Governance, risk & compliance

US state minors online safety laws (design codes, social media, app stores) State laws and court status read 24 Oct 2026; see description

A group of state laws that put duties on online services, app stores and device makers because of the age of the user.

They are in three tiers by law type, and the single most important fact is that many are blocked or contested in court, so a law's text and its enforceability today are different questions. Court status below was read on 24 October 2026 from NetChoice case pages and law firm summaries, NOT from court dockets, and moves often; confirm on the docket before relying on it.

Effective dates marked (statute) were read in the enrolled text on a legislature site. AADC tier (age-appropriate design codes): California AB 2273 (Civil Code 1798.

99. 28 and following; operative 1 July 2024; on 12 March 2026 the Ninth Circuit narrowed the preliminary injunction, and reports say the age-estimation duty can now be enforced while the impact assessment, data-use and dark-pattern provisions stay enjoined, with the case back in the district court); Maryland Kids Code (effective 1 October 2024; challenge pending, motion to dismiss denied 24 November 2025, no injunction reported); Nebraska LB 504 (statute: operative 1 January 2026, Attorney General civil penalties up to $50,000 per violation from 1 July 2026); Vermont Act 63 of 2025, S.

69 (statute: effective 1 January 2027); South Carolina (reported effective 5 February 2026, challenge filed 9 February 2026, statute not read). SOCIAL tier (minor accounts, parental consent, feeds and time limits): enforceable or reported enforceable now: Mississippi HB 1126 (Fifth Circuit stayed the injunction; Supreme Court declined to lift the stay in August 2025), Florida HB 3 (Eleventh Circuit reversed the injunction on 14 October 2026), Georgia SB 351 (Eleventh Circuit vacated the injunction on 15 October 2026), California SB 976 (Ninth Circuit partly affirmed 9 September 2025; parental consent for addictive feeds and default settings reported in effect), Tennessee HB 1891 (injunction denied 20 June 2025; appeal result not confirmed).

Blocked or in doubt: Utah SB 194 and HB 464 (enjoined September 2024, Tenth Circuit argued 20 November 2025), Texas SCOPE Act HB 18 (central requirement stays enjoined, Fifth Circuit affirmed July 2026), Louisiana SB 162 (permanently blocked 15 December 2025), Arkansas (SB 396 permanently enjoined; Acts 900 and 901 of 2025 enjoined), Ohio HB 33 (Sixth Circuit vacated the injunction 18 June 2026 on standing; mandate stayed 17 August 2026), Virginia SB 854 (one hour default daily limit under 16; enjoined 27 February 2026, appealed), Nebraska LB 383 (statute: operative 1 July 2026; injunction granted in part, denied in part on 27 June 2026), Colorado HB 24-1136 (enjoined 6 November 2025). New York SAFE for Kids Act: proposed rules published 15 September 2025; not confirmed in force.

APPSTORE tier (app store and device age signals): Texas SB 2420 (statute: effective 1 January 2026; enjoined 23 December 2025; Fifth Circuit stayed the injunction 28 May 2026; Supreme Court denied emergency applications 6 July 2026; merits appeal pending, so it is enforceable now but could change); Utah (HB 498 of 2026 moved the main duties to 6 May 2027 and left only a private right of action); Louisiana (HB 977 of 2026 repeals Act 481 of 2025 and sets R. S.

51:1771 to 1775 for 1 July 2027; reengrossed text read, enrolled Act not read); Alabama HB 161 (statute: effective 1 January 2027, existing accounts verified by 1 October 2027); California AB 1043, the Digital Age Assurance Act (statute: operative 1 January 2027; operating system providers give an age bracket signal, no verification or parental consent). Not covered: federal COPPA (see COPPA), the TAKE IT DOWN Act (see US_TAKEITDOWN), state age verification for adult content, and minors' provisions inside comprehensive privacy laws (reported in Connecticut, Colorado and Montana), which this pack does not map.

General information, not legal advice.

Assessment tiers & levels Lavawall supports

Lavawall assesses US state minors online safety laws (design codes, social media, app stores) at every level below, so you can start where you are and step up as your program matures.

How Lavawall® helps you get to US state minors online safety laws (design codes, social media, app stores) compliance

Most of US state minors online safety laws (design codes, social media, app stores) comes down to technical controls you have to run and prove: keeping systems patched, hardening configuration, detecting breaches early, backing up what matters, controlling access, and keeping evidence that all of it actually happened. Lavawall® runs those controls across Windows, macOS, Linux, and Microsoft 365 / Google Workspace from one console, maps them to US state minors online safety laws (design codes, social media, app stores), and tracks your posture continuously instead of once a year at audit time.

• Assess your current state against US state minors online safety laws (design codes, social media, app stores) in the Lavawall GRC module, with the questionnaire and control set built in.
• Remediate the gaps with the same platform — automated patching, configuration fixes, backups, and access review — not a separate project.
• Evidence everything with timestamped, exportable records auditors, insurers, and clients accept.

Related

Lavawall® supports US state minors online safety laws (design codes, social media, app stores) as part of a built-in catalogue of compliance frameworks. Framework requirements are summarized for planning purposes; always confirm the current official text before certifying.