Congress mandates age tracking on all devices—to protect kids from ads

What it does

This bill requires operating system providers (Apple, Google, Microsoft, etc.) to collect users' dates of birth and classify them into age brackets (under 13, 13–15, 16, 17+), then share that age bracket data with app developers, app stores, and websites via encrypted signals that reveal only the age range—not the actual birthdate. It bans targeted advertising and data sales to children, requires parental linking for under-17 users, and imposes civil penalties ($2,500–$7,500 per violation, multiplied by number of children affected) for violations. The FTC and state attorneys general enforce it.

Why we flagged it

The bill's core mechanism is a mandatory age-verification and age-bracket-sharing system for all digital platforms, paired with restrictions on child-targeted advertising and data sales. It is primarily a privacy and child-protection measure, though it creates significant infrastructure and compliance obligations.

What the text implies

• Mandates that all operating systems collect and retain age data on every user, creating a permanent, centralized age-verification database that could be repurposed by government or law enforcement if legal standards shift.
• Compliance burden falls heaviest on smaller developers and startups; large platforms (Apple, Google, Meta) can absorb costs and may gain competitive advantage by controlling the age-verification infrastructure.
• The 18-month implementation timeline is aggressive; technical failures and interoperability gaps may force platforms to over-collect personal data or use less privacy-preserving methods (e.g., facial age estimation) despite the bill's stated prohibition.
• Parental linking requirement for under-17 users may chill speech and privacy for older teens (16–17) who are legally independent in many contexts but are still subject to parental oversight under this bill.
• The bill does not explicitly address cross-border data flows; age bracket data could be shared with international platforms or advertisers, creating enforcement gaps.

Section numbers refer to the bill text the analysis read — linked under Primary records below.

Who it affects

The bill creates real protections for children: it bans targeted advertising and data monetization of minors, and uses privacy-preserving cryptography (zero-knowledge proofs) to avoid exposing exact birthdates. However, it mandates that operating systems collect and retain age data on all users, creates a centralized age-verification infrastructure that could be repurposed, and imposes compliance burdens that may disadvantage smaller developers and startups, potentially concentrating power among

Who stands to gain

• Large technology platforms (Apple, Google, Microsoft) with existing infrastructure to absorb complia
• Identity verification and age-assurance technology vendors
• Cybersecurity and cryptography firms providing zero-knowledge proof infrastructure

Named in the bill

Federal Trade Commission (FTC), Operating system providers (Apple, Google, Microsoft), Application developers and app stores, Browser providers, Covered internet website operators, State attorneys general, Children (under 17), Parents and legal guardians

Where it stands

3 cosponsors: 2 Republicans, 1 Democrats.

• Jul 22, 2026 — Introduced · Congress.gov: “Introduced in Senate”
• Jul 22, 2026 — Referred to Senate Committee on Commerce, Science, and Transportation · Congress.gov: “Read twice and referred to the Committee on Commerce, Science, and Transportation”

Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.