US lawmakers want your OS to determine if you’re old enough to use an app

Source: Android Authority

Taylor Kerns / Android Authority

TL;DR

• Colorado legislators have introduced a bill that would require operating system providers to verify the age of users instead of leaving the task up to individual apps.
• When you attempt to download an app with age‑restricted content, a digital age signal would be sent to the app to determine if you’re allowed to access it.
• If the bill passes, it would take effect on January 1, 2028.

Background

A growing number of U.S. states are exploring age‑verification measures to protect minors from social‑media dangers and adult content. Earlier this year, California enacted AB‑1043, the Digital Age Assurance Act, slated to go into effect in 2027. Colorado is now proposing a similar approach that moves age verification from individual apps to the device level.

Bill Details

Colorado state legislators Sen. Matt Ball and Rep. Amy Paschal have introduced Age Attestation on Computing Devices (SB26‑051) to the Colorado Senate. The proposal mirrors California’s law and would require OS providers such as Microsoft, Google, and Apple to verify a user’s age during device setup.

Key provisions

• Device‑level verification: Users must confirm their age when setting up a new device.
• Digital age signal: The OS creates a signal that apps can read to decide whether to allow access.
• Age categories only: The OS shares only one of four categories—under 13, 13 to under 16, 16 to under 18, or 18 and above—never the exact birthdate.
• Minimum data sharing: Providers may share “only the minimum amount of information necessary to comply with the bill” and are prohibited from sharing the age signal with third parties for unrelated purposes.

Potential Flaws

• Websites excluded: The bill applies only to apps, leaving browsers and other websites unregulated, which could allow children to bypass restrictions.
• Verification reliability: The legislation does not specify how age will be verified; it merely requires account holders to provide a date of birth or age, opening the possibility of false information.

Timeline & Next Steps

• Effective date: If enacted, the law would become active on January 1, 2028.
• Potential referendum: The bill’s fate could be decided by Colorado voters in November if a referendum petition is filed within 90 days after the General Assembly adjourns.

References

• Bill text: Age Attestation on Computing Devices (SB26‑051)
• California’s Digital Age Assurance Act: AB‑1043 (effective 2027)
• Android Authority Comment Policy: Read here