp-no-17-tahun-2025"},{"country":"Ireland","country_code":"IE","effective_date":"July 21, 2025","enactment_status":"active","name":"Online Safety Code","penalties":{"criminal_penalties":false,"description":"Companies can be fined up to €20 million or 10% of their annual revenue.","max_fine":"Companies can be fined up to €20 million or 10% of their annual revenue."},"policy_types":["age_assurance"],"resources":[{"label":"Coimisiun na Mean: Online Safety Code","url":"https://www.cnam.ie/app/uploads/2024/11/Coimisiun-na-Mean-Online-Safety-Code.pdf"},{"label":"Ireland's Online Safety Code: What you need to know","url":"https://withpersona.com/blog/irelands-online-safety-code#:~:text=Ireland's%20Online%20Safety%20Code%20\\(OSC\\"}],"responsible_parties":["video_platforms"],"summary":"Ireland's Online Safety Code addresses harmful and illegal content on video-sharing platform services (VSPSs). Content includes user-generated videos, platform-produced videos, and comments associated with videos. VSPSs must (1) Restrict users from uploading and sharing videos with content deemed harmful, including cyberbullying, racism, incitement of hatred, and others. (2) Use effective age assurance methods to keep children from pornographic content or gratuitous violence. Specific age assurance methods are not specified. (3) Create reporting and flagging mechanisms to allow users to easily report harmful content (4) Publish an annual action plan outlining how the VSPS will promote media literacy to its users (5) Avoid using children's data for commercial purposes (6) Provide parental controls for harmful content that may affect children under 15","topics":["explicit_or_harmful_content"],"url":"https://www.cnam.ie/app/uploads/2024/11/Coimisiun-na-Mean-Online-Safety-Code.pdf"},{"country":"India","country_code":"IN","effective_date":"Effective May 2027","enactment_status":"active","name":"Digital Personal Data Protection Act & Rules","penalties":{"criminal_penalties":false,"description":"Violators may incur fines up to ₹200 crore (approx. $21 million USD)","max_fine":"Violators may incur fines up to ₹200 crore (approx. $21 million USD)"},"policy_types":["data_protection"],"resources":[{"label":"The Digital Personal Data Protection Act, 2023","url":"https://www.indiacode.nic.in/handle/123456789/22037?view_type=browse"},{"label":"DPDP Rules, 2025","url":"https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf"}],"responsible_parties":["online_services"],"summary":"India's DPDP mirrors COPPA and GDPR. DPDP defines a child as anyone under 18 and requires verifiable parental consent before a child's personal data is processed. Self-declaration is explicitly not sufficient. These rules require companies to implement parental consent workflows, and states that companies are required to verify whether an individual is truly the parent or guardian of a child. The Rules name virtual identity tokens as a way to comply with this rule. The Rule bans targeted advertising to children, behavioral tracking and monitoring of children, and data processing likely to cause harm.","topics":["online_services"],"url":"https://www.indiacode.nic.in/handle/123456789/22037?view_type=browse"},{"country":"Iceland","country_code":"IS","effective_date":"July 15, 2018","enactment_status":"active","name":"Act No. 90/2018 on Data Protection and the Processing of Personal Data","penalties":{"criminal_penalties":false,"description":"Violators may face administrative fines up to ISK 2.4 billion or 4% of worldwide annual turnover, with a lower tier up to ISK 1.2 billion or 2%.","max_fine":"Violators may face administrative fines up to ISK 2.4 billion or 4% of worldwide annual turnover, with a lower tier up to ISK 1.2 billion or 2%."},"policy_types":["data_protection"],"resources":[{"label":"Icelandic Data Protection Act","url":"https://island.is/en/scope-of-the-data-protection-act"},{"label":"GDPR","url":"https://gdpr-info.eu/"}],"responsible_parties":["data_controllers"],"summary":"Iceland is a member of the European Economic Area (EEA) and implemented the GDPR through the Icelandic Data Protection Act. The General Data Protection Regulation (GDPR) is a strict set of data privacy laws for businesses that collect data on EU citizens. Under GDPR, businesses are responsible for safeguarding numerous types of personal information, including Personally Identifiable Information (PII), health data, biometric data, web data, and other personal information such as ethnic origins and political opinions.","topics":["data_privacy"],"url":"https://island.is/en/scope-of-the-data-protection-act"},{"country":"Italy","country_code":"IT","effective_date":"April 2025","enactment_status":"active","name":"Caivano Decree (Law No. 159)","penalties":{"criminal_penalties":false,"description":"Failure to comply can lead to warnings, fines, and ultimately the blocking of the website in Italy.","max_fine":"Failure to comply can lead to warnings, fines, and ultimately the blocking of the website in Italy."},"policy_types":["age_assurance"],"resources":[{"label":"Law No. 159","url":"https://www.gazzettaufficiale.it/eli/id/2023/11/14/23A06292/sg"},{"label":"AGCOM Delibera 96/25/CONS \\(implementation rules\\)","url":"https://www.agcom.it/provvedimenti/delibera-96-25-cons"}],"responsible_parties":["adult_content_sites","video_platforms"],"summary":"The Caivano decree includes multiple child protections laws, including a provision on digital safety for minors that mandates age verification for adult content providers. Chapter 4 states that telecom providers must include parental control applications in service contracts. It also includes a ban on minors accessing pornographic content online, with AGCOM (Italy's communications authority) enforcing age verification for online platforms. AGCOM requires a double-blind, two-step process involving an independent, certified third party-age verifier to guarantee anonymity for the user and for the verifier. The law states that users must be authenticated for every session to prevent a minor from using an already logged in device. AGCOM specifies that systems must be accurate, secure, user friendly, inclusive (non-discriminatory) and must minimize data collection. AGCOM Resolution No. 96/25/CONS includes the detailed technical requirements for age verification","topics":["ai","explicit_or_harmful_content","social_media"],"url":"https://www.gazzettaufficiale.it/eli/id/2023/11/14/23A06292/sg"},{"country":"Italy","country_code":"IT","enactment_status":"proposed","name":"Atto Camera C. 2777 (Social media restriction for under-15s)","penalties":{"criminal_penalties":false,"description":"AGCOM may impose administrative fines of up to 6% of worldwide annual turnover and may order blocking for continued noncompliance.","max_fine":"AGCOM may impose administrative fines of up to 6% of worldwide annual turnover and may order blocking for continued noncompliance."},"policy_types":["age_assurance"],"resources":[{"label":"C. 2777","url":"https://www.camera.it/leg19/126?leg=19&idDocumento=2777"}],"responsible_parties":["social_media"],"summary":"This draft bill would introduce a tiered age structure for access to social media. Under-15s would be banned from creating and accessing social media accounts. Minors between 15 and 17 would be able to access social media with verifiable parental consent. Platforms would be required to enforce maximum privacy and security settings for minors under 18 and restrict exposure to harmful content.","topics":["ai","explicit_or_harmful_content","social_media"],"url":"https://www.camera.it/leg19/126?leg=19&idDocumento=2777"},{"country":"Italy","country_code":"IT","effective_date":"October 10, 2025","enactment_status":"active","name":"Legge 132/2025","penalties":{"criminal_penalties":false,"description":"Sanctions apply under Italy's AI governance and EU AI Act framework; no standalone penalty is specified for the under-14 parental-consent rule.","max_fine":"Sanctions apply under Italy's AI governance and EU AI Act framework; no standalone penalty is specified for the under-14 parental-consent rule."},"policy_types":["age_assurance"],"resources":[{"label":"Legge 132","url":"https://images.processopenaleegiustizia.it/f/sentenze/documento_7cTPl_ppg.pdf"}],"responsible_parties":["online_services"],"summary":"Minors under the age of 14 require consent from the person exercising parental responsibility to access AI technologies and for related personal data processing.","topics":["ai","explicit_or_harmful_content","social_media"],"url":"https://images.processopenaleegiustizia.it/f/sentenze/documento_7cTPl_ppg.pdf"},{"country":"Japan","country_code":"JP","enactment_status":"proposed","name":"Draft Plan for Age Verification on Social Media","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Working group on youth protection","url":"https://www.soumu.go.jp/main_sosiki/kenkyu/digital_shokadai/02ryutsu20_04000001_00013.html"}],"responsible_parties":["online_services"],"summary":"Japan's Ministry of Internal Affairs and Communications released a draft plan for age verification on social media platforms, including requirements for age-based content filtering. The plan includes consideration for age verification systems developed with OS providers and mobile carriers. The government is considering an approach to evaluate social media platforms based on risk and implement safety measures accordingly.","topics":["data_privacy","social_media"],"url":"https://www.soumu.go.jp/main_sosiki/kenkyu/digital_shokadai/02ryutsu20_04000001_00013.html"},{"country":"Japan","country_code":"JP","effective_date":"July 17, 2028","enactment_status":"active","name":"Personal Protection Act of 2026","penalties":{"criminal_penalties":false,"description":"Violators are subject to fines.","max_fine":"Violators are subject to fines."},"policy_types":["data_protection"],"resources":[{"label":"Revised Personal Information Protection Act of 2026","url":"https://www.ppc.go.jp/personalinfo/legal/r8kaiseihogohou/"},{"label":"Partial amendment to the Act on the Protection of Personal Information","url":"https://www.ppc.go.jp/files/pdf/260407_houritsuan.pdf"}],"responsible_parties":["online_services"],"summary":"This bill introduces parental consent requirements for processing sensitive personal data of children under 16.","topics":["data_privacy","social_media"],"url":"https://www.ppc.go.jp/personalinfo/legal/r8kaiseihogohou/"},{"country":"Kenya","country_code":"KE","effective_date":"2019","enactment_status":"active","name":"Data Protection Act 2019","penalties":{"criminal_penalties":false,"description":"Violators may incur administrative fines","max_fine":"Violators may incur administrative fines"},"policy_types":["age_assurance"],"resources":[{"label":"Guidance Notes for Processing of Children's Data","url":"https://www.odpc.go.ke/wp-content/uploads/2025/11/ODPC-%E2%80%93-Guidance-Note-for-Processing-Childrens-Data.pdf"}],"responsible_parties":["data_controllers"],"summary":"The Act states that processing children's data requires explicit consent from a parent. Data controllers and processors are required to implement age verification mechanisms. All methods of age verification must be proportionate, privacy preserving, and adherent to data minimization principles. The guidance includes examples of age verification methods as requiring users to enter their date of birth, using identity documents, implementing age gates or conducting age checks with a secure third-party service.","topics":["age_verification","online_services"],"url":"https://www.odpc.go.ke/wp-content/uploads/2025/11/ODPC-%E2%80%93-Guidance-Note-for-Processing-Childrens-Data.pdf"},{"country":"Kenya","country_code":"KE","effective_date":"April 2025","enactment_status":"active","name":"Industry Guidelines for Child Online Protection and Safety in Kenya","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Industry guidelines for child online protection and safety in Kenya","url":"https://www.ca.go.ke/sites/default/files/2025-04/%20Industry%20Guidelines%20for%20Child%20Online%20Protection%20%28COP%29%20and%20Safety%20in%20Kenya_Apr2025.pdf"}],"responsible_parties":["online_services"],"summary":"Kenya's guidelines for child online protection emphasize safety measures across the information and communication technology sector. Clause 8.2.5 contains an industry guideline for age verification systems. Covered ICT sector participants must adopt heightened default privacy settings for children.","topics":["age_verification","online_services"],"url":"https://www.ca.go.ke/sites/default/files/2025-04/%20Industry%20Guidelines%20for%20Child%20Online%20Protection%20%28COP%29%20and%20Safety%20in%20Kenya_Apr2025.pdf"},{"country":"South Korea","country_code":"KR","effective_date":"October 23, 2025","enactment_status":"active","name":"Game Industry Promotion Act","penalties":{"criminal_penalties":true,"description":"Advertising violations may result in fines up to KRW 10 million. The law also outlines a structure for criminal sanctions for distributing a game without a valid age rating or for failure to comply…","max_fine":"Advertising violations may result in fines up to KRW 10 million. The law also outlines a structure for criminal sanctions for distributing a game without a valid age rating or for failure to comply with a corrective order."},"policy_types":["age_assurance"],"resources":[{"label":"Game Industry Promotion Act","url":"https://elaw.klri.re.kr/eng_service/lawView.do?hseq=49130&lang=ENG"},{"label":"Game industry promotion act was amended to expand regulation of random items","url":"https://www.lexology.com/library/detail.aspx?g=614e2a6c-5904-4c7e-b2b7-6385926c29df"}],"responsible_parties":["online_gaming"],"summary":"The GIPA introduces obligations for minors on gaming platforms. All gaming operators must verify users' real name and ages at account creation, obtain verifiable parental consent before allowing minors to access the platform, and enforce a monthly spending cap (approximately $50 USD) for minor users. In 2023, the National Assembly passed an amendment that expanded the age restriction from 18 years old to 19 years old. The amendment also issued new restrictions on loot boxes and requires game providers to disclose the type of random items available and the probability of obtaining each item by type. Foreign game service providers are required to designate a domestic agent in South Korea to handle reporting and disclosure obligations under GIPA. This law was introduced in 2006 and has been heavily amended since.","topics":["gaming"],"url":"https://elaw.klri.re.kr/eng_service/lawView.do?hseq=49130&lang=ENG"},{"country":"Liechtenstein","country_code":"LI","effective_date":"January 1, 2019","enactment_status":"active","name":"Datenschutzgesetz (Data Protection Act)","penalties":{"criminal_penalties":false,"description":"Violators may face fines up to CHF 22 million or 4% of worldwide annual turnover, with a lower tier up to CHF 11 million or 2%.","max_fine":"Violators may face fines up to CHF 22 million or 4% of worldwide annual turnover, with a lower tier up to CHF 11 million or 2%."},"policy_types":["data_protection"],"resources":[{"label":"Data Protection Act","url":"https://www.datenschutzstelle.li/application/files/4515/8641/2923/DSG_English_final.pdf"},{"label":"Liechtenstein GDPR","url":"https://www.llv.li/en/navigation/footer-nav/privacy-policy"},{"label":"GDPR","url":"https://gdpr-info.eu/"}],"responsible_parties":["online_services"],"summary":"As a member of the European Economic Area (EEA), Liechtenstein implemented EU GDPR through their Data Protection Act.The General Data Protection Regulation (GDPR) is a strict set of data privacy laws for businesses that collect data on EU citizens. Under GDPR, businesses are responsible for safeguarding numerous types of personal information, including Personally Identifiable Information (PII), health data, biometric data, web data, and other personal information such as ethnic origins and political opinions.","topics":["data_privacy"],"url":"https://www.datenschutzstelle.li/application/files/4515/8641/2923/DSG_English_final.pdf"},{"country":"Lithuania","country_code":"LT","enactment_status":"proposed","name":"Proposed social media minimum age of 16 (Project No. XVP-1239)","penalties":{"criminal_penalties":false,"description":"Violators may face administrative fines and structural sanctions.","max_fine":"Violators may face administrative fines and structural sanctions."},"policy_types":["age_assurance"],"resources":[{"label":"Draft law on the protection of minors","url":"https://e-seimas.lrs.lt/portal/legalAct/lt/TAP/39ddd7c0108911f1a9c8d1c199560a47"}],"responsible_parties":["social_media"],"summary":"This proposed bill would prohibit children under 16 from using social media platforms unless they have verified parental consent. Platforms would need to deploy reliable, proportionate, and privacy-preserving age assurance systems.","topics":["social_media"],"url":"https://e-seimas.lrs.lt/portal/legalAct/lt/TAP/39ddd7c0108911f1a9c8d1c199560a47"},{"country":"Luxembourg","country_code":"LU","enactment_status":"proposed","name":"Draft law relating to the protection of minors on social networks","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Draft law relating to the protection of minors on social networks","url":"https://www.chd.lu/en/dossier/8690"}],"responsible_parties":["social_media"],"summary":"This draft bill would ban access to online social network services for any user under 13 years old. Users ages 13 to 15 would be able to access social media upon obtaining verifiable parental consent. Private communication services (messaging apps) are excluded from these restrictions. The bill includes age assurance provisions that would require social networks to verify users' ages with an appropriate degree of reliability for the relevant risk profile.","topics":["social_media"],"url":"https://www.chd.lu/en/dossier/8690"},{"country":"Malta","country_code":"MT","enactment_status":"proposed","name":"Draft social media ban","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Green Paper on social media reform","url":"https://reforms.gov.mt/wp-content/uploads/2025/12/GREEN-PAPER-REFORM-ENG.pdf"}],"responsible_parties":["social_media"],"summary":"In late 2025, Malta’s government launched a Green Paper on social media reform. The consultation explores a mandatory restriction on social media access for children under 13, asks what minimum age and verification measures should apply, and notes that no official legislation has been introduced.","topics":["social_media"],"url":"https://reforms.gov.mt/wp-content/uploads/2025/12/GREEN-PAPER-REFORM-ENG.pdf"},{"country":"Malawi","country_code":"MW","effective_date":"2024","enactment_status":"active","name":"Data Protection Act 2024","penalties":{"criminal_penalties":false,"description":"Penalties may result in fines up to K20,000,000","max_fine":"Penalties may result in fines up to K20,000,000"},"policy_types":["data_protection"],"resources":[{"label":"Data Protection Act 2024","url":"https://www.dpa.mw/wp-content/uploads/2025/02/Data-Protection-Act-2024.pdf"}],"responsible_parties":["online_services"],"summary":"This act establishes a national data protection framework for all Malawians with special provisions for children under 18. Before collecting any personal data, a platform must determine that the user is under 18 and identify the appropriate parent or legal guardian. The law requires data controllers or processors to implement \"appropriate mechanisms to verify the age of the child\" and the identity of the parent or legal guardian providing the consent.","topics":["age_verification","online_services"],"url":"https://www.dpa.mw/wp-content/uploads/2025/02/Data-Protection-Act-2024.pdf"},{"country":"Mexico","country_code":"MX","effective_date":"2014","enactment_status":"active","name":"General Law on the Rights of Children and Adolescents (LGDNNA)","penalties":{"criminal_penalties":false,"description":"Violators may incur fines","max_fine":"Violators may incur fines"},"policy_types":["age_assurance"],"resources":[{"label":"LEY GENERAL DE LOS DERECHOS DE NIÑAS, NIÑOS Y ADOLESCENTES","url":"https://www.diputados.gob.mx/LeyesBiblio/pdf/LGDNNA.pdf"}],"responsible_parties":["online_gaming","social_media"],"summary":"Mexico's LGDNNA is a comprehensive children's rights framework. In addition to recognizing the right to safe internet access, it mandates age verification for video games with adult content. Mexico's senate is currently adding amendments to establish new digital safety obligations for platforms serving children.","topics":["explicit_or_harmful_content","online_services"],"url":"https://www.diputados.gob.mx/LeyesBiblio/pdf/LGDNNA.pdf"},{"country":"Malaysia","country_code":"MY","effective_date":"January 1, 2026","enactment_status":"active","name":"Online Safety Act 2025","penalties":{"criminal_penalties":false,"description":"Failure to comply may result in fines up to MYR 10 million.","max_fine":"Failure to comply may result in fines up to MYR 10 million."},"policy_types":["age_assurance"],"resources":[{"label":"ONSA FAQ","url":"https://www.mcmc.gov.my/skmmgovmy/media/General/pdf2/ONSA-FAQ-English.pdf"},{"label":"Online Safety Act 2025","url":"https://lom.agc.gov.my/act-detail.php?language=BI&act=866"},{"label":"Online Safety Act 2025 (Child Protection Code)","url":"https://www.mcmc.gov.my/skmmgovmy/media/General/pdf2/ONSA-Child-Protection-Code_1.pdf"},{"label":"Online Safety Act 2025: Risk Mitigation Code","url":"https://www.mcmc.gov.my/skmmgovmy/media/General/pdf2/ONSA-Risk-Mitigation-Code_1.pdf"}],"responsible_parties":["internet_service_providers"],"summary":"The Online Safety Act regulates online content deemed harmful. Licensed service providers (including platforms with over 8 million Malaysian users) must enforce age-related restrictions, including identity verification. Key provisions of the act include: (1) Online safety plans. Providers must submit an annual plan to the Malaysian Communications and Multimedia Commission (MCMC) detailing their plan to mitigate harmful content (2) Safety by Design. Platforms must implement tools that allow users to manage their own safety. (3) Age verification to prevent children under 16 from accessing certain social media services (4) AI labeling. Requires platforms to label content generated or manipulated by AI. ONSA does not require any specific type of age assurance technology, however, the Malaysian Communications and Multimedia Commission is exploring potential age verification approaches. Social media age verification rules went into enforcement on June 1, 2026.","topics":["online_services","social_media"],"url":"https://lom.agc.gov.my/act-detail.php?language=BI&act=866"},{"country":"Nigeria","country_code":"NG","effective_date":"June 2023","enactment_status":"active","name":"Nigeria Data Protection Act 2023","penalties":{"criminal_penalties":false,"description":"Up to 2% of annual gross revenue or NGN 10 million","max_fine":"Up to 2% of annual gross revenue or NGN 10 million"},"policy_types":["data_protection"],"resources":[{"label":"Nigerian Data Protection Act, 2023","url":"https://cert.gov.ng/ngcert/resources/Nigeria_Data_Protection_Act_2023.pdf"}],"responsible_parties":["online_gaming","online_services","social_media","video_platforms"],"summary":"This Act requires data controllers to use \"appropriate mechanisms\" to implement age verification for users under 18 to prevent them from accessing harmful content. It explicitly lists the presentation of any government approved identification documents as an appropriate mechanism and requires platforms to take into consideration existing age verification technology.","topics":["age_verification","online_services"],"url":"https://cert.gov.ng/ngcert/resources/Nigeria_Data_Protection_Act_2023.pdf"},{"country":"Netherlands","country_code":"NL","effective_date":"2024","enactment_status":"active","name":"Bundled information regarding legal age limits and online age verification","penalties":{"criminal_penalties":false,"description":"Remote gambling act: basic fine levels can reach €4 million depending on the category of violation. For larger operators fines may be calculated as about 4% of turnover or higher depending on circu…","max_fine":"Remote gambling act: basic fine levels can reach €4 million depending on the category of violation."},"policy_types":["age_assurance"],"resources":[{"label":"Gebundelde informatie rondom wettelijke leeftijdsgrenzen en online leeftijdsverificatie","url":"https://open.overheid.nl/documenten/5e46723f-3980-4d20-986c-dae1cbaad1d5/file"}],"responsible_parties":["adult_content_sites","online_gambling"],"summary":"This government document clarifies legal age limits and online age verification requirements for social media, gambling, and online pornographic content. It states that operators must verify the identity of players and confirm they are over 18 before registration. It explicitly states that the government does not support a blanket age ban for social media.","topics":["explicit_or_harmful_content"],"url":"https://open.overheid.nl/documenten/5e46723f-3980-4d20-986c-dae1cbaad1d5/file"},{"country":"Norway","country_code":"NO","effective_date":"July 20, 2018","enactment_status":"active","name":"Personal Data Act (Norway GDPR)","penalties":{"criminal_penalties":false,"description":"Violators may face fines up to €20 million, or 4% of the firm’s worldwide annual revenue from the preceding financial year, whichever amount is higher","max_fine":"Violators may face fines up to €20 million, or 4% of the firm’s worldwide annual revenue from the preceding financial year, whichever amount is higher"},"policy_types":["data_protection"],"resources":[{"label":"Norway GDPR","url":"https://www.datatilsynet.no/en/regulations-and-tools/regulations/"},{"label":"GDPR","url":"https://gdpr-info.eu/"}],"responsible_parties":["online_services"],"summary":"Norway is a member of the European Economic Area (EEA). The GDPR was incorporated into the EEA agreement and became applicable in Norway through this act in 2018. The General Data Protection Regulation (GDPR) is a strict set of data privacy laws for businesses that collect data on EU citizens. Under GDPR, businesses are responsible for safeguarding numerous types of personal information, including Personally Identifiable Information (PII), health data, biometric data, web data, and other personal information such as ethnic origins and political opinions.","topics":["data_privacy","social_media"],"url":"https://www.datatilsynet.no/en/regulations-and-tools/regulations/"},{"country":"Norway","country_code":"NO","enactment_status":"proposed","name":"Social media ban for Children Under 16","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Press Release: Norwegian social media age restrictions law on track to be introduced this year","url":"https://www.regjeringen.no/en/whats-new/norwegian-social-media-age-restrictions-law-on-track-to-be-introduced-this-year-this-is-how-the-age-limit-for-social-media-will-work/id3157276/"}],"responsible_parties":["social_media"],"summary":"The Norwegian government is planning to submit a bill to Parliament before December 2026 to limit children under 16 from using social media. The draft bill and legislative text have not been finalized.","topics":["data_privacy","social_media"]},{"country":"New Zealand","country_code":"NZ","enactment_status":"proposed","name":"Social Media (Age-Restricted Users) Bill","penalties":{"criminal_penalties":false,"description":"The maximum penalty is NZD $2,000,000","max_fine":"The maximum penalty is NZD $2,000,000"},"policy_types":["age_assurance"],"resources":[{"label":"Social Media \\(Age-Restricted Users\\) Bill","url":"https://www.legislation.govt.nz/bill/members/2025/216/en/latest/#LMS1536436"}],"responsible_parties":["social_media"],"summary":"The Bill mandates that social media platforms implement age verification measures to prevent under-16s from creating accounts. It introduces regulatory oversight to ensure compliance and to penalize non-compliant platforms. The law mandates that platforms take \"reasonable steps\" to prevent age-restricted users from creating or having accounts, but does not mandate a specific age assurance technology. Platforms must balance effectiveness with privacy.","topics":["social_media"],"url":"https://www.legislation.govt.nz/bill/members/2025/216/en/latest/#LMS1536436"},{"country":"Panama","country_code":"PA","enactment_status":"proposed","name":"Bill No. 426 on digital safety for minors","penalties":{"criminal_penalties":false,"description":"Not specified","max_fine":"Not specified"},"policy_types":["age_assurance"],"resources":[{"label":"Subcommittee to analyze bill proposing limits on minors' access to social media","url":"https://www.laestrella.com.pa/panama/nacional/subcomision-analizara-proyecto-que-propone-limites-al-acceso-de-menores-a-redes-sociales-PE16742940"}],"responsible_parties":["social_media"],"summary":"This proposed bill would prohibit under 16s from creating accounts on social media platforms without age assurance and parental consent, which includes both consent to use the platform as well as controls to manage usage time and privacy. It also introduces a 'safety by default' principle that would require the highest privacy settings by default for minors.","topics":["social_media"]},{"country":"Peru","country_code":"PE","enactment_status":"proposed","name":"Law for the Protection and Digital Wellbeing of Children and Adolescents in Digital Environments and Online Services (Bill No. 10880/2024-CR)","penalties":{"criminal_penalties":false,"description":"A first infraction may incur a fine of up to 5% of the company's annual turnover in Peru. The law also includes fines for VPN providers that fail to restrict the inappropriate use of their services…","max_fine":"A first infraction may incur a fine of up to 5% of the company's annual turnover in Peru. The law also includes fines for VPN providers that fail to restrict the inappropriate use of their services by minors."},"policy_types":["age_assurance"],"resources":[{"label":"Draft law on the protection of children and adolescents in digital environments","url":"https://api.congreso.gob.pe/spley-portal-service/archivo/MjgwNzUw/pdf"}],"responsible_parties":["social_media"],"summary":"This proposed bill would prohibit under-16s from creating social media accounts and limit non-educational screen time for minors to a maximum of two hours daily. It would also require social media platforms to implement reliable, secure, and effective age verification systems using biometric, documentary, or digital certificate methods. Targeted advertising to minors (under 18) based on their personal data is prohibited.","topics":["social_media"],"url":"https://api.congreso.gob.pe/spley-portal-service/archivo/MjgwNzUw/pdf"},{"country":"Philippines","country_code":"PH","enactment_status":"proposed","name":"Social media age restriction","penalties":{"criminal_penalties":false,"description":"Not yet announced","max_fine":"Not yet announced"},"policy_types":["age_assurance"],"resources":[{"label":"Senate Bill 40,","url":"https://legacy.senate.gov.ph/lis/bill_res.aspx?congress=20&q=SBN-40"},{"label":"Senate Bill 185","url":"https://legacy.senate.gov.ph/lis/bill_res.aspx?congress=20&q=SBN-185"},{"label":"Senate Bill 595","url":"https://legacy.senate.gov.ph/lis/bill_res.aspx?congress=20&q=SBN-595"},{"label":"Senate Bill 601","url":"https://legacy.senate.gov.ph/lis/bill_res.aspx?congress=20&q=SBN-601"},{"label":"Senate Bill 1735,","url":"https://legacy.senate.gov.ph/lis/bill_res.aspx?congress=20&q=SBN-1735"},{"label":"House Bill 8193","url":"https://docs.congress.hrep.online/legisdocs/basic_20/HB08193.pdf"},{"label":"House Bill 8262","url":"https://docs.congress.hrep.online/legisdocs/basic_20/HB08262.pdf"}],"responsible_parties":["social_media"],"summary":"Multiple bills requiring social media age restrictions have been proposed in Congress, however, none have yet passed into law. Five Senate bills and two House bills have been introduced that would ban minors from social media at different age ranges (under 18, under 16, under 13, and under 12).","topics":["social_media"]},{"country":"Pakistan","country_code":"PK","effective_date":"January 2025","enactment_status":"active","name":"Prevention of Electronic Crimes Act (PECA)","penalties":{"criminal_penalties":true,"description":"The SMPRA can issue directives to block or remove unlawful content from social media platforms. Perpetuating \"false and fake information\" is a criminal offense and includes a penalty of three years…","max_fine":"The SMPRA can issue directives to block or remove unlawful content from social media platforms. Perpetuating \"false and fake information\" is a criminal offense and includes a penalty of three years' imprisonment and fines of up to 2 million rupees."},"policy_types":["age_assurance"],"resources":[{"label":"2025 amendments to the Provision of Electronic Crimes Act, 2026","url":"https://rsilpak.org/2025/2025-amendments-to-the-prevention-of-electronic-crimes-act-2016-an-introduction/#:~:text=The%20SMPRA%20shall%20be%20a,enlistment'%20of%20social%20media%20platforms"}],"responsible_parties":["social_media"],"summary":"The PECA is Pakistan's law on cybersecurity and online crimes. In 2025, Pakistan added several amendments with new regulation for social media platforms, including the creation of the Social Media Protection and Regulatory Authority (SMPRA). Social media platforms must now register with the SMPRA and implement online safety measures.","topics":["explicit_or_harmful_content","online_services","social_media"],"url":"https://rsilpak.org/2025/2025-amendments-to-the-prevention-of-electronic-crimes-act-2016-an-introduction/#:~:text=The%20SMPRA%20shall%20be%20a,enlistment"},{"country":"Pakistan","country_code":"PK","enactment_status":"proposed","name":"Personal Data Protection Bill","penalties":{"criminal_penalties":false,"description":"Not yet announced","max_fine":"Not yet announced"},"policy_types":["data_protection"],"resources":[{"label":"Pakistan: Overview of its Draft Data Protection Act, 2023","url":"https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4667042"}],"responsible_parties":["online_services"],"summary":"Pakistan's proposed Personal Data Protection Bill includes safeguards for children's data. It specifies that before processing any data related to a child, a data controller must verify the child's age and seek parental consent from the child's parents, not process data likely to cause the child harm, and not subject the child to tracking, behavioral monitoring, or targeted advertising.","topics":["explicit_or_harmful_content","online_services","social_media"],"url":"https://iclg.com/practice-areas/data-protection-laws-and-regulations/pakistan"},{"country":"Poland","country_code":"PL","enactment_status":"proposed","name":"Draft social media age restriction","penalties":{"criminal_penalties":false,"description":"Companies may be fined up to 6% of their turnover","max_fine":"Companies may be fined up to 6% of their turnover"},"policy_types":["age_assurance"],"resources":[{"label":"Reuters: Polish ruling party plans social media ban for children under 15","url":"https://www.reuters.com/business/media-telecom/poland-plans-social-media-ban-children-under-15-bloomberg-news-reports-2026-02-27/"}],"responsible_parties":["social_media"],"summary":"Poland recently announced plans to draft legislation restricting children under 15 from social media platforms.","topics":["explicit_or_harmful_content","social_media"]},{"country":"Poland","country_code":"PL","effective_date":"12 months after publication in the Journal of Laws","enactment_status":"proposed","name":"Draft Act on the Protection of Minors against Access to Pornographic Content on the Internet","penalties":{"criminal_penalties":false,"description":"Fines up to PLN 1,000,000 for failure to implement age verification","max_fine":"Fines up to PLN 1,000,000 for failure to implement age verification"},"policy_types":["age_assurance"],"responsible_parties":["adult_content_sites","online_services"],"summary":"Poland's draft bill requires digital service providers to implement effective age verification mechanisms to prevent minors under 18 from accessing pornographic content online.","topics":["explicit_or_harmful_content","social_media"],"url":"https://www.gov.pl/web/premier/projekt-ustawy-o-ochronie-maloletnich-przed-dostepem-do-tresci-pornograficznych-w-internecie"},{"country":"Portugal","country_code":"PT","enactment_status":"proposed","name":"Projeto de Lei nº 398/XVII/1ª -- Measures for Protection of Children in Digital Environments","penalties":{"criminal_penalties":false,"description":"Companies face up to €2M or up to 2% of annual worldwide turnover, whichever is higher","max_fine":"Companies face up to €2M or up to 2% of annual worldwide turnover, whichever is higher"},"policy_types":["age_assurance"],"resources":[{"label":"Projeto de Lei nº 398/XVII/1ª Reuters: Portugal approves restrictions on social media access for children","url":"https://www.reuters.com/world/europe/portugal-approves-restrictions-social-media-access-children-2026-02-12/"}],"responsible_parties":["online_services"],"summary":"This bill would establish a minimum digital age of 16. Children under 13 are prohibited from accessing social media and digital platforms entirely, while children aged 13-15 may access only with verified parental consent. Self-declaration is explicitly prohibited. Platforms must implement age verification compatible with Portugal's Chave Móvel Digital, the EU digital identity wallet, or equivalent privacy-preserving systems (including zero-knowledge proofs). The proposal received first stage parliamentary approval in February 2026. Key platform obligations include: - Age verification for all users before granting access - Safe default settings for under-16 accounts: private profile, non-searchable, hidden social metrics, age-appropriate algorithmic recommendations - Prohibition of addictive design for under-16 accounts: autoplay, infinite scroll, loot boxes, non-essential notifications - Parental control panel for setting time limits, monitoring suspicious contacts, and adjusting privacy settings - Grooming and cyberbullying protections: automatic blocking of violent/sexual content, suspicious contact detection, 24-hour response to reports involving children - High-risk content providers (violent, sexual, addictive) must prevent children's access or face access suspension in Portugal.","topics":["social_media"],"url":"https://app.parlamento.pt/webutils/docs/doc.pdf?path=effQ8LlsUxFfUEOBQ0vksWyVrrpwRA4DQlt6D%252fZo0aAOlAGoi5wwp79ZZdh34xpHGnl%252bQoWwhDjSDZHV%252bmCeL41jomz9q1FuvS1PFB00WbG3UaeTk%252b5uy4XCpfDQgEk%252bw%252bGu95BB%252bHndk2Fn40GFOcUVXRQ2znpHTL6IfACx0dC%252fr5X4B1o8pkEDPGZRfMHPJUxdmJyvRm92AF5k7sL%252fKLsh0DSQTwsaFsk10cdgjRTzJJLfCAzQ38qxZqB%252fPd3b0MkU%252fgbYK5IWL1MGIYO5oewhYjNI0WG6IVDv2D1KTUeO4NkJUgSDXIaoQkFRi8ZzxsJSEGSOPyLheDm9LMLjW%252bUD%252fpQz0PY0I7Rz5vQQNy8%253d&fich=55e6d2f3-1519-4120-8c31-a4056a9509fd.docx&Inline=true"},{"country":"Paraguay","country_code":"PY","enactment_status":"proposed","name":"Ley N° 5653/2016 (social media ban for children under 16)","penalties":{"criminal_penalties":false,"description":"Not specified","max_fine":"Not specified"},"policy_types":["age_assurance"],"resources":[{"label":"Expediente S-2503075","url":"https://silpy.congreso.gov.py/web/descarga/expediente-191031?preview"}],"responsible_parties":["social_media"],"summary":"Paraguay is debating a bill amending Ley 5653 that would ban children under 16 from creating social media accounts. Adolescents aged 16-17 may only create social media accounts with verifiable consent from a parent or guardian. Platforms would be required to implement highly effective age verification systems to prevent access and account creation by children under 16. Age verification procedures must adhere to data minimization principles, and platforms must delete personal information immediately after the verification purpose has been fulfilled.","topics":["social_media"],"url":"https://silpy.congreso.gov.py/web/descarga/expediente-191031?preview"},{"country":"Qatar","country_code":"QA","enactment_status":"proposed","name":"Draft Law on the Digital Protection of Children","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Shura Council Debates Child Digital Protection Proposal","url":"https://www.lexisnexis.com/blogs/ae-legal/b/insights/posts/qatar-shura-council-debates-child-digital-protection-proposal"}],"responsible_parties":["social_media"],"summary":"Qatar's draft law would enact new restrictions on social media and digital platform use for children under 16.","topics":["online_services","social_media"]},{"country":"Romania","country_code":"RO","enactment_status":"proposed","name":"Digital Age of Majority Law (L190/2025)","penalties":{"criminal_penalties":false,"description":"Violators may incur fines of up to 0.4% of national turnover.","max_fine":"Violators may incur fines of up to 0.4% of national turnover."},"policy_types":["age_assurance"],"resources":[{"label":"L190/2025","url":"https://www.senat.ro/legis/lista.aspx?nr_cls=L190&an_cls=2025"}],"responsible_parties":["online_services"],"summary":"This proposed law establishes that children under 16 may only access online services and create personal accounts if verifiable parental consent is given. Online service providers must implement mechanisms for verifying users' identity and age within 180 days of the law's publication. For existing accounts belonging to children, providers must obtain parental consent or block the accounts. This draft bill has not received final approval.","topics":["age_verification"],"url":"https://www.senat.ro/legis/lista.aspx?nr_cls=L190&an_cls=2025"},{"country":"Rwanda","country_code":"RW","effective_date":"January 2024","enactment_status":"active","name":"Ministerial Instruction on Child Online Protection","penalties":{"criminal_penalties":false,"description":"Violators may incur fines or regulatory sanctions","max_fine":"Violators may incur fines or regulatory sanctions"},"policy_types":["age_assurance"],"resources":[{"label":"Ministerial Instruction on Child Online Protection","url":"https://www.minijust.gov.rw/index.php?eID=dumpFile&t=f&f=91546&token=d5eb7096a06042554606ab1c4fac9b87b9de3c2e"}],"responsible_parties":["internet_service_providers"],"summary":"Rwanda recently implemented safeguards to establish responsibilities for mitigating online harm to children. Digital content providers/ISPs must implement age verification mechanisms to prevent children from accessing age-inappropriate content","topics":["age_verification","online_services","social_media"],"url":"https://www.minijust.gov.rw/index.php?eID=dumpFile&t=f&f=91546&token=d5eb7096a06042554606ab1c4fac9b87b9de3c2e"},{"country":"Rwanda","country_code":"RW","enactment_status":"proposed","name":"Draft social media age restriction bill","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Rwanda considers restricting social media use for children under 16","url":"https://www.newtimes.co.rw/article/35253/news/health/rwanda-considers-restricting-social-media-use-for-children-under-16"}],"responsible_parties":["social_media"],"summary":"Rwanda's Ministry of Education and Ministry of Information & Communication Technology announced plans to draft legislation to restrict social media access for children under 16.","topics":["age_verification","online_services","social_media"]},{"country":"Sweden","country_code":"SE","enactment_status":"proposed","name":"Age limit for children's access to social media (report)","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Report: An age limit for children's access to social media","url":"https://www.regeringen.se/rattsliga-dokument/statens-offentliga-utredningar/2026/06/sou-202635/"},{"label":"Reuters: Sweden weighs social media age limit of 15","url":"https://www.reuters.com/business/media-telecom/sweden-weighs-social-media-age-limit-15-2026-06-02/"}],"responsible_parties":["social_media"],"summary":"A government-appointed commission delivered an interim report recommending that Sweden introduce a minimum age of 15 for social media. No formal legislation has yet been proposed.","topics":["social_media"],"url":"https://www.regeringen.se/rattsliga-dokument/statens-offentliga-utredningar/2026/06/sou-202635/"},{"country":"Singapore","country_code":"SG","effective_date":"March 2025","enactment_status":"active","name":"Code of Practice for Online Safety - App Distribution Services","penalties":{"criminal_penalties":false,"description":"ADSs that do not comply may be fined up to S$1 million or blocked under the Broadcasting Act. If the offense continues, the ADS may be fined up to S$100,000 a day.","max_fine":"ADSs that do not comply may be fined up to S$1 million or blocked under the Broadcasting Act. If the offense continues, the ADS may be fined up to S$100,000 a day."},"policy_types":["age_assurance"],"resources":[{"label":"Infocomm Media Development Authority: Code of Practice for Online Safety - App Distribution Services App stores curb underage access to adult content","url":"https://singaporelegaladvice.com/law-articles/app-stores-curb-underage-access-adult-content/#:~:text=For%20example%2C%20if%20the%20ADS,of%20exposure%20to%20detrimental%20content"},{"label":"New Online Safety Code of Practice for App Distribution Services Enhances Protections for Singapore Users","url":"https://www.imda.gov.sg/resources/press-releases-factsheets-and-speeches/press-releases/2025/online-safety-code-of-practice-for-app-distribution-services"}],"responsible_parties":["app_stores"],"summary":"The Code specifies that App Distribution Services (ADSs) must implement system-level age assurance to prevent users under 18 from downloading age-inappropriate apps. The regulation targets apps rated 18+ or categorized as harmful content. The six categories of harmful content are: Sexual content, violent content, suicide and self-harm content, cyberbullying content, content endangering public health, content facilitating vice and organized crime. Key features of the code include: 1. Content guidelines and moderation measures 2. Removing harmful content from ADSs 3. Prohibiting harmful advertising towards children 4. Restricting children's access to harmful content, including differentiated accounts with robust settings to reduce risks of harm 5. Implementing age assurance measures. ADSs must have a system of age assurance/verification to determine the age or age range of account users 6. Tools and resources for parents The code is enforced by the Singapore Infocomm Media Development Authority.","topics":["app_stores","explicit_or_harmful_content","online_services","social_media"],"url":"https://www.imda.gov.sg/-/media/imda/files/regulations-and-licensing/regulations/codes-of-practice/code-of-practice-app-distribution-services/code-of-practice-for-online-safety-app-distribution-services.pdf"},{"country":"Singapore","country_code":"SG","effective_date":"March 2024","enactment_status":"active","name":"Personal Data Protection Act (PDPA)","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["data_protection"],"resources":[{"label":"PDPA Overview Advisory guidelines on the PDPA for Children's personal data in the digital environment","url":"https://www.pdpc.gov.sg/-/media/files/pdpc/pdf-files/advisory-guidelines/advisory-guidelines-on-the-pdpa-for-children's-personal-data-in-the-digital-environment_mar24.pdf"}],"responsible_parties":["online_services"],"summary":"Singapore's Data Protection Commission published a set of advisory guidelines on children's personal data to clarify how the PDPA applies to under-18s. The guidelines are not legally binding. They establish a two-tier consent framework, where under-13s require parental/guardian consent while minors aged 13-17 may consent as long as notices are easy for children to understand. They also encourage age assurance methods to protect children and their data.","topics":["app_stores","explicit_or_harmful_content","online_services","social_media"],"url":"https://www.pdpc.gov.sg/overview-of-pdpa/the-legislation/personal-data-protection-act"},{"country":"Singapore","country_code":"SG","effective_date":"June 29, 2026","enactment_status":"active","name":"Online Safety (Relief and Accountability) Bill","penalties":{"criminal_penalties":false,"description":"Platforms can face fines of up to S$500,000 plus S$50,000 a day for continued non-compliance, and noncompliant apps may be blocked or removed","max_fine":"Platforms can face fines of up to S$500,000 plus S$50,000 a day for continued non-compliance, and noncompliant apps may be blocked or removed"},"policy_types":["age_assurance"],"resources":[{"label":"Online Safety \\(Relief and Accountability\\) Bill","url":"https://sso.agc.gov.sg/Bills-Supp/18-2025/Published/20251015?DocDate=20251015"},{"label":"Online Safety Commission and Online Safety \\(Relief and Accountability\\) Act 2025 to Start on 29 June 2026","url":"https://www.mlaw.gov.sg/online-safety-commission-and-online-safety-relief-and-accountability-act-2025-to-start-on-29-june-2026/"}],"responsible_parties":["online_services"],"summary":"The bill aims to improve online safety in Singapore by preventing online harm and holding platforms accountable. It will establish a Commissioner of Online Safety to enforce new online safety regulations. The Commissioner can direct platforms to remove harmful content or disable accounts. The bill outlines 13 categories of online harms, including harassment, online impersonation, and incitement of violence.","topics":["app_stores","explicit_or_harmful_content","online_services","social_media"],"url":"https://sso.agc.gov.sg/Bills-Supp/18-2025/Published/20251015?DocDate=20251015"},{"country":"Slovenia","country_code":"SI","enactment_status":"proposed","name":"Draft social media ban","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Slovenia prepares legislation to ban social media for under-15s","url":"https://www.reuters.com/world/europe/slovenia-preparing-law-ban-access-social-media-minors-under-15-2026-02-05/"}],"responsible_parties":["social_media"],"summary":"In February 2026, the Slovenian government announced it would prepare legislation to ban social media for under-15s","topics":["social_media"]},{"country":"Slovakia","country_code":"SK","effective_date":"July 2024","enactment_status":"active","name":"Law on Media Services (Law No. 264/2022)","penalties":{"criminal_penalties":false,"description":"Digital platforms and intermediaries are subject to fines under the European Digital Services Act, which can reach up to 6% of the provider's global annual turnover.","max_fine":"Digital platforms and intermediaries are subject to fines under the European Digital Services Act, which can reach up to 6% of the provider's global annual turnover."},"policy_types":["age_assurance"],"resources":[{"label":"Slovakia Law 264/2022 Digital Policy Alert: Slovakia","url":"https://digitalpolicyalert.org/event/28951-law-no-2642022-on-media-services-including-content-moderation-regulation-enters-into-force"}],"responsible_parties":["video_platforms"],"summary":"Slovakia's Law on Media Services requires video-sharing platforms to take appropriate measures to restrict minors from content that may impair their physical, mental, or moral development. These measures include age verification systems, parental controls, and user reporting tools.","topics":["explicit_or_harmful_content"],"url":"https://www.slov-lex.sk/ezbierky/pravne-predpisy/SK/ZZ/2022/264/20240724.html#error=login_required&state=3bc7945c-4a8a-4a83-b8d6-8a2df05daebf"},{"country":"Thailand","country_code":"TH","enactment_status":"proposed","name":"Emergency Decree on Prevention and Suppression of Technological Crimes","penalties":{"criminal_penalties":false,"description":"Violators bear joint civil liability for damages suffered by victims of technological crimes committed on their platforms.","max_fine":"Violators bear joint civil liability for damages suffered by victims of technological crimes committed on their platforms."},"policy_types":["age_assurance"],"resources":[{"label":"Draft announcement of the National Cyber Crime Commission regarding measures to prevent cybercrime Thailand: Social media safe harbor rules underway","url":"https://www.bakermckenzie.com/en/insight/publications/2026/02/thailand-social-media-safe-harbor-rules-underway"}],"responsible_parties":["social_media"],"summary":"In early 2026, the Thai Electronic Transactions Development Agency (ETDA) released a draft notification that would require all social media platforms to implement identity verification for every user account. It would also require social media providers to verify risky advertisers (based on behavior, ad content, or target audience) by using government issued ID documents.","topics":["social_media"],"url":"https://law.go.th/listeningDetail?survey_id=NjQ0MERHQV9MQVdfRlJPTlRFTkQ%3D"},{"country":"Türkiye","country_code":"TR","enactment_status":"proposed","name":"Draft Law on the Protection of Children and Young People in the Digital Environment","penalties":{"criminal_penalties":false,"description":"Fines may range from TRY 1 million to TRY 5 million.","max_fine":"Fines may range from TRY 1 million to TRY 5 million."},"policy_types":["age_assurance"],"resources":[{"label":"Legislative proposal regarding the protection of children and youth in the digital environment New Turkish digital child protection law on the horizon","url":"https://www.lexology.com/library/detail.aspx?g=4550c8a6-5e5a-494b-ad6b-b6a9abb7248d"}],"responsible_parties":["online_services"],"summary":"Turkey recently introduced legislation intended to align with international standards for child protection. The Draft Law applies to online content providers, including social media, gaming platforms, gambling authorities, and others. It mandates that social networks establish and maintain age verification systems. Network providers must protect the psychological development of users, refrain from promoting addictive algorithms, and implement parent-controlled safe search. Digital content providers must also classify their content into age categories (i.e. 6+, 12+, 18+) and include age-appropriate and time-limit mechanisms. Children under 16 may not spend more than 55 minutes daily on digital platforms and online games.","topics":["online_services","social_media"],"url":"https://cdn.tbmm.gov.tr/KKBSPublicFile/D28/Y4/T2/WebOnergeMetni/3c6eab50-1fb7-4f31-be88-8280e370eca6.pdf"},{"country":"Türkiye","country_code":"TR","effective_date":"November 1, 2026","enactment_status":"in_progress","name":"Law No. 7578 Amending the Social Services Law and Certain Laws","penalties":{"criminal_penalties":false,"description":"Violators are subject to fines","max_fine":"Violators are subject to fines"},"policy_types":["age_assurance"],"resources":[{"label":"Law on Amending the Social Services Law","url":"https://cdn.tbmm.gov.tr/KKBSPublicFile/D28/Y4/KanunMetni/9bf93173-7648-4771-ab36-0e45666c423d.htm"},{"label":"Reuters: Turkey passes law banning social media use for under-15s","url":"https://www.reuters.com/business/media-telecom/turkey-passes-law-banning-social-media-use-under-15s-2026-04-24/"}],"responsible_parties":["online_gaming","social_media"],"summary":"In April 2026, Turkiye amended its Social Services Law to ban the use of social media by children under 15 and require parental control tools, which include mechanisms to check account settings, limit usage time, and approve fee-based transactions. The law also covers gaming platforms in addition to social media sites, specifying that they must remove age inappropriate content for games that are not properly rated. Platforms are required to implement necessary age verification measures to ensure they do not provide services to users under 15. Social media platforms must also offer a segregated service for children over 15.","topics":["online_services","social_media"],"url":"https://cdn.tbmm.gov.tr/KKBSPublicFile/D28/Y4/KanunMetni/9bf93173-7648-4771-ab36-0e45666c423d.htm"},{"country":"Vietnam","country_code":"VN","effective_date":"December 31, 2025","enactment_status":"active","name":"Directive No. 57","policy_types":["age_assurance"],"resources":[{"label":"Directive 57","url":"https://www.vietnam.vn/en/chi-thi-57-ct-tw-cua-ban-bi-thu-ve-tang-cuong-bao-dam-an-ninh-mang-bao-mat-thong-tin-an-ninh-du-lieu-trong-he-thong-chinh-tri"}],"responsible_parties":["internet_service_providers","social_media"],"summary":"Directive No. 57 requires universal identity authentication for all social media users, telecom subscribers, and internet resources (IP addresses, domain names, etc). The directive requires social media platforms to eliminate anonymous accounts and to introduce age assurance to protect minors.","topics":["data_privacy","online_services","social_media","social_media"],"url":"https://www.vietnam.vn/en/chi-thi-57-ct-tw-cua-ban-bi-thu-ve-tang-cuong-bao-dam-an-ninh-mang-bao-mat-thong-tin-an-ninh-du-lieu-trong-he-thong-chinh-tri"},{"country":"Vietnam","country_code":"VN","effective_date":"December 25, 2024","enactment_status":"active","name":"Decree No. 147/2024/ND-CP","penalties":{"criminal_penalties":false,"description":"Non-compliant platforms may be subject to 3-month service suspensions, license revocations, and any technical measures that block platforms from being accessed","max_fine":"Non-compliant platforms may be subject to 3-month service suspensions, license revocations, and any technical measures that block platforms from being accessed"},"policy_types":["age_assurance"],"resources":[{"label":"Decree No. 147/2024/ND-CP","url":"https://www.qtsc.com.vn/uploads/files/2024/12/30/147_2024_ND-CP_636187-eng.pdf"}],"responsible_parties":["online_services"],"summary":"All social media users must authenticate their identities via a verified phone number or national ID number. Users under 16 must authenticate using their parent or guardian's identity credentials. Only authenticated accounts can post, comment, share, or livestream.","topics":["data_privacy","online_services","social_media","social_media"],"url":"https://www.qtsc.com.vn/uploads/files/2024/12/30/147_2024_ND-CP_636187-eng.pdf"},{"country":"Vietnam","country_code":"VN","effective_date":"January 1, 2026","enactment_status":"active","name":"Law on Personal Data Protection (PDPL) No.91/2025/QH15","penalties":{"criminal_penalties":false,"description":"Violators are subject to fines with a maximum of 3 billion VND.","max_fine":"Violators are subject to fines with a maximum of 3 billion VND."},"policy_types":["data_protection"],"resources":[{"label":"Law No. 91/2025/QH15 of the National Assembly: Law on Personal Data Protection","url":"https://chinhphu.vn/?pageid=27160&docid=214590&classid=1&typegroupid=3"}],"responsible_parties":["online_services"],"summary":"Article 29 of Vietnam's personal data protection law outlines key responsibilities of social media platforms and online media services regarding the protection of personal data. Services are explicitly forbidden from requiring images or videos of full or partial identity documents (e.g. ID cards, passports) as a condition for account authentication.","topics":["data_privacy","online_services","social_media","social_media"],"url":"https://chinhphu.vn/?pageid=27160&docid=214590&classid=1&typegroupid=3"},{"country":"Vietnam","country_code":"VN","enactment_status":"proposed","name":"Draft decree on social media restrictions for under-16s","penalties":{"criminal_penalties":false,"description":"N/A","max_fine":"N/A"},"policy_types":["age_assurance"],"resources":[{"label":"Draft Decree","url":"https://abei.gov.vn/2026/News/202615/Superadmin/1-du-thao-nghi-dinh.pdf"},{"label":"Vietnam proposes banning under-16s from posting on social media","url":"https://www.reuters.com/legal/litigation/vietnam-proposes-banning-under-16s-posting-social-media-2026-07-24/"}],"responsible_parties":["social_media"],"summary":"This draft decree would require social media accounts for users under 16 to be registered using a parent’s or guardian’s information and supervised by that adult. It would prohibit under-16 users from posting or interacting on social media and require default high privacy settings and restrictions on harmful content. It would amend the existing Decree No. 147/2024/ND-CP.","topics":["data_privacy","online_services","social_media","social_media"],"url":"https://abei.gov.vn/2026/News/202615/Superadmin/1-du-thao-nghi-dinh.pdf"}]}