The bill strengthens parental oversight, transparency, and FTC enforcement for children on very large platforms and restricts commercial use of kids' data, but it concentrates benefits on the biggest platforms, raises data-sharing and security risks, increases compliance costs, and limits state and local options for technical safety measures.
Parents and children gain a formal ability to delegate a trusted third party to manage a child's account and settings in real time, giving families stronger tools to protect minors online.
Parents and children receive summaries of transferred data and notices about delegations and material changes, improving transparency about what third parties receive and how children's data is used.
The FTC is given an explicit enforcement pathway (complaints, investigations, penalties, injunctions) plus biannual compliance reviews, increasing accountability of large platforms and providing families and third-party safety providers an avenue for remedy.
Many smaller platforms that children use are excluded because protections only apply to very large platforms (e.g., >100M monthly users or >$1B revenue), leaving large numbers of children unprotected.
Federal preemption prevents States from requiring platforms to build real-time delegation APIs, limiting parents' and local regulators' ability to require technical tools that enable supervision and reducing available safety options.
The regime requires transferring sensitive child data (addresses, SSNs, banking info) to third parties in some cases, increasing risk of unauthorized access, breaches, and misuse even with safeguards.
Based on analysis of 5 sections of legislative text.
Requires very large social platforms to provide FTC-registered third-party safety apps real-time APIs for delegation of child account control and hourly child data transfers, with FTC enforcement.
Introduced March 20, 2026 by Jon Husted · Last progress March 20, 2026
Requires very large social media platforms to provide FTC-registered third-party safety software providers with real-time, third-party-accessible APIs so a child (or a parent for children under 13) can delegate full account-management powers and request secure hourly transfers of the child’s user data. The law defines covered platforms and user data, sets security, disclosure, and use limits for platforms and registered third-party providers, makes violations enforceable by the Federal Trade Commission with periodic compliance checks, and preempts state laws that would independently require platforms to build such real-time delegation APIs while preserving other state consumer-protection and privacy causes of action.