Social media age verification laws in the United States refer to state-level legislation enacted primarily since 2023 that requires social media platforms to verify the age of users and, in many cases, obtain parental consent for minors to create or maintain accounts. As of 2024, there is no comprehensive federal law mandating universal age verification for social media, though several bills have been proposed in Congress. The regulatory landscape consists of a patchwork of state statutes with varying requirements, enforcement mechanisms, and legal statuses.
Legislative Background Concerns regarding the impact of social media on the mental health, privacy, and safety of children and adolescents drove a wave of state legislation beginning in 2023. Lawmakers cited risks such as exposure to harmful content, addictive design features, data collection practices, and online predation.
Key State Laws
- Utah (S.B. 152 / H.B. 311, enacted March 2023): The first state to pass comprehensive legislation. The original law required age verification for all users, parental consent for minors under 18, and granted parents access to their children's accounts. It also imposed a curfew (10:30 PM to 6:30 AM) for minor accounts. In 2024, Utah repealed and replaced these laws (S.B. 194 / H.B. 464) to focus more on design features and parental controls while maintaining age verification requirements, partly in response to constitutional challenges.
- Arkansas (Act 689, enacted April 2023): Required age verification for users on platforms generating over $100 million in annual revenue. It mandated parental consent for minors under 18. A federal judge issued a preliminary injunction blocking the law in August 2023 (NetChoice v. Griffin), ruling it likely violates the First Amendment and is preempted by the Children's Online Privacy Protection Act (COPPA).
- California (Age-Appropriate Design Code Act / AB 2273, enacted September 2022, effective July 2024): Modeled on the UK's Children's Code. It does not strictly mandate "age verification" (i.e., ID checks) but requires platforms to estimate the age of child users with a "reasonable level of certainty" or apply privacy protections to all users. It mandates Data Protection Impact Assessments (DPIAs) and prohibits "dark patterns." A federal judge issued a preliminary injunction in September 2023 (NetChoice v. Bonta), citing First Amendment concerns regarding the DPIA requirements.
- Texas (HB 18, enacted June 2023, effective September 2024): The Securing Children Online through Parental Empowerment (SCOPE) Act requires digital service providers to register age verification for users, obtain parental consent for minors under 18, and provide parental tools. It applies to platforms allowing user-generated content. A federal judge blocked portions of the law related to content monitoring and filtering in August 2024 (CCIA v. Paxton), but allowed the age verification and parental consent provisions to proceed.
- Florida (HB 3, enacted March 2024, effective January 2025): Prohibits children under 14 from having social media accounts. Requires parental consent for 14- and 15-year-olds. Mandates "anonymous age verification" through third-party providers for all users. The law targets platforms with "addictive features" such as infinite scrolling and push notifications.
- Other States: Similar laws have been enacted in Louisiana (Act 440, 2023), Mississippi (HB 1126, 2024), Georgia (SB 351, 2024), Tennessee (Protecting Children from Social Media Act, 2024), and New York (S. 7694A / A. 8149A, 2024 - focusing on "addictive feeds" and data privacy for minors).
Common Provisions While specifics vary, common elements include:
- Age Assurance/Verification: Methods range from government ID upload and credit card checks to facial age estimation and third-party verification services.
- Parental Consent: Required for minors (age threshold varies by state, typically under 16 or 18).
- Parental Supervision Tools: Mandating dashboards for parents to view privacy settings, set time limits, or monitor connections.
- Data Restrictions: Prohibitions on collecting, selling, or sharing minors' data; restrictions on targeted advertising to minors.
- Curfews/Time Limits: Automated restrictions on access during certain hours (e.g., Utah's original law, Florida's provisions).
Legal Challenges and Constitutional Issues The primary legal obstacle to these laws is the First Amendment.
- Strict Scrutiny: Courts generally apply strict scrutiny to laws restricting access to speech based on the identity of the speaker or recipient (minors).
- Anonymity: Plaintiffs (primarily industry trade associations NetChoice and CCIA) argue that age verification requirements effectively eliminate the right to anonymous speech for adults and minors.
- Overbreadth/Vagueness: Challenges argue definitions of "social media platform" are vague or overbroad, capturing unrelated services.
- Preemption: Defendants argue state laws are preempted by federal laws, specifically COPPA (Children's Online Privacy Protection Act, which covers children under 13) and Section 230 of the Communications Decency Act.
- Dormant Commerce Clause: Arguments that state laws unduly burden interstate commerce by regulating the global internet.
Federal Context
- COPPA (1998): Requires verifiable parental consent for collection of personal information from children under 13. The FTC has proposed updates to strengthen COPPA but has not lowered the age threshold or mandated universal age verification.
- Kids Online Safety Act (KOSA) / COPPA 2.0: Passed the Senate in July 2024. KOSA establishes a "duty of care" for platforms to prevent harm to minors and requires safeguards/parental tools. COPPA 2.0 extends protections to minors under 17 and bans targeted advertising to them. Neither mandates specific age verification technology (like ID checks) but requires platforms to act on "knowledge" of a user's age.
- Protecting Kids on Social Media Act: Proposed legislation that would set a minimum age of 13 and require parental consent for teens, with a pilot program for age verification.
Industry Response and Technology Platforms (Meta, Snap, TikTok, X, etc.) generally oppose mandatory government ID verification citing privacy, security, and accessibility concerns. They advocate for app store-level verification (shifting the burden to Apple/Google) or device-level signals. Current compliance strategies involve a mix of:
- Age Gating / Self-Declaration: Asking date of birth (widely considered ineffective).
- AI-based Age Estimation: Analyzing user behavior, facial analysis (via selfie video), or network analysis.
- Third-Party Verifiers: Using services that check credit headers, government databases, or mobile carrier data.
- Parental Consent Flows: Linking parent and child accounts via email, QR codes, or payment credentials.
Current Status (as of late 2024) The legal landscape is in flux. Multiple federal district courts have issued preliminary injunctions blocking enforcement of key provisions in Arkansas, California, Ohio, and Mississippi, primarily on First Amendment grounds. Appeals are pending in several Circuit Courts. The Supreme Court has not yet ruled on the constitutionality of mandatory age verification for social media, though it has heard arguments on age verification for adult content sites (e.g., Free Speech Coalition v. Paxton regarding Texas HB 1181).
