California is getting serious about age checks online, and businesses should pay attention. Thanks to the passage of AB 1043, starting January 1, 2027, software makers and app stores will need to know the user’s age (or at least their age bracket) and signal it to apps every time a download or launch happens. For businesses that may be unclear whether COPPA or CCPA’s provisions for teenagers apply to their app, this law is aimed at clarifying that ambiguity.
How will it work? Under the new law, operating system providers and app stores will need to generate a digital age bracket signal—identifying whether the user is either (a) a minor (with age brackets of: under 13, 13 to 15, or 16 to 17) or (b) 18 and over. This signal must be transmitted securely, and in real-time, not only when the app is downloaded, but each time it is launched.
The law notes that apps that receive this signal will have “actual knowledge” of the users’ age. As such, this could impact how California examines COPPA compliance. (Which, as a reminder, applies to collection of information online from children including when the site/app has actual knowledge that the user is a child.) This law should also be viewed in conjunction with CCPA, and its provisions governing minors’ personal information.
While there is no private right of action, the law does provide for statutory penalties. Namely, up to $7,500 per intentional violation for each affected child.
Putting it into Practice: Beginning in two years, this law -if not challenged- will impact apps’ knowledge of their users’ age. This could change the calculus for companies on whether or not COPPA and CCPA’s children provisions apply to them. This may be a good time for companies to analyze the impact of these laws on their organizations, even if they have not done so in the past.