NIST Privacy Framework

Before taking payment, disclose clearly and conspicuously the total price, any restrictions or conditions, the material terms of your refund, cancellation or exchange policy (or that you have none), prize terms and odds, material investment risks, and the quantity and characteristics of the goods or services; do not charge a consumer before receiving an express verifiable authorization (written, recorded oral, or confirmed by an independent third party).

Do not offer a prize promotion that requires a purchase or payment, and do not leave a voicemail or answering-machine message falsely claiming a current business matter or relationship and asking the consumer to call back.

Make authorized recorded commercial advertising end, or free the subscriber's line for incoming and outgoing calls, immediately when the subscriber hangs up.

During a telephone or text-message solicitation or a sales presentation, do not use threatening, intimidating, profane or obscene language, and do not repeatedly or continuously conduct it in a manner a reasonable person would consider annoying, abusive or harassing.

Do not knowingly cause a caller-identification service for voice or text messages to display inaccurate or misleading information in order to defraud, wrongfully obtain something of value from, or otherwise harm a person.

Generate the system's calls randomly at unequal intervals and keep them off every emergency line.

Do not knowingly insert false caller identification information into a caller identification system with the intent to mislead, defraud, or deceive the recipient of a telephone call; inserting the true name or number of the person on whose behalf an authorized call is placed is not false information.

Allow a purchaser in a telephone sales transaction to cancel the purchase within three business days of receiving the goods, services, or property, disclose that cancellation right to the purchaser during the call, and refund all payments within thirty days of a valid cancellation.

Do not alter a caller's voice to disguise the caller's identity in order to defraud, confuse or injure the recipient, or to obtain personal information for fraudulent or unlawful use.

Do not misrepresent or falsify your identity, the identity of a person you represent, your telephone number, your location, or the purpose of the call when speaking with the subscriber or in the prerecorded, synthesized-voice or text message a device disseminates.

Whether or not you use such a device, do not intentionally alter, misrepresent or falsify the information a caller identification service would ordinarily provide to the called subscriber.

Do not misrepresent or falsify your own identity, the identity of a person you are calling on behalf of, or the purpose of the telephone solicitation.

For direct marketing by calls, automated calling and communication systems, telefax, SMS or MMS, and for obtaining prior consent to such calls, use only numbers identified by the national destination code for that purpose in the numbering plan. This does not apply to calls to the published contact details of a subscriber or user who is a sole trader or a legal person (section 116, paragraph 12).

If the Act applies to you and you provide customer service by telephone, give that service a specific numeric code, different from the code you use to provide commercial services through the telephone channel, and use a specific code for those commercial services too (Article 16(3)); covered companies have twelve months from the Act's entry into force on 28 December 2025 to adapt their customer service (single transitional provision, paragraph 1).

If you are an operator, block voice calls that arrive from special-rate or smart-rate numbers assigned to services other than customer service (Article 16(4)).

Do not require a credit card or checking account number as a condition of receiving an item you represent as free.

Do not abandon more than 3% of answered outbound calls in a calling campaign measured over 30 days, where a call is abandoned if not connected to a sales representative within two seconds of the called person's completed greeting.

Do not initiate a telephone solicitation to a residential subscriber before 8 a.m. or after 9 p.m. local time at the called party's location.

Do not cause a caller identification service to knowingly transmit misleading or inaccurate caller identification information on a voice call or text message, with the intent to defraud, cause harm, or wrongfully obtain anything of value; this does not restrict blocking your own caller ID.

Design and operate an automatic dialing-announcing device, or any other device playing a prerecorded or synthesized voice message, to disconnect, disengage or terminate the call within five seconds after the called party ends it.

Do not place a telephone solicitation call that will be received before 8 a.m. or after 8 p.m. local time at the called party's location.

Do not initiate, or cause to be initiated, an unsolicited commercial email (one to a recipient with whom you have no prior or existing business or personal relationship, sent without their request or express consent) that uses a third party's Internet domain name without permission, otherwise misrepresents its point of origin or transmission path, or contains false or misleading information in the subject line.

Begin the subject line of every unsolicited commercial email with ADV:, or with ADV:ADLT where the message concerns goods, services or credit that only a person 18 or older may obtain.

Make commercial information that forms part of an information society service clearly identifiable as commercial information, and where the Electronic Communications Law lets you send it without the recipient's prior consent, make it clearly identifiable as sent without prior consent.

Make promotional offers such as discounts, premiums and gifts, and promotional contests or games, clearly identifiable, and present the conditions for obtaining or taking part in them clearly and unambiguously and keep them easily accessible.

Do not initiate, conspire to initiate, or assist in transmitting commercial email that is sent from a computer in Maryland, or to an address you know or should know is held by a Maryland resident (you are presumed to know where the registrant of the recipient's domain name makes that available on request), and that uses a third party's Internet domain name or email address without permission, carries false or misleading information about the message's origin or transmission path, or carries false or misleading information in the subject line that has the capacity, tendency, or effect of deceiving the recipient.

Do not use a third party's internet domain name or e-mail address in identifying the point of origin or transmission path of a commercial e-mail without that third party's consent, misrepresent that information, or fail to include the information necessary to identify the point of origin.

Do not sell, give, distribute, or possess with intent to sell, give or distribute, software primarily designed, of only limited other commercially significant use, or marketed for falsifying commercial e-mail transmission or routing information.

When sending a commercial electronic mail message, do not falsify the message's routing information or use a false or misleading subject line, and do not use a third party's internet address or domain name without that party's consent to make it appear the third party sent the message.

Do not use a computer or computer network without authority, and with the intent to falsify or forge electronic mail transmission information or other routing information, in connection with transmitting unsolicited electronic mail through or into the network of an email or Internet service provider or its subscribers; for this offense electronic mail includes a fax and a wireless advertisement.

Do not sell, give, distribute, or possess with intent to distribute, software primarily designed or produced to enable falsification of electronic mail transmission or routing information, software with only limited other commercially significant use, or software marketed for that purpose.

Do not initiate, conspire to initiate, or assist the transmission of an unsolicited commercial email or fax from a computer or fax machine in Pennsylvania or to an email address that uses a third party's Internet domain name in the return address without permission, carries false or misleading return-address information that keeps the recipient from replying to you, or carries false or misleading information in the subject line.

Do not falsify or forge email, fax or wireless-advertisement routing information, misrepresent or obscure a message's point of origin or transmission path, or sell or distribute software primarily designed to enable that falsification.

Do not make the end user or subscriber bear the cost of the commercial information or direct marketing you send by these means.

Set commercial information apart and mark it so clearly that there is no doubt it is commercial information.

Describe promotional offers, such as price reductions and free benefits, clearly, and state clearly the conditions for taking them up where they are part of the offer.

For promotional offers such as discounts, prizes and gifts, and for promotional contests or games, make clear that they are promotional and make the conditions for access and, where relevant, participation easily accessible and clear and unequivocal; the rule applies subject to the corresponding prior authorization (Article 20(2)).

Do not invite the recipient of electronic mail marketing of information society services to visit a website whose marketing breaches section 9 or section 10, third paragraph (section 20 a).

Do not intentionally transmit an unsolicited commercial electronic mail message that falsifies its transmission or routing information, or any commercial electronic mail message with false, deceptive or misleading information in the subject line or that uses another person's Internet domain name without that person's consent.

Do not use a computer or computer network with intent to falsify or forge electronic mail transmission information or other routing information in connection with transmitting unsolicited commercial email (spam), and do not knowingly sell, give, distribute, or possess with intent to distribute software primarily designed, of limited other commercial use, or marketed to enable that falsification.

Do not initiate, conspire to initiate, or assist in transmitting a commercial email message, from a Washington computer or to an address you know or have reason to know is a Washington resident's, that uses a third party's internet domain name without permission or otherwise misrepresents or obscures the message's point of origin or transmission path.

Do not use a subject line that, based on your actual knowledge or knowledge fairly implied on the basis of objective circumstances, contains false or misleading information.

You are obliged to have internal reporting channels and procedures if you had 50 or more employees at the start of the calendar year (Chapter 5, section 2).

Do not publish an obscene article to, or in the presence of, a person under the age of sixteen years; publishing includes distributing, circulating, selling, letting on hire, giving or lending a thing, or showing, playing or projecting a thing containing matter to be looked at or a record.

Do not import an obscene article, publicly publish one, or have one for publication for gain.

Do not create or distribute programmes that could harm a child's physical, psychological, moral or social development (Art. 17a(1)).

Follow the Code of Conduct the Council for Electronic Media adopts with providers, including the public broadcasters BNT and BNR, which prescribes measures such as scheduling, age-verification tools and encoding to assess, label and restrict access to harmful programmes.

Do not make sexually explicit material available to young persons (under 18) on the internet for commercial purposes.

Cybercafé operators: identify a user before giving internet access, under the conditions a decree sets.

Cybercafés and internet-access providers: do not let a minor under 18 access a cybercafé unless accompanied by an adult authorised by the minor's parents or guardian.

Hold a renter's or exhibitor's licence issued by the Minister before renting or exhibiting film to the public (ss. 4 and 5).

Get the censor's approval before exhibiting a film publicly or selling or renting a video tape to the public, and do not rent a video tape otherwise than in accordance with that approval; the censor may approve generally, refuse, require excisions, or restrict exhibition to a specified class of persons (ss. 16-18, 23, 25).

Take appropriate measures to protect minors from content that may harm their physical, mental or moral development, including installing and operating age-verification systems for platform users in relation to that content.

Choose suitable measures, including age-verification tools or other technical measures, so that a programme capable of disrupting a minor's physical, psychological or moral development, such as pornography or gross gratuitous violence, cannot ordinarily be seen or heard by a minor.

Give sufficient, freely and easily accessible information about the potentially harmful content a programme carries.

Adopt measures protecting minors from programmes, user-uploaded videos and commercial communications capable of harming their physical, psychological or moral development, and do not make such content available so that a minor could ordinarily see or hear it.

Where appropriate, introduce and operate an age-verification system for platform users confronting such content, together with easily usable content-rating tools, parental-control systems and a transparent notice-and-complaint procedure.

Register with Radio- og tv-naevnet.

Follow the Culture Minister's rules requiring appropriate measures to protect minors from harmful content, and to protect the public from content that incites violence or hatred, or whose spread is a criminal offence (public incitement to terrorism, child pornography under Straffeloven section 235, racism or xenophobia).

Do not distribute, publish, advertise or expose pornographic material to a child (a person under 18) or to an adult without that adult's consent (section 15(1)).

When you publish or exhibit pornographic material, print the publisher's name and prescribed address particulars, and indicate the material's age restriction or consumer advice.

Take appropriate measures, such as age verification tools, parental controls and restricted broadcast times, so that content that may impair minors' physical, mental or moral development is not normally seen or heard by them; the strictest measures apply to the most harmful content, such as gratuitous violence and pornography.

If you provide a video-sharing platform service whose provider is treated as established in Finland, take appropriate measures to protect children from programmes that may be harmful to a child's development (section 7 a).

Make those measures proportionate to the nature of the programmes and the harm they may cause, taking into account the size of the service and the nature of the service offered (section 7 a).

Offer an audiovisual programme only if it carries a clearly visible age-limit and content mark under Section 16, or, for a programme unambiguously intended only for those 18 and older, a clear mark of the 18-year age limit alone (s. 5).

Classify a programme harmful to a child's development as 7, 12, 16 or 18 years with a content symbol; a programme intended solely for adults may skip classification if it carries the 18-year mark instead (s. 16).

Perform reasonable age verification, confirming a visitor is 18 or older, before granting access, using a standard method or an anonymous age verification service that the visitor selects.

Protect by default: show no pornographic content before age verification.

Subject the age verification system to independent audits.

Verify that users are adults, using a system that meets the technical référentiel (reference framework) Arcom adopted after an opinion from the CNIL.

Perform reasonable age verification before granting access, using a digitized identification card, government issued identification, or a method meeting the NIST Identity Assurance Level 2 standard.

Do not offer pornographic content unless you ensure it is accessible only to adults through a closed user group (geschlossene Benutzergruppe), typically verified by an age verification system (Altersverifikationssystem) assessed against KJM criteria.

Ensure that children or adolescents of the age groups concerned (without restriction, from 6, from 12, from 16, from 18 years) do not usually perceive the offer.

Meet that duty by technical or other means that make it impossible or substantially harder for the age group concerned to perceive the offer, or by labeling the offer with an age rating that suitable youth protection programs (Jugendschutzprogramme) can read, or by choosing a time of distribution at which the age group concerned does not usually perceive it.

Take appropriate measures to protect children and adolescents from offers that impair their development.

Consider setting up and operating systems for age verification, and systems through which parents can control access to such offers.

If you provide a video-sharing platform established in Hungary, apply the measures and technical solutions of Section 15/F wherever content is capable of harming the physical, mental, spiritual or moral development of minors (Section 15/D(1)).

Provide effective age verification, resting on checking the real age of the platform's users, that can in practice ensure minors do not normally hear or see the harmful content (Section 15/F(2) and (3)).

Do not distribute content, including commercial audio or video communications, that could have a harmful effect on a child's physical, mental or moral development, in particular pornography or gratuitous violence; linear programming has exceptions for watershed hours, technical restriction and news content.

Video-sharing platforms: take appropriate measures to protect children from content, user-generated content and commercial communications that could harm their physical, mental or moral development.

Perform reasonable age verification, through a digitized identification card or a commercial age verification system using government issued identification or transactional data, and prevent minors from accessing the material.

Observe the Code of Ethics, which classifies all such content as U (suitable for all ages), U/A 7+, U/A 13+ or U/A 16+ (viewable below the stated age with parental guidance), or A (restricted to adults, meaning people 18 or older).

Make access control mechanisms, including parental locks, available for content classified U/A 13+ or higher.

Use a reasonable age verification method before granting access.

Perform reasonable age verification of Iowa users, confirming they are 18 or older, before granting access.

Implement effective age assurance so that children are not normally able to access pornography or gratuitous violence on the platform.

Do not rely on self declaration alone: Coimisiún na Meán has stated it does not satisfy the requirement, though it has not mandated one specific verification method.

A website controller that facilitates or permits the publication of pornographic content on the internet must ensure that the content cannot be accessed by any person in the State who has not attained the age of majority, and before enabling a person in the State to access it must require the person to fulfil age verification requirements.

An application store service that facilitates or permits an application whose purpose is to provide pornographic content must ensure that the application cannot be accessed by such a person, and before enabling access to the application must require the person to fulfil age verification requirements.

Take appropriate measures to protect minors from programmes, user-generated videos and audiovisual commercial communications that may impair their physical, mental or moral development (Article 42(1)(a)).

Set up systems to verify the age of platform users, in compliance with personal data protection law, for content that may harm the physical, mental or moral development of minors (Article 42(7)(f)).

Verify that users are adults before granting access to pornographic content.

Follow the technical and process rules AGCOM (the communications regulator) sets for how that age verification is done.

Verify that Kansas visitors are 18 or older before granting access.

Do not distribute to minors information prohibited for children: incitement to self-harm, suicide or antisocial or unlawful acts, sexually explicit content, depiction of sexual violence, profanity, content banned for children by other Kazakhstani laws, and content propagandizing non-traditional sexual orientation or paedophilia.

Where such distribution happens over the Internet, put administrative, technical, software or other means in place restricting children's access to it.

Perform reasonable age verification of Kentucky users, confirming they are 18 or older.

Do not carry a program that could seriously harm a minor's physical, mental or moral development, particularly one with pornographic content or extreme violence.

For other potentially harmful programs, protect minors by choosing the broadcast time or by a technical measure.

Do not distribute to children information that causes harm to their health or development and is prohibited for distribution among children, where the conduct does not amount to a criminal offence.

Do not distribute audio or audiovisual works depicting physical or psychological violence, bloody or horror scenes, drug use or sexual acts, or containing coarse or indecent language, between 7:00 and 22:00.

If an electronic mass medium does not observe that watershed for content that could harm a minor's physical, mental or moral development, provide restricted access control, preceded by an acoustic warning signal and marked with a visual symbol describing the content's potentially harmful nature.

Do not disseminate information that harms minors (erotic content is one of the categories the Law lists, alongside violence, gambling promotion and self-harm) directly to minors; confine it to places minors cannot access or times they would not be using it.

Alternatively, use technical measures that let the person responsible for a child's upbringing control the child's exposure, such as tools intended to verify a user's age, parental-control tools or content-filtering systems.

If you provide a video-sharing platform service under Lithuanian jurisdiction, take measures to protect minors from programmes, user-generated videos and commercial audiovisual communications that spread information with a negative effect on minors (Article 40-4(1)).

Implement measures from the list in Article 40-4(2), which includes creating and applying age-verification systems for platform users and providing parental control systems managed by end users, for content with a negative effect on minors.

Perform reasonable age verification of Louisiana visitors, confirming they are 18 or older.

Audiovisual media service providers: make programs likely to harm minors' physical, mental or moral development available only under conditions that normally prevent minors from seeing or hearing them; a grand-ducal regulation sets the specific measures, which may include age-verification tools.

Video-sharing platform providers: take proportionate measures to protect minors from harmful programs, user-generated videos and audiovisual commercial communications, including systems to verify the age of users for content likely to cause such harm.

Take the necessary measures to protect minors from programmes, user-generated videos and audiovisual commercial communications that may impair their physical, mental or moral development.

Establish and operate age verification systems for users with respect to such content.

Distributors: print or affix the applicable classification on the game's cover and in its advertising, following the classification guidelines the Secretaría de Gobernación issues.

Marketers: do not advertise, exhibit, sell or rent a video game whose classification is not visible under the guidelines.

Perform reasonable age verification before granting access, using a commercial age verification system or a transactional data method.

Perform reasonable age verification of users as 18 or older; operating without it is an unfair practice under the Merchandising Practices Act.

Use a third party to perform reasonable age verification, confirming that an individual attempting to access the material is eighteen years of age or older.

Act in the minor's best interest: do not broadcast on a linear service programmes likely to affect a minor's physical, mental or moral development, especially those containing pornography or unjustified violence.

You may carry such content on a linear service only behind a conditional access system.

Maintain a special package of services devoted to children.

When concluding a service contract, ask whether there are children under the age of 18 in the customer's care, and agree with the customer whether to use special channel services for adults.

Use reasonable age verification methods before granting access.

Make content that could impair a minor's physical, health-related, moral, mental, intellectual, emotional or social development available only in the way least likely for minors to ordinarily encounter it, using measures such as content categorisation and age-verification tools.

Make content that could seriously impair that development, including pornography or gratuitous depiction of violence, available only behind the highest level of technical protection, such as a special code or identity verification.

Perform reasonable age verification of Nebraska users; publishing such material without it creates civil liability.

Offer content capable of harming the physical, mental or moral development of a person under 16 only if the institution responsible for the content is affiliated with the organization the Minister has recognised under Article 4.2 and is bound by that organization's rules and supervision.

Make the most harmful content, expressly including pornography, inaccessible to persons under 16.

Do not supply, distribute, exhibit or display a publication classified as restricted otherwise than in accordance with its classification, most often an age limit such as 18 or a younger age. This is a strict-liability offence; knowing or having reasonable cause to believe it is restricted carries a higher penalty.

Verify that visitors are 18 or older using a commercial database or another commercially reasonable method.

Perform reasonable age verification, such as a digitized identification card or a commercial verification system using a government ID or transactional data.

Verify that visitors are 18 or older using a digitized identification card or a commercial age verification system relying on government-issued identification, a commercially available age and identity database, or transactional data.

Verify that a user, and any person creating an account or subscription, is 18 or older using a reasonable method such as government-issued identification, a commercial age verification system or transactional data.

Re-verify a user's age every two years.

Perform reasonable age verification to confirm a visitor is 18 or older, using a digitized identification card, an independent third party verification service checking commercial databases, or a commercially reasonable method relying on transactional data; without it you are civilly liable to a minor's parent or guardian.

Let internet and cellular subscribers request that access to your site be blocked.

Do not sell, let on hire, display or deliver a restricted publication, or an “R” film or its advertising matter, to a minor (a person under 18).

Do not publish such a publication, film or advertising matter in a public place unless it is sealed or wrapped with its classification markings visible; publishing otherwise than in accordance with these conditions is an offence.

Do not sell to, or accept from, a person under 18 an admission ticket to a screening of such a film. It is also unlawful for a person under 18 to enter, or to misrepresent or use false evidence of age to gain admission.

Where you doubt a person's age, require the person seeking admission to exhibit a residence certificate or other proof of age.

A service provider that enables access to pornographic content must use an age-verification mechanism and prevent minors from accessing that content; the mechanism may not rely on a self-declaration of age.

An internet access provider must, free of charge, prevent access to websites using domain names entered in the register kept by the President of the Office of Electronic Communications no later than 48 hours after the entry, redirect connections to the notice page run by that President, and restore access to a domain name no later than 48 hours after it is removed from the register.

Do not broadcast a programme or other transmission that endangers a minor's physical, psychological or moral development, in particular one carrying pornographic content or unjustifiably exposing violence.

Broadcast a programme or transmission that could negatively affect a minor's proper physical, psychological or moral development (other than content the outright ban already covers) only between 23:00 and 06:00.

Make audiovisual media services that could impair minors' physical, mental or moral development available only in a way that ensures minors will not normally hear or see them, for example by selecting the broadcast time, using age-verification tools or applying other technical measures, in proportion to the potential harm of the program (art. 39(1)).

Apply the strictest measures to the most harmful content, such as unjustified violence and pornography (art. 39(1)).

If you provide a video-sharing platform service as a provider established in Romania or otherwise under Romanian jurisdiction, take appropriate measures to protect minors from programs, user-generated videos and audiovisual commercial communications that may impair their physical, mental or moral development, especially programs containing pornography or gratuitous violence (art. 42^7 lit. a).

Adopt access-control measures for the protection of minors, including systems that verify the age of platform users with respect to content that may impair minors' physical, mental or moral development (art. 42^8 alin. 7 lit. f).

Hold a licence from the Film Control Board before exhibiting or lending a film; the Board determines licence classes, which include internet or other computer-based suppliers.

Do not exhibit a film contrary to its classification by the Principal Censor: either general exhibition, or exhibition restricted to a specified class of persons only (persons of or over the age of 5 years) or to specified purposes or occasions only.

Classify content that could harm a child's physical, mental or moral development into one of five bands; the most restrictive is adult content, covering unjustified violence and pornography.

On a non-linear service, put adult content behind a technical control that is locked by default and works like a PIN code, so that only an adult who understands its purpose can unlock it.

Do not harm the physical, mental or moral development of children in the media.

Offer programme content that could seriously harm children's physical, mental or moral development, such as pornography and unjustified violence, only so that children cannot normally access it, for example by an appropriate technical means or technical protection.

Do not distribute a film, game or publication in South Africa unless it has been classified and carries a clearly visible label showing its age limit and content nature next to the Film and Publication Board's logo.

Do not distribute or exhibit an unclassified film, game or section 16(2) publication, or one classified 'refused classification' or 'XX'.

Perform reasonable age verification of South Carolina visitors to confirm they are 18 or older, using a digitized identification card, a third party verification service, or a commercially reasonable method relying on transactional data.

Implement reasonable age verification using a state issued driver license or non-driver ID, bank account information, an age restricted debit or credit card, or another reliable method.

Prevent minors from accessing that material.

Verify the recipient's age and identity before providing such media, using in-person confirmation, a certified digital certificate or mobile phone carrier authentication.

Do not provide such media to anyone under 19.

Set up and operate age verification systems for users, with respect to content that can harm the physical, mental or moral development of minors, that in every case prevent minors from reaching the most harmful audiovisual content, such as gratuitous violence or pornography.

Provide parental control systems managed by the end user for content that can harm the physical, mental or moral development of minors.

Take appropriate measures so that user-generated videos, TV programs and audiovisual commercial communications carrying graphic depictions of violence of a realistic nature or pornographic images are not made available in a manner creating a significant risk that children may see them, unless justifiable for particular reasons.

Take appropriate measures against user-generated videos, TV programs or audiovisual commercial communications amounting to specified criminal offences, such as unlawful threat, agitation against a population group, child pornography, or public incitement to terrorism or particularly serious crime.

Do not allow a child to access pornographic or indecent websites (Article 34).

Perform reasonable age verification, confirming the user is 18 or older, before granting access.

Re-verify after each age-verified session of at most 60 minutes.

Use reasonable age verification methods for Texas visitors, confirming they are 18 or older.

From September 1, 2025, if you operate a website with a publicly accessible tool for creating artificial sexual material harmful to minors, or otherwise make publicly available an application for creating sexual material harmful to minors, use reasonable age verification methods to verify that an individual attempting to access the tool is 18 or older.

As a cinema-exhibition licensee, post the age-rating category assigned to each film in a clearly visible place.

As a cinema-exhibition licensee, do not knowingly or negligently admit a person below the age set for a film's category during its screening.

Choose an age assurance method Ofcom's guidance names as capable of being highly effective: photo ID matching, facial age estimation, credit card checks, open banking checks or mobile network operator checks.

Do not rely on self declaration or a basic checkbox; the guidance states it is not sufficient.

Use age verification, age estimation or both to ensure children cannot normally encounter that content; the method must be highly effective at correctly determining whether a user is a child.

Keep written records of the age verification or age estimation method you use, and publish a public statement on the methods used.

Verify that Utah visitors are 18 or older using a digitized identification card, an independent third party age verification service, or a commercially reasonable method relying on transactional data.

Treat a visitor actually located in Utah as accessing the site from Utah, and so subject to age verification, even when the visitor connects through a VPN.

Do not distribute to children material inciting self-harm or suicide, or inducing them to use alcohol, tobacco, narcotic or psychotropic substances, gamble, or engage in prostitution, vagrancy or begging.

Do not distribute to children material justifying violence and cruelty, denying family values or fostering disrespect toward parents, containing obscene language or of a pornographic character, or identifying a child victim of an unlawful act.

Before you exhibit, disseminate, transmit or sell pornographic material or material reserved to adults through any medium involving information technology, give the due warnings so that the user can restrict access by children and adolescents.

Verify that visitors are at least 18 years old using a commercially available age verification database or another commercially reasonable method.

Verify that a user is 18 or older using digital identification or a commercial or governmental age verification system.

Perform reasonable age verification of users, using a driver's license, identification card, passport, an age restricted credit or debit card, or another reliable method.

Keep persons of the age or sex the Board's condition specifies from being present where the film or entertainment is being exhibited or given; a person present in the course of employment, or outside the admitted area, has a defence.

Cause the Board's restriction to be prominently displayed at the place or premises.

A provider of an online social networking service or video-sharing platform service would have to stop a person below the age of 15 from creating an account or using one, where the service poses a risk to the privacy, safety or security of a minor below that age; the proposal defines that risk by listed features, such as live streaming to an indeterminate audience, contact with people outside a user's existing connections, or a recommender system based on profiling.

A provider that lets a guardian set up a limited account for a minor above 13 and below 15 would have to keep the tools for guardians always activated, let the guardian set a daily time limit of no more than one hour, and let the guardian pre-approve new contacts and cap the number of contacts.

Publish such content only together with a warning notice about the possible endangerment of minors, displayed before the content.

Add identifiers in the page's source code that indicate the content's category and that filter software (as defined in the Electronic Communications Act) can recognise.

Sort every programme you intend to publish into one of the age-rating categories the law defines before it is broadcast; exceptions include news, political information, sports and trailer programmes, and a programme viewable regardless of age goes into category I.

Sort a programme whose defining element is violence, the promotion or portrayal of deviation from the self-identity corresponding to the sex assigned at birth, of gender reassignment or of homosexuality, or the direct, naturalistic or gratuitous portrayal of sexuality, into Category V, which a linear service may publish only between 22:00 and 05:00 (Sections 9(6) and 10(1)(d)).

Disclose the minimum age and age range able to use your Product, Service or Feature; the regulation sets five age bands: 3 to 5, 6 to 9, 10 to 12, 13 to 15, and 16 up to under 18.

Provide a mechanism that verifies whether a user is a child, and calibrate its level of assurance to the risk your Product, Service or Feature poses to a child's rights.

A provider that makes an AI chatbot available within the State must not make an AI companion service or an intimate AI service available to a child, meaning a person under the age of 16.

Take appropriate and proportionate measures to determine whether a user is a child; requiring a user to self-declare age is not enough on its own.

Carriers: before concluding a mobile phone or PHS internet-connection contract, confirm whether the counterparty is a young person and, if not, whether the actual device user is.

Carriers: provide the internet connection conditional on use of a youth-harmful-information filtering service whenever the contracting party or device user is a young person, unless the young person's guardian opts out; sellers of covered mobile handsets must implement filtering-enabled measures on the same conditional basis.

Give every item an age classification before distribution, assessing its theme, genre, content and artistic design, how a child of a given age category is likely to perceive it, and the likelihood of harm to a child's health and development.

Classify into one of six categories: under 6, from 6, from 12, from 14, from 16, and from 18 (information containing content prohibited for children).

Develop and implement age-verification mechanisms; the guidelines do not prescribe a specific method.

Develop and publish a child online protection and safety policy.

Establish mechanisms that enable parents and legal guardians to block their children's access to harmful content.

Take appropriate measures to protect the public from content and user-generated video or audio commercial communications that could harm minors' physical, mental or moral development, that could incite violence or hatred, or that constitute a listed criminal offence.

Publish your own publicly accessible code of conduct addressing commercial communications aimed at, or capable of negatively affecting, the psychological or physical development of minors, including in children's programming.

Take suitable and reasonable measures to ensure that minors of the relevant age group do not obtain access to such a product or service.

Offer audio-visual media products and services, in particular films and entertainment software, to a minor only consistent with a minimum-age classification.

Take appropriate measures to protect minors from broadcasts, user-generated videos and audiovisual commercial communication that could impair their physical, mental or moral development.

Take appropriate measures to protect the general public from content whose dissemination is itself a criminal offence, including incitement to a terrorist act and child-pornography offences under the criminal code (Strafgesetzbuch).

If your service is, in your opinion, likely to be accessed by child users, design and operate it to prevent a child's access to suspected harmful content and to limit features that increase or sustain a child's use of the service.

Make parental control features available.

Do not allow a child or adolescent access to, exposure to or a recommendation of content, especially images and videos, that generates or promotes harassment, sexual abuse or exploitation, hate or violent extremism, unlawful conduct, pornography or other explicit sexual material, or suicide, self-harm and eating disorders (Article 3).

Implement reliable and secure mechanisms to identify the age of your users; they must not be limited to the user's self-declaration of age (Article 4, item I).

Do not make an advanced chatbot available to a minor if it could foreseeably undermine the minor's safety, wellbeing, or development.

Do not knowingly make false or misleading statements or representations to a minor, or to a minor's parent or guardian, about your service, such as falsely denying that it is addictive or safe to minors or failing to disclose or warn of its harmful effects.

Use reasonable care to avoid a heightened risk of harm to minors from an online service, product, or feature.

Give minors accessible controls over addictive design features such as infinite scroll and push notifications.

Do not use dark patterns (section 87-1308(2)).

Treat each of the eleven features listed in section 87-1302(3) as a covered design feature when you provide the minor and parental tools and the notice that sections 87-1304 and 87-1306 require, including auto-playing video or audio, quantification of engagement, gamification, virtual currencies, image-altering filters, requiring or repeatedly prompting for account creation, and creating barriers to deleting an account.

Provide a prominent and accessible user interface for a covered child, covered minor and parent to report harms experienced on the online service.

Do not send notifications to a covered child or covered minor by default, between 10:00 p.m. and 6:00 a.m., or on a weekday between Labor Day and Memorial Day between 8:00 a.m. and 4:00 p.m.

Turn AI companion features off by default for users you know are minors.

Label, censor, redact or otherwise apply access control so that content inappropriate for a child, such as sexually explicit content or images of violence, is not viewable to a child.

Tell users through your terms of service not to create, publish, modify, transmit, store or share content harmful to a child.

Create and operate effective technical safeguards, including parental-control systems or other appropriate measures, protecting minors from programmes, user-generated video or other content that could harm their proper physical, psychological or moral development, in particular pornographic content or unjustified violence.

Let a platform user classify the programmes, user-generated video or other content they upload, and apply those same technical safeguards to it.

If you are a video-sharing platform provider, create and manage systems to verify the age of the platform's users and audience, among other adequate measures, to protect children and young people from content that could harm their physical, mental or moral development (Article 69.º-C, alínea e)).

Provide a parental-control system under the end user's own control.

Do not disseminate information that could compromise a child's development (art. 38).

Protect children against pornography, harmful information and scenes of violence disseminated through video clubs, internet sites, advertising and other documents that could harm their harmonious development, and protect childhood in audiovisual programming (art. 38).

Classify an information product yourself before it enters circulation in Russia, into one of five age categories: for children under 6, for children 6 and older, for children 12 and older, for children 16 and older, or prohibited for children (Article 6).

Put the age mark (0+, 6+, 12+, 16+ or 18+) on an information product before circulation, at the minimum display size Article 12 sets; information distributed over telecommunications networks, including the Internet, is exempt unless it is registered network media or an audiovisual service (Articles 11 and 12).

As a digital content provider or retailer, make digital content filtering tools available, maintain plans to manage harmful online content, provide a reporting function for users, and give a clear external label describing whether platform content is suitable for children (Article 4).

Put in place a mechanism to prevent children from accessing age-inappropriate content, sites, products or interactive services (Article 4).

As a media service provider, take all measures necessary so that your program content does not harm the physical, mental or moral development of minors, and act in a minor's best interest when timing or otherwise publishing content that could cause that harm (Article 64).

As a video-sharing platform provider, take appropriate measures to protect minors from program content, user-generated video content or audiovisual commercial communications that could harm that development (Article 115).

Minimise all end-users' exposure to harmful content (sexual content, violent content, suicide and self-harm content, cyberbullying content, content endangering public health, and content facilitating vice and organised crime) through published community guidelines and content moderation.

Unless you restrict child access entirely, give a child's account (a child is anyone below 18) age-appropriate default settings that are more restrictive than a general account's, and show a clear warning before the child or a parent opts out of those protective defaults.

Adopt appropriate measures to protect minors from programmes, user-created videos and audiovisual commercial communications that may impair their physical, psychological or moral development (section 48(1)(a)).

Use the measures section 49 lists as the case calls for: protective rules in your terms of use, a reporting and flagging mechanism, a complaints procedure, media-literacy tools, a user-controlled parental-control system, and an age-verification system for users in relation to content that may impair minors' development.

If you provide a video-sharing platform within Slovenian jurisdiction, adopt appropriate measures to protect children from content that could harm their physical, mental or moral development; the statute names an age-verification system for platform users and a user-managed parental-control system as example measures.

Publish rules that set out how users can report breaches, how reports are handled, which measures remove unlawful content, and how complaints against those measures are handled.

Limit addictive design features.

Limit nighttime and school hours notifications.

Comply with a request from a minor under 18, or the minor's legal guardian, to restrict the minor's game access to specific hours or a set daily duration.

If an industry branch's age-classification code is declared binding on you although you are not a member of the branch organisation that wrote it, apply it: a binding code must set at least five age tiers, with the highest reserved for adults, and cover age-labelling and age-verification rules.

Establish self-regulatory norms and adopt clear, feasible protection measures against content harmful to a child's or juvenile's (a person under eighteen) physical and mental health (Article 46).

When the competent authority for the relevant business notifies you that your content is harmful or that your protection measures are inadequate, restrict a child's or juvenile's access or browsing, or remove the content beforehand (Article 94).

If you provide, have access to or host online content, use it, or operate an internet cafe, take all possible measures to ensure that children do not register, access or contribute to prohibited content (regulation 18).

Provide users with a content-filtering mechanism and parental control (regulation 18).

Ensure that a broadcast service of a nature that could adversely affect the physical, mental or moral development of children and young people is presented in a way that they would not normally hear or see under ordinary conditions (Article 8(3)).

Verify a user's age before granting access to information that may harm a child's physical, mental or moral development (Article 23(1)(3)).

Make available a parental-control system to protect children from such information (Article 23(1)(3)).

Adopt effective and reasonable age-verification mechanisms scaled to your platform's risk classification, under the classification system the Cabinet is to issue.

Do not let a child participate in, hold an account for or access online commercial gaming, including gambling, and take technical and administrative measures, including age verification and parental controls, to prevent that access.

Meet a duty of care to prevent and mitigate specified harms to minors.

Turn on default safeguards for known minors.

Determine the product's age classification before circulation begins in Uzbekistan, with expert help if necessary.

Classify it into one of five categories marked 0+, 7+, 12+, 16+ or 18+, by its theme, genre, content and artistic design, how a child of the relevant age is likely to perceive it, and the likelihood of harm to a child's health.

Do not send push notifications to minors between midnight and 6:00 a.m.

Follow the specific requirements the Government sets under clause 3 of the article.

Do not let a user under 16 create an account or profile on a covered service.

Within twelve months of the ordinance's publication, deploy an effective technical mechanism that verifies a user's age at registration; a user's own false declaration of age does not relieve you of this duty of reasonable vigilance.

Use commercially reasonable age verification on your social media platform.

Take appropriate and feasible measures to protect minors from content that may impair their development.

Also protect the wider public from content inciting violence or hatred, or amounting to child pornography, terrorism, xenophobia or racism offences under EU law.

When applying the age limit, treat 1 January as the date of birth of everyone born in the same calendar year.

Use reasonable age estimation for Idaho account holders, and treat an account holder as an adult only with at least 80 percent confidence that the user is older than 16.

Do not use addictive interface features, or certain advertising, directed at children.

Determine whether a user is an Indiana resident under 16.

If your video sharing platform has an establishment in Ireland and is designated, follow the online safety code that applies to it, including its rules protecting minors from harmful content.

A provider of an online social network or a video-sharing platform must allow a minor to activate an account only after the minor has completed 15 years of age.

Pending uniform European technical measures, verify users' age through the national mini-wallet that implements the European Union age-verification solution, taking account of the arrangements set by the communications authority.

Notify the National Public Safety Commission before starting the business.

Display and communicate a notice that children may not use the service.

Verify the age of Louisiana users.

Implement effective age verification measures so that only users whose ages have been identified as sixteen years or above may register for the service or access a feature of the service appropriate for their age.

Verify age against documents issued by the Government of Malaysia (National Registration Identity Card, passport, birth certificate or another government-recognised document), or an equivalent document issued or recognised by a competent authority in another jurisdiction.

Do not allow an account for a user under 14.

On social media platforms accessible to minors in Massachusetts, disable by default algorithmic feeds, autoplay, infinite scroll, and other addictive design features on minors' accounts.

Send reminders after extended use.

Do not provide an addictive feed to a minor unless you have determined the user is not a minor or have obtained verifiable parental consent.

Do not send addictive feed notifications to a minor overnight or during school hours.

Estimate a new account holder's age after 25 hours of use within six months, and treat the user as a child (age 15 or younger) unless you can conclude with 80 percent confidence that the user is 16 or older; the threshold rises to 90 percent confidence at 50 hours of use.

Verify the age of all users.

Verify the age of prospective account holders on your social media platform using a reasonable age verification method.

Do not send notifications to a minor between midnight and 6 a.m. without parental consent.

Do not allow a child under 14 to hold an account on your social media platform.

Verify users' ages to apply these limits; the bill places age verification duties on platforms.

Disclose the content moderation features and parental control features your platform makes available.

Monitor the social network for, among other things, child sexual abuse material, advertisements recruiting minors as performers in pornographic events, drug-related content, suicide-related content, and material inducing minors into unlawful acts that endanger their life or health.

Publish an annual report on complaint handling and monitoring results.

Verify the age of prospective Tennessee account holders.

Determine whether a Texas account holder is a known minor based on the age they self report at registration.

Have risk mitigation measures in place from 25 July 2025, including age assurance, safer default settings and algorithms, and content moderation.

Use proportionate measures, including age verification or age estimation where appropriate, to prevent children encountering primary priority content harmful to children, such as pornography, self harm, suicide and eating disorder content.

Do not rely on a photo upload age check that lacks liveness detection: Ofcom found one that children could circumvent to be in breach of section 12.

Keep users under 16 off a covered platform.

Verify age before giving access to mature content.

Provide the AI chatbot disclosure the bill requires.

If you are a social media company operating in Utah, implement an age assurance system for Utah account holders.

Apply default protections for known minors.

If you operate a social media platform in Virginia, use commercially reasonable methods, such as a neutral age screen, to determine whether a user is under 16.

Limit a user under 16 to one hour of daily use per platform unless a parent gives verifiable consent to change the limit.

As a covered app store provider, verify a user's age category.

For a minor, obtain verifiable parental consent before the minor may download or purchase an app or make an in-app purchase.

Verify a user's age category.

Link a minor's account to a parent account.