This bill would make commercial websites and online services that offer pornographic or other content harmful to minors verify users’ ages. One year after it becomes law, these services must use technology to ensure users are not minors and must block minors from harmful content, including obscene material or child pornography.

Services must publish how their age checks work and run the check against users’ IP addresses (including known VPN addresses), unless a user is outside the United States. They can choose the verification method and may hire a third party, but they are still responsible for following the rules. Any data collected for verification must be kept secure and only as long as needed. The Federal Trade Commission (FTC) must issue guidance within 180 days, consult experts, audit services, and enforce these rules using its existing authority. A federal review will report on how well this works two years after the compliance date.

• Who is affected: Commercial websites and online services that make content harmful to minors available, and people in the United States who use them.
• What changes: Mandatory age checks; public explanation of the process; IP-based checks (including VPNs); option to use third-party verifiers; strong data security and minimal data retention; FTC audits and enforcement.
• When: Starts 1 year after enactment; FTC guidance due within 180 days; GAO report due 2 years after the compliance date.