AI laws, privacy rules, and cybersecurity requirements — tracked for you.

Australia amended its online safety regime to require providers of age-restricted social media platforms to take reasonable steps to prevent under-16 users from holding accounts. The framework affects covered social platforms serving Australian users and relies on age-assurance systems rather than mandating government digital ID. It also gives the eSafety Commissioner implementation and oversight responsibilities.

Florida requires third parties performing anonymous age verification to avoid retaining or repurposing personal identifying information once age is confirmed. It affects businesses and verification providers that support age-gated experiences and sets security and data-minimization rules around the verification process.

Florida requires covered social media platforms to block or terminate certain accounts for younger minors and to obtain parental authorization for 14- and 15-year-old account holders. It affects social media services that meet Florida''s statutory thresholds and ties compliance to age-estimation and account-governance practices.

Texas requires covered digital service providers that are likely to be used by minors to offer parental tools and to limit certain data and design practices for known minor users. The law restricts targeted advertising to minors, requires age-appropriate experience controls, and imposes transparency obligations on covered services. It affects social media and other account-based digital services used by Texas minors.

The UK Online Safety Act gives Ofcom powers over child-safety duties and age-assurance measures, especially for services that host harmful or adult content.

Louisiana requires commercial websites with a substantial portion of material harmful to minors to perform reasonable age verification before access. It affects publishers and platforms that host adult content and allows civil claims when minors are exposed without the required checks. Accepted methods include digital identification and other commercially reasonable verification systems.

The United Kingdom's Children's Code requires online services likely to be accessed by children to design around the best interests of the child. It expects a risk-based approach to age assurance and demands high privacy defaults, limits on profiling and geolocation, and stronger transparency for child users. It affects apps, games, connected toys, social platforms, and websites that are likely to be used by children.

California created child-focused design and privacy duties for online services likely to be accessed by minors, including high-privacy defaults, data protection impact assessments, and limits on harmful profiling or nudging. It affects businesses offering online products, services, or features to children in California, even though enforcement has been tied up in litigation.

Arkansas requires social media companies to perform reasonable age verification before allowing Arkansas users to open or maintain accounts. If a user is a minor, the platform must obtain parental consent and limit retention of age-verification data. The law is aimed at consumer-facing social media services used by children and teenagers.