The Digital Age Assurance Act of 2026 mandates that operating systems verify user ages and provide secure, privacy-focused age-bracket signals to apps and websites to protect minors from targeted advertising and inappropriate content.
Andy Kim
Senator
NJ
The Digital Age Assurance Act of 2026 mandates that operating system providers verify user ages and share standardized age-bracket data with apps, browsers, and websites to enforce age-appropriate access. The bill prohibits targeted advertising and data monetization directed at children under 17 while establishing strict privacy protections and data minimization requirements. Enforcement is overseen by the Federal Trade Commission and state attorneys general, with additional provisions to prevent anticompetitive practices in the digital marketplace.
Digital Age Assurance Act Mandates OS-Level Age Verification and Bans Targeted Ads for Minors by 2027.
The Digital Age Assurance Act of 2026 is a major attempt to rewire how the internet treats kids and teens. The core of the bill is a new 'age signal' system: instead of every app and website asking for your ID, your phone or computer’s operating system (think Apple or Google) will be responsible for verifying your age. Once verified, the OS sends a digital signal—essentially a 'yes/no' or an age bracket like 13-15—to apps and websites so they know exactly who they are dealing with. This takes effect 18 months after the bill becomes law, and it applies to everyone from toddlers to adults.
Your Phone, Your Digital Bouncer
Under Section 3, the software running your device becomes the primary gatekeeper. If you’re setting up a new phone or updating an old one, you’ll have to provide a birth date. The OS then categorizes you into brackets: under 13, 13-15, 16, or 17+. When you download a new app or visit a regulated website, that app will ping your OS for your 'signal.' For parents, this means a mandatory link between your account and your child’s account (Section 3(a)(1)(C)), giving you more oversight but also creating a permanent digital paper trail of that relationship. While the bill suggests using 'zero-knowledge proofs'—a techy way of proving you’re of age without sharing your actual birthday—it doesn't strictly mandate how the OS verifies you, which could lead to some annoying setup hurdles.
Cutting Off the Ad Spigot
The real-world impact for teens is a much quieter, less 'creepy' internet. Section 7 flat-out bans targeted advertising to anyone the platform 'knows or reasonably should know' is under 17. It also stops data brokers from buying or selling a minor’s personal info. For a 15-year-old, this means the ads they see should be based on the content they are currently watching (contextual ads) rather than their browsing history or physical location. However, the phrase 'reasonably should know' is a bit of a gray area—it puts the burden on companies to guess correctly or face FTC fines of up to $7,500 per intentional violation (Section 8).
The Cost of Compliance and Competition
If you’re a small app developer or run a niche website, this adds a new layer of homework. You’ll be required to request these signals and use them as your 'primary indicator' of age (Section 4). If you think a user is lying and have 'clear and convincing' proof, you have to report that back to the OS provider. To keep the big tech giants from using this data to crush smaller competitors, Section 9 prohibits companies like Apple or Google from using this age data to give their own apps an unfair advantage. It’s a move to ensure that while the 'big guys' hold the keys to the age data, they can’t lock everyone else out of the room.