Summary

Requires covered online platforms to deploy age‑verification technology within one year to prevent minors from accessing content the law defines as harmful to minors. Platforms must publish how verification works, apply checks to users who appear to be in the United States, secure and limit retention of verification data, and remain legally responsible for compliance even if they use third‑party services; enforcement is handled by the Federal Trade Commission under its unfair/deceptive acts authority and the GAO must report on results within two years of implementation. The law defines key terms (covered platforms, harmful content, age‑verification technology), directs the FTC to consult technical and child‑safety experts, requires public audit rules and compliance guidance, protects certain identifying information from disclosure to the Commission, and preserves the rest of the law if any provision is struck down by a court.

Key Points

• Covered online platforms must implement age‑verification technology to block minors from content defined as harmful, starting one year after enactment.
• The law defines covered platforms, harmful content, and age‑verification technology, and ties many legal meanings to existing federal statutes.
• Platforms must publish how their verification works, secure verification data, limit retention, and apply checks to users appearing to be in the United States.
• The Federal Trade Commission enforces the law using its unfair/deceptive acts authority and full FTC enforcement powers.
• The Commission must consult experts (computer science, child safety, privacy, cryptography) when developing enforcement and technical approaches.
• The GAO must report to Congress two years after implementation on effectiveness, compliance, data security, and broader impacts, with recommendations.
• Guidance from the Commission is required within 180 days but is not itself an enforceable right or sole basis for enforcement actions.
• Platforms remain liable for compliance even if they use third‑party age‑verification services; identifying user data should not be disclosed to the Commission.
• The Act contains a severability clause so that a court ruling striking one part does not invalidate the entire law.
• The law raises privacy, security, and constitutional concerns related to age verification, data collection, and possible impacts on anonymous or lawful adult access.

Categories & Tags