119 S4349 IS: Parents Over Platforms Act
U.S. Senate
2026-04-20
text/xml
EN
Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.
1.Short title; table of contents(a)This Act may be cited as the Parents Over Platforms Act
.(b)The table of contents for this Act is as follows:Sec. 1. Short title; table of contents.Sec. 2. Definitions.TITLE I—APPLICATION DISTRIBUTION PROVIDER AND DEVELOPER RESPONSIBILITIESSec. 101. Age assurance.Sec. 102. Application distributor and developer obligations.TITLE II—LIABILITY AND ENFORCEMENTSec. 201. Limitations on liability.Sec. 202. Enforcement.Sec. 203. Preemption.Sec. 204. Severability.Sec. 205. Effective date.2.In this Act:(1)The term adult means an account holder who is or is estimated to be 18 years of age or older.(2)The term age category means categorization of an individual based on age or estimated age, including a description of the user as a minor, an adult, or as being within a given age range.(3)The term age signal means a signal that indicates an account holder’s age category, which the account holder or the account holder’s parent has agreed to share.(4)(A)The term application means a software program that is—(i)designed to be run on a connected device, and to perform, or to help the user perform, a specific task on the connected device; and(ii)distributed through an application distribution provider.(B)The term application does not include—(i)websites or internet browser extensions; or(ii)software with a primary purpose of extending the functionality of an internet browser.(5)The term application distributor—(A)means a software application that distributes applications from developers to users of a connected device; and(B)does not include an internet browser.(6)Application distribution providerThe term application distribution provider means an entity, company, or organization that owns, operates, or controls an application distributor.(7)The term Commission means the Federal Trade Commission.(8)The term connected device means a smartphone, tablet, gaming console, or virtual reality device that enables users to connect to the internet and download applications.(9)(A)The term covered application—(i)means an application—(I)that is not an application distributor; and(II)for which a developer provides, whether legally required or not—- (aa)a different experience for adults than for minors; or
- (bb)an experience that is intended only for adults; and
(ii)includes an application for which a developer provides different account types, content, or features, or engages in different advertising or data practices, depending on a user’s age.(B)The term covered application does not include an internet browser or online search engine.(10)(A)The term covered website means a website that provides a URL-accessible or web version of a covered application.(B)The term covered website does not include an internet browser or online search engine.(11)The term developer means any person, entity, company, or organization that creates, owns, or controls an application.(12)The term minor means an account holder who is or is estimated to be under the age of 18.(13)(A)The term personalized advertising means the displaying of an advertisement to an account holder that is selected based on personal data obtained from the account holder’s activities over time and across non-affiliated websites or online applications to predict such account holder’s preferences or interests.(B)The term personalized advertising does not include—(i)advertising based on an account holder’s activities within a developer’s own application or applications;(ii)advertising based on the context of an account holder’s current interaction with an application;(iii)advertising directed to an account holder in response to the account holder’s direct request for information or feedback; or(iv)the processing of personal data solely for measuring or reporting advertising performance, reach, or frequency.<enum>I</enum><header>APPLICATION DISTRIBUTION PROVIDER AND DEVELOPER RESPONSIBILITIES</header><section id="H4043C0C79A5345AAA10A1580D3ED3551"><enum>101.</enum><header>Age assurance</header><subsection id="H6C1379CB68EB4D2E9F8D7FCC835AEF9A"><enum>(a)</enum><header>Responsibilities of application distribution providers</header><text>An application distribution provider—</text><paragraph id="H14A897DF173C44A7990AE6C56F253F26"><enum>(1)</enum><text>shall ask account holders to declare their age when creating an account with the application distribution provider;</text></paragraph><paragraph id="H16BA7DEBDCB34EEC9192FBD75A1BCEC5"><enum>(2)</enum><text>may use commercially reasonable efforts to obtain the age category of an account holder with a reasonable level of certainty;</text></paragraph><paragraph id="HE411E6D8730D448AA7D6805246D6017E"><enum>(3)</enum><text>may provide account holders with a mechanism to obtain their age category and the ability to request an update if they believe their age category is incorrect; and</text></paragraph><paragraph id="H9997C2DCC0F14742B8E85F1B1F2986DC"><enum>(4)</enum><text>shall provide developers of covered applications the technical ability to access an age signal where the account holder or the account holder’s parent has agreed to share such age signal.</text></paragraph></subsection><subsection id="HFC9DF21691A84AE4A7D0F8F096DE5623"><enum>(b)</enum><header>Rules of construction</header><text>Nothing in this section shall be construed to—</text><paragraph id="H25A4EAEC272F40CF98D63D5CBA5EA06F"><enum>(1)</enum><text>preclude an application distribution provider from using multiple commercially reasonable methods to obtain, estimate, or provide the age category of an account holder; or</text></paragraph><paragraph id="H109F72A61EC1464E892CF4118C15CC7E"><enum>(2)</enum><text>restrict an application distribution provider’s ability to satisfy the requirements of this section by obtaining a minor account holder’s age from the minor’s parent.</text></paragraph></subsection></section><section id="H90082DB490D94A9DA530F856AE8E4470"><enum>102.</enum><header>Application distributor and developer obligations</header><subsection id="H97EA7EF28DD24CA090D99A862609CD7A"><enum>(a)</enum><header>Application distribution providers</header><paragraph commented="no" display-inline="no-display-inline" id="iddb342f8ca06f4048b9dbaa1a65f8f1db"><enum>(1)</enum><header display-inline="yes-display-inline">Obligations</header><text>An application distribution provider shall do the following:</text><subparagraph id="H965A4D44346D4E47ABBC4F219BAB529E" commented="no"><enum>(A)</enum><text>Provide a minor account holder’s parent with the ability to prevent the minor from acquiring or using a developer’s covered application from the application distributor.</text></subparagraph><subparagraph id="H2F8F52AC000F45B89656B22C7CAAAD73" commented="no"><enum>(B)</enum><text>Provide developers with the ability to provide information regarding their relevant parental controls for a covered application through a centralized product page or user interface, hosted by the application distribution provider, that provides relevant information about a covered application.</text></subparagraph><subparagraph id="H60F179797FF34637947C715A77A7FA15" commented="no"><enum>(C)</enum><text>Comply with the obligations described in subsection (b) with respect to any covered applications for which the application distribution provider is also the developer.</text></subparagraph><subparagraph id="HBA74940152714D5C80EFBE87DAD1229F" commented="no"><enum>(D)</enum><text>Not use data collected from third-party covered applications in the course of compliance with this section to give the application distribution provider's own applications preference relative to those of third parties, or to otherwise use such data in an anti-competitive manner.</text></subparagraph></paragraph><paragraph id="HD7989FC574954EFB92B465CB46EBEF87" commented="no"><enum>(2)</enum><header>Rule of construction</header><text>Nothing in this section shall be construed to prevent an application distribution provider from creating a user interface or centralized page for minor account holders' parents to block categories by age rating of covered applications based on the content and features of the covered application.</text></paragraph></subsection><subsection id="HB74243E044A3465D8AB22916A62A80AC"><enum>(b)</enum><header>Developers of covered applications</header><paragraph commented="no" display-inline="no-display-inline" id="ide621226a578f467a98d86483bcd88d71"><enum>(1)</enum><header display-inline="yes-display-inline">In general</header><text>A developer of a covered application shall do the following:</text><subparagraph id="H573CBAE88E4740879FDC31DA10AD22FE"><enum>(A)</enum><text>Report to the application distribution provider whether the application of the developer provides a different experience for adult users than for minor users or is intended only for adults.</text></subparagraph><subparagraph id="H60D354C95F3149DCBCAE33F9BD48475E"><enum>(B)</enum><text>With respect to any covered application that is authorized to be used by a minor, provide information regarding privacy and online safety settings to help parents support minors using such application.</text></subparagraph><subparagraph id="H84FF929DC09744F4BCD6C136FACF0D19"><enum>(C)</enum><text>Use commercially reasonable efforts to determine whether a user is an adult or a minor with a reasonable level of certainty in accordance with paragraph (2).</text></subparagraph><subparagraph id="H21E162BBF81B464AA553A7B1A716A8B4"><enum>(D)</enum><text>Make a reasonable effort to ensure that users who are minors cannot engage in any activity that has been restricted by the developer for adults only.</text></subparagraph><subparagraph id="H0E2079A014A242A6A254C8FEFCCEF77A"><enum>(E)</enum><text>Obtain consent prior to permitting minor account holders from accessing a covered application or portion thereof that the developer has designated as unsuitable for use by minors without parental guidance or supervision, or from accessing content that is age-gated by law.</text></subparagraph><subparagraph id="H84101380433E4D01B6D5BB8B9D1614C2"><enum>(F)</enum><text>Not deliver personalized advertising to minors.</text></subparagraph><subparagraph id="H38ED916CA3E74218A092928B20B45042"><enum>(G)</enum><text>With respect to an age signal requested by a developer from an application distribution provider regarding use of a covered application, the developer—</text><clause id="HA02D00EDB26A411FBCB1E6AA536EF288"><enum>(i)</enum><text>shall request the minimum amount of information needed for purposes of compliance with this Act;</text></clause><clause id="H415F83D297764D9DB56A4E113CA276F3"><enum>(ii)</enum><text>may not willfully disregard any information regarding an individual’s age or age category that is otherwise available to the developer;</text></clause><clause id="HB6DCA01FA2A2491A8046B278B70F5EEC"><enum>(iii)</enum><text>may not share the information obtained from the age signal with third parties, except for a service provider, but only if necessary for such service provider to implement safety measures or privacy protections for minors or otherwise required to do so by law; and</text></clause><clause id="H5C26382997744E3DA1AAE23EBC4F2B18"><enum>(iv)</enum><text>may not use the age signal for any purpose beyond that intended by this Act, including using the age signal to obtain or attempt to obtain a user’s date of birth.</text></clause></subparagraph><subparagraph id="H7DFC3DDFA71F4EA3B3B02C65F0ED99FE"><enum>(H)</enum><text>In the event that a developer uses a method other than an age signal provided by an application distribution provider to satisfy the requirements of this section, the developer—</text><clause id="HC173D052438946E3A965EDAF5941A437"><enum>(i)</enum><text>shall request the minimum amount of information needed for purposes of compliance with this Act;</text></clause><clause id="H5B0AE3EC0DAA4C4BBE77C6168335DE81"><enum>(ii)</enum><text>may not willfully disregard any information regarding an individual’s age or age category that is available to the developer;</text></clause><clause id="H386E1823A7DA4DEAB4001B0E86DC1415"><enum>(iii)</enum><text>may not share the information obtained in the course of complying with this section with third parties, except for a service provider, but only if necessary for such service provider to implement safety measures or privacy protections for minors or otherwise required to do so by law; and</text></clause><clause id="H2B6BDB0B9D74405B8764DB11B50152CA"><enum>(iv)</enum><text>may not use age data for any purpose beyond that intended by this Act, including using age data to obtain or attempt to obtain a user’s date of birth.</text></clause></subparagraph></paragraph><paragraph id="HD372E2E3AD2F42909DF061AC9637C1B2"><enum>(2)</enum><header>Commercially reasonable effort</header><subparagraph commented="no" display-inline="no-display-inline" id="id9a60d4cb1c22420585769c03a9cbbbb1"><enum>(A)</enum><header display-inline="yes-display-inline">In general</header><text display-inline="yes-display-inline">Subject to subparagraph (B), for the purposes paragraph (1)(C), an age signal provided to a developer by an application distribution provider shall be considered a commercially reasonable effort.</text></subparagraph><subparagraph commented="no" display-inline="no-display-inline" id="idf35f67cb835e4a699fad4e250350dd3c"><enum>(B)</enum><header>Exception</header><text display-inline="yes-display-inline">With respect to an application that is intended only for adults and is required by law to restrict access to adults, an age signal provided to a developer by an application distribution provider that indicates a user is—</text><clause id="HBBD66DB449A44E5FA4FFC6E12E019C6C"><enum>(i)</enum><text display-inline="yes-display-inline">a minor shall be a sufficient basis to block access to such application; or</text></clause><clause id="H27D94BF8FEEB4004BE0370600B49CC72" commented="no" display-inline="no-display-inline"><enum>(ii)</enum><text display-inline="yes-display-inline">an adult shall not, by itself, satisfy the requirement to determine whether a user is an adult with a reasonable level of certainty, including for purposes of other laws that require access restrictions based on age.</text></clause></subparagraph></paragraph></subsection><subsection id="H2252CD69A44B40B6A1D6764BF2F99171"><enum>(c)</enum><header>Special rules</header><paragraph commented="no" display-inline="no-display-inline" id="idd9b5510bf42d4cfb8db1b80ea9e67be9"><enum>(1)</enum><header display-inline="yes-display-inline">Common control</header><text>If a developer and an application distribution provider are controlled by the same entity, the developer may rely on age determinations made by that entity.</text></paragraph><paragraph id="H4028F633E6D6439DBCA86AACD16CAC97"><enum>(2)</enum><header>Applicability to covered websites</header><text>A developer of a covered website shall have the same requirements as a developer of a covered application under this Act and may carry over or repurpose an age signal received from an application distribution provider under section 101(a)(4) to fulfill such requirements with respect to the developer's covered website.</text></paragraph></subsection></section><enum>II</enum><header>LIABILITY AND ENFORCEMENT</header><section id="H0D468A58B6CA44639D45CFBF9F1CF93B"><enum>201.</enum><header>Limitations on liability</header><subsection id="HA6A752B7631F44AD8951A006B8E46349"><enum>(a)</enum><header>Application distribution providers</header><text>An application distribution provider that makes a good faith effort to comply with the obligations of this Act (as determined by the Commission or a court taking into consideration available technology) shall not be liable under any provision of this Act, or otherwise liable for its actions taken in attempt to comply with this Act, including, but not limited to, the following with regard to facilitation of the provision of an age signal:</text><paragraph id="HB98F9520E59A4F14A9C2756FE9858A46"><enum>(1)</enum><text>Any erroneous age signal.</text></paragraph><paragraph id="H412F49F12F134FF7909950B384F7A0D7"><enum>(2)</enum><text>Any conduct by a developer of a covered application that receives any age signal.</text></paragraph><paragraph id="H5E516D8AF74E4F55895A355B9D86F572"><enum>(3)</enum><text>Failing to provide an age signal due to any reasonable technical limitations or outages that prevent the provision of the age signal upon request.</text></paragraph><paragraph id="HF4CC6191D9A64EEB8D4CD053FDE32111"><enum>(4)</enum><text>Not providing the age signal to developers that do not adhere to reasonable safety standards and application distribution provider policies.</text></paragraph></subsection><subsection id="H4F1B8BC4A8954E9DADB0B9A5DEE6C4DD"><enum>(b)</enum><header>Developers</header><paragraph id="H7B309FC9680146BD87CCDC00B27C48E9"><enum>(1)</enum><header>Sole liability for determining whether an application is a covered application</header><text>A developer shall be solely responsible for correctly identifying whether an application of the developer is a covered application under this Act. No application distribution provider is required to proactively identify a covered application, and an application distribution provider shall not be held liable in cases where a developer provides inaccurate information about its applications.</text></paragraph><paragraph id="H268845E694514CCCA783A4A59325DFF0"><enum>(2)</enum><header>Erroneous age signal</header><text>A developer of a covered application shall not be liable for an erroneous age signal provided by an application distribution provider if the developer makes a reasonable effort, taking into consideration available technology, to properly use the age signal and carry out commercially reasonable methods to obtain or estimate the age of an account holder.</text></paragraph></subsection></section><section id="H5108D6C34CD641698BED493CB0FC59B7"><enum>202.</enum><header>Enforcement</header><subsection id="H98FA0176BA774655969CEC7F276E1086"><enum>(a)</enum><header>Unfair or deceptive acts or practices</header><text>A violation of this Act or a regulation promulgated thereunder shall be treated as a violation of a rule defining an unfair or deceptive act or practice under section 18(a)(1)(B) of the Federal Trade Commission Act (<external-xref legal-doc="usc" parsable-cite="usc/15/57a">15 U.S.C. 57a(a)(1)(B)</external-xref>).</text></subsection><subsection id="HB39FDA5EC7B042F58E99EEB69D523795"><enum>(b)</enum><header>Powers of the Commission</header><paragraph id="HB9280C47A5B84DF48F1E2D245B137031"><enum>(1)</enum><header>In general</header><text>The Commission shall enforce this Act in the same manner, by the same means, and with the same jurisdiction, powers, and duties as though all applicable terms and provisions of the Federal Trade Commission Act (<external-xref legal-doc="usc" parsable-cite="usc/15/41">15 U.S.C. 41 et seq.</external-xref>) were incorporated into and made a part of this Act.</text></paragraph><paragraph id="H74C3ADFC902448C6ABC695EA00261F72"><enum>(2)</enum><header>Privileges and immunities</header><text>Any person who violates this Act or a regulation promulgated thereunder shall be subject to the penalties and entitled to the privileges and immunities provided in the Federal Trade Commission Act (<external-xref legal-doc="usc" parsable-cite="usc/15/41">15 U.S.C. 41 et seq.</external-xref>).</text></paragraph><paragraph id="HB0C97282263E49F9B6B3A749C08C9627"><enum>(3)</enum><header>Authority preserved</header><text>Nothing in this Act shall be construed to limit the authority of the Commission under any other provision of law.</text></paragraph></subsection></section><section id="H492D7A98191244F68F0238E628591577"><enum>203.</enum><header>Preemption</header><text display-inline="no-display-inline">No State or political subdivision of a State may maintain, enforce, prescribe, or continue in effect any law, rule, regulation, requirement, standard, or other provision having the force and effect of law of any State, or political subdivision of a State, related to the provisions of this Act.</text></section><section id="H1787F8240B4F4C8487E2EFEAA5E465A9"><enum>204.</enum><header>Severability</header><text display-inline="no-display-inline">If any provision of this Act or the application of any provision to any person or circumstance is held invalid by a final decision of a court of competent jurisdiction, the remainder of this Act shall be given effect without the invalid provision or application.</text></section><section id="HFFA622A1C65445DEB4EDDB0BAA4FFE41"><enum>205.</enum><header>Effective date</header><text display-inline="no-display-inline">This Act shall take effect on the date that is 2 years after the date of its enactment.</text></section>