Late last month, a Senate committee considered a 50-page bill with a name that includes the word kids and approved it unanimously. Those two facts alone are enough to raise the suspicion that legislators are heading down a winding road toward a destination they only dimly perceive.
That suspicion is amply supported by the text of the Kids Online Safety Act (KOSA), which ham-handedly aims to shield children and teenagers from vaguely defined dangers lurking on the internet. The unintended but foreseeable results are apt to include invasions of privacy that compromise First Amendment rights and a chilling impact on constitutionally protected speech, both of which will harm adults as well as the “kids” whom the bill is supposed to protect.
KOSA imposes an amorphous “duty of care” on platforms, online games, messaging applications, and streaming services, demanding “reasonable measures” to “protect” against and “mitigate” various “harms” to users younger than 17. The targeted dangers include anxiety, depression, suicide, eating disorders, substance abuse, “addiction-like behaviors,” physical violence, online bullying, harassment, sexual exploitation and abuse, “financial harms,” and promotion of “narcotic drugs,” tobacco products, alcohol, or gambling.
That’s a tall order, and it is not at all clear what meeting this obligation would entail. Nor is it clear when the duty of care applies.
As amended by the Senate Commerce Committee, KOSA applies to any “covered platform” that “knows” its users include minors. But no one knows what “knows” means.
In addition to “actual knowledge,” that condition can be satisfied by “knowledge fairly implied on the basis of objective circumstances.” KOSA directs the Federal Trade Commission (FTC), within 18 months of the bill’s passage, to issue “guidance” about how to understand the latter phrase.
That guidance, however, would not bind the FTC, which is charged with investigating and penalizing platforms that it thinks have violated KOSA. Nor would it constrain state attorneys general, who would be authorized to independently enforce KOSA through “civil actions.”
An earlier version of KOSA provoked criticism from civil libertarians who warned that it would effectively require platforms to verify users’ ages, which would entail collecting personal information. That was a clear threat to internet users of all ages who want to engage in speech without revealing their identities, a well-established First Amendment right.
In response to that concern, the latest version of KOSA revises the duty-of-care test and explicitly says it does not require “age gating or age verification.” But given the burdens the bill imposes and the uncertainty about what counts as “knowledge fairly implied,” platforms still would have a strong incentive to exclude minors or minimize the number of users who are younger than 17.
Hellbound and Down 