A new Senate bill designed to strengthen online privacy protections for minors could bring about major changes in how age is verified across the internet, prompting platforms to implement broader surveillance measures in an attempt to comply with ambiguous legal standards.
The Children and Teens’ Online Privacy Protection Act (S.836) (COPPA 2.0), now under review by the Senate Commerce Committee, proposes raising the protected age group from under 13 to under 17. It also introduces a new provision allowing teens aged 13 to 16 to consent to data collection on their own.
The bill has drawn praise from lawmakers across party lines and received backing from several major tech companies.
We obtained a copy of the bill for you here.
Supporters frame the bill as a long-overdue update to existing digital privacy laws. But others argue that a subtle change in how platforms are expected to identify underage users may produce outcomes that are more intrusive and far-reaching than anticipated.
Under the current law, platforms must act when they have “actual knowledge” that a user is a child.
The proposed bill replaces that threshold with a broader and less defined expectation: “knowledge fairly implied on the basis of objective circumstances.” This language introduces uncertainty about what constitutes sufficient awareness, making companies more vulnerable to legal challenges if they fail to identify underage users.
Instead of having to respond only when given explicit information about a user’s age, platforms would be required to interpret behavioral cues, usage patterns, or contextual data. This effectively introduces a negligence standard, compelling platforms to act preemptively to avoid accusations of noncompliance.
As a result, many websites may respond by implementing age verification systems for all users, regardless of whether they cater to minors. These systems would likely require more detailed personal information, including government-issued identification or biometric scans, to confirm users’ ages.