Utah app‑store law faces lawsuit

App stores are the new choke point in the kids-online fight. Utah decided that if a child downloads an app, the store — not just the app maker — should be the one checking age and getting parental permission first. That is a big shift. It turns a content-policy argument into a product-design and liability argument. Utah’s law drew a federal lawsuit in February, but the fight changed again in April after lawmakers rewrote how the law can be enforced. (ksl.com) ### What did Utah actually try to do? Utah’s 2025 App Store Accountability Act tells app store providers to verify a user’s age category, obtain parental consent for minor accounts, share age-category and consent data with developers, and protect that verification data. The law breaks users into four buckets — child, younger teenager, older teenager, and adult. It also ties minors’ app downloads, in-app purchases, and acceptance of terms to parental approval. (le.utah.gov) ### Why target the app store? Because Apple and Google sit at the front door. Utah’s basic theory is that app stores already manage accounts, payments, device access, and downloads, so they are the one place where a parent-control rule could apply across thousands of apps at once. Lawmakers also framed the problem as a contract issue — minors agreeing to terms of service and purchases without meaningful parental consent. (ksl.com)ustry sue over? CCIA filed in federal court against Utah Attorney General Derek Brown and the head of the Division of Consumer Protection, arguing the law puts unconstitutional access gates in front of lawful speech. The group also objected to Utah forcing app stores and developers to carry age ratings and other disclosures that can become subjective or controversial. Basically, the claim was not just “this is annoying” — it was “the state is making private platforms police speech before people can reach it.” (ksl.com) ### Why is age verification the hard part? Because “verify age” sounds simple until you build it. Someone has to decide whether that means an ID check, a credit-card style signal, an account-history guess, or a third-party verification service. Then someone has to store the result, handle mistakes, and deal with edge cases like teens using family devices. False positives matter here — if an adult gets flagged as a minor, access gets blocked; i(ksl.com) exact birthdate, but the verification burden still has to happen somewhere. (le.utah.gov) ### What changed after the lawsuit? A lot. Utah passed H.B. 498 in March 2026, amending the act, adding rules for pre-installed apps, modifying enforcement, and delaying the main operational requirements. The practical result was that the state removed government enforcement authority and leaned on private lawsuits instead. That matters because CCIA had sued state officials to stop them from enforcing the law. Once Utah said those officials could not enforce it, the posture of the case changed fast. (le.utah.gov) ### So why was the case dropped? CCIA withdrew its complaint on April 21, 2026, after Utah confirmed the law could not be enforced by government prosecution. That did not mean the policy fight ended. It meant this specific challenge against these specific state officials no longer fit the rewritten law. Meanwhile, the amended statute pushed the substantive requirements to May 6, 2027, so the compliance clock moved too. (ksl.com)16)) ### What is the real fight now? Who should carry the risk. Utah wants app stores to become the trusted age-and-consent layer for the whole mobile ecosystem. Tech groups want to avoid becoming the universal ID checkpoint for lawful speech and downloads. Parents want usable controls. Developers want fewer extra gates between them and users. The catch is that every version of this system creates a loser — either privacy gets tighter, access gets harder, or liability gets dumped on whoever sits in the middle. (le.utah.gov) ### Bottom line This is not just a Utah story anymore. Utah moved first, other states are circling, and the legal question is slowly becoming a product question: where do age checks live, and who pays when they fail? (ksl.com)