California Mandates OS-Level Age-Tracking
California has passed a new law that will force every operating system to implement age-verification by 2027. The move dramatically raises the stakes for data privacy and compliance, with significant implications for any app that could be used by minors or families. This further cements California as the nation's most aggressive regulator of consumer tech.
The law, known as the Digital Age Assurance Act or AB 1043, was signed by Governor Gavin Newsom in October 2025 and passed unanimously in both state legislative chambers. It compels operating systems to provide a real-time API that sends an "age signal" to any app that requests it when a user downloads or launches the application. Upon receiving the signal, developers are "deemed to have actual knowledge" of a user's age range, shifting legal liability for age-gating features and content directly onto the app maker. The API will categorize users into one of four brackets: under 13, 13 to under 16, 16 to under 18, and 18 or older. This transfer of knowledge is critical for consumer health apps, as knowing a user is a minor can trigger compliance requirements under other regulations, such as the federal Children's Online Privacy Protection Act (COPPA) and state privacy laws that treat a child's data as "sensitive information." The law's definition of an "operating system" is intentionally broad, encompassing not only iOS and Android but also Windows, macOS, and even Linux distributions like SteamOS. Penalties for non-compliance are enforced by the California Attorney General and can reach $2,500 per affected child for negligent violations and $7,500 for intentional ones. Unlike more contentious age-verification laws in states like Texas and Utah, California's AB 1043 does not require users to upload government IDs or use facial recognition. This reliance on user self-reporting was a deliberate choice to help the law withstand the constitutional challenges that have led to similar bills being blocked in other states. Despite signing the bill, Governor Newsom has publicly urged the legislature to introduce amendments before the 2027 effective date. He cited concerns from streaming services and game developers about the law's complexities with multi-user family accounts and profiles used across multiple devices. For developers, the law standardizes age assurance by moving it to a shared infrastructure layer, eliminating the need for each app to build its own verification system. However, it also requires founders to build systems to ingest the OS-level signal and define distinct in-app policies and data handling practices for each age bracket.
