Congress mandates age tracking on all devices—to protect kids from ads

What it does

This bill requires operating system providers (Apple, Google, Microsoft, etc.) to collect users' dates of birth and classify them into age brackets (under 13, 13–15, 16, 17+), then share that age bracket data with app developers, app stores, and websites via encrypted signals that reveal only the age range—not the actual birthdate. It bans targeted advertising and data sales to children, requires parental linking for under-17 users, and imposes civil penalties ($2,500–$7,500 per violation, multiplied by number of children affected) for violations. The FTC and state attorneys general enforce it.

Why we flagged it

The bill's core mechanism is a mandatory age-verification and age-bracket-sharing system for all digital platforms, paired with restrictions on child-targeted advertising and data sales. It is primarily a privacy and child-protection measure, though it creates significant infrastructure and compliance obligations.

What the text implies

• Mandates that all operating systems collect and retain age data on every user, creating a permanent, centralized age-verification database that could be repurposed by government or law enforcement if legal standards shift.
• Compliance burden falls heaviest on smaller developers and startups; large platforms (Apple, Google, Meta) can absorb costs and may gain competitive advantage by controlling the age-verification infrastructure.

The full analysis lists 5 implications of this text.

Who stands to gain

Large technology platforms (Apple, Google, Microsoft) with existing infrastructure to absorb complia; Identity verification and age-assurance technology vendors; Cybersecurity and cryptography firms providing zero-knowledge proof infrastructure