App Store Accountability Act
- Sponsor
- Sen. Lee, Mike [R-UT]
- Committees
- Commerce, Science, and Transportation Committee (primary)
- Last action
- May 1, 2025
Bottom line
The App Store Accountability Act aims to enhance parental control and transparency over children's app usage by imposing new age verification and parental consent requirements on app stores and developers.
What it actually does
This bill mandates that covered app store providers verify user ages, require parental accounts for minors, and obtain verifiable parental consent before minors download apps or make in-app purchases. It also obligates app developers to utilize app store age signals, notify of significant app changes, and restricts their use and sharing of age category data. The Federal Trade Commission and State Attorneys General are granted enforcement authority, and a safe harbor is provided for developers who comply.
Proponents argue
Supporters argue that the bill is crucial for safeguarding children in the digital age by empowering parents with clear information and control over their children's app usage and data. They contend it addresses growing concerns about online privacy and the potential exposure of minors to inappropriate content or exploitative monetization practices, ensuring a safer online environment for young users.
Opponents contend
Critics may contend that the bill imposes significant compliance burdens and costs on app store providers and app developers, potentially stifling innovation and disproportionately affecting smaller developers. Concerns could also be raised about the privacy implications of requiring extensive age verification data and the potential for a less seamless user experience for all users, including adults.
The bill is relatively concise and its provisions are clearly laid out, making it accessible for an informed reader to evaluate within a reasonable timeframe.
Sec. 3(a)(1)-(3)
App Store Age Verification and Parental Consent
This provision requires covered app store providers to request and verify the age of individuals creating accounts. If an individual is determined to be a minor, their account must be affiliated with a parental account, and verifiable parental consent must be obtained from the parent before the minor can download or purchase apps or make in-app purchases. App stores must also notify parents of significant changes to an app and obtain new consent.
Supporters argue
Supporters argue this provision is fundamental to protecting children online by giving parents the necessary tools to manage their children's digital interactions and prevent unauthorized spending or exposure to inappropriate content.
Critics contend
Critics may argue that implementing robust age verification and parental consent systems at scale is technically challenging and costly for app stores, potentially leading to a cumbersome user experience or privacy concerns related to the data collected for verification.
Tradeoffs
This provision balances the desire for strong parental control and child safety against the technical and operational complexities for app stores and potential impacts on user experience and privacy for all users.
Sec. 3(a)(4), (8) and Sec. 4(a)(1), (f)
Age Category Data Sharing and Usage
Covered app store providers are required to provide app developers with a user's age category and the status of verified parental consent for minors, including a real-time 'signal' of this information. App developers, in turn, must use this signal to determine a user's age category and parental consent status. Receipt of this signal is considered actual knowledge of the user's age category.
Sec. 4(d)
App Developer Restrictions
App developers are prohibited from enforcing contracts or terms of service against a minor unless verifiable parental consent has been obtained through the app store. They also cannot knowingly misrepresent material information in parental consent disclosures or share age category data with unaffiliated third parties (excluding service providers/processors).
Sec. 6 and Sec. 7
Federal and State Enforcement
Violations of this Act are treated as unfair or deceptive acts or practices under the Federal Trade Commission Act, granting the FTC full enforcement powers. Additionally, State Attorneys General are authorized to bring civil actions as parens patriae on behalf of their residents to enjoin violations, enforce compliance, obtain damages, or seek other relief, with a notice requirement to the FTC.
Sec. 8
App Developer Safe Harbor
An app developer is deemed not liable for a violation of this Act if they can demonstrate good faith reliance on age verification data or signals provided by a covered app store provider, compliance with their specific obligations under Section 4, and reasonable conformity to widely accepted industry standards for age ratings and content descriptions.
Sec. 9
Preemption of State and Local Laws
This section states that no State or political subdivision may maintain, enforce, prescribe, or continue in effect any law, rule, regulation, requirement, standard, or other provision having the force and effect of law related to the provisions of this Act. However, it explicitly clarifies that this does not preempt, displace, or supplant contract or tort law.
The definition of 'know' includes 'actual knowledge or willful disregard.'
Sec. 2(9)
Why it matters:This is standard legislative practice for defining key terms that apply throughout the bill.
Case for: Supporters argue that including 'willful disregard' ensures that companies cannot avoid liability by intentionally remaining ignorant of violations, thereby strengthening enforcement.
Case against: No specific case against this definition is typically raised, as it is a common legal standard for culpability.
Estimated impact: This definition broadens the scope of culpability for non-compliance, making it harder for entities to claim ignorance as a defense.
The definition of 'verifiable parental consent' requires authorization that is 'freely given, specific, informed, and unambiguous agreement.'
Sec. 2(19)
Why it matters:This is standard legislative practice for defining key terms that apply throughout the bill.
Case for: Supporters contend that this stringent definition ensures that parental consent is genuinely meaningful and not obtained through deceptive practices or vague agreements, providing robust protection for minors.
Case against: Some industry stakeholders might argue that such a high bar for consent could create friction in the user experience and increase the complexity of obtaining and documenting consent, potentially leading to lower consent rates.
Estimated impact: This definition sets a high standard for the quality of parental consent, requiring clear disclosures and active agreement, which could impact user flows and app store design.
Rules of Construction clarify that nothing in the app store obligations prevents blocking unlawful material, spam, or criminal activity, or protecting security. It also states that measures cannot be arbitrary, capricious, anti-competitive, or unlawful, and do not restrict political, religious, or other viewpoints.
Sec. 3(b)
Why it matters:This is a common legislative technique to clarify the scope and intent of a section, preventing misinterpretation or unintended consequences.
Case for: Proponents argue these clauses are crucial to ensure the bill's primary purpose of child safety is not undermined by other concerns, while also safeguarding against potential overreach or censorship by app stores.
Case against: No specific case against these clarifying rules is typically raised, as they aim to balance various interests.
Estimated impact: These rules provide important guardrails for app store behavior, ensuring they can still perform essential platform moderation functions while preventing them from using the bill's requirements for anti-competitive or viewpoint-discriminatory purposes.