Law / United States / 
Arkansas
Act 900 of 2025 (SB611), Social Media Safety Act amendments (addictive design)
Act 900 of 2025 (SB611), amending Ark. Code Ann. § 4-88-1401 et seq.
A social media and minors rule binding private bodies.
- Age threshold
- 16
- Covered services
- Social media platforms as statutorily defined.
- How the hook was established
- express
- What makes it apply
- User location
- Verification methods
- Gov ID, Digital ID
- Audit expectation
- periodic
- Who audits it
- Self
What it requires
- Applies to social media platforms as statutorily defined; the Act lowers the covered minor age from 18 to 16.
- Do not use addictive design features (these duties carried a delayed effective date of ).no control in the NIST Privacy Framework
- Provide default privacy settings.NIST Privacy FrameworkGV.PO-P2
- Disable non-essential notifications between 10 PM and 6 AM.no control in the NIST Privacy Framework
These lines are LexLint's reading of the law's text. Also read by: NetChoice, LLC v. Griffin, No. 5:25-CV-5140 (W.D. Ark. ) (recorded ).
In the frameworks
- NIST Privacy Framework
- GV.PO-P2Processes to instill organizational privacy values within system/product/service development and operations are established and in place.
Our reading of where this law's duties sit in each framework, and in the NIST Privacy Framework, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law
Who enforces it
Litigation
- Court
- U.S. District Court for the Western District of Arkansas
- Docket
- NetChoice, LLC v. Griffin, No. 5:25-cv-05140 (W.D. Ark.)
- Posture
- Preliminarily enjoined on , one day before the delayed addictive design provisions were to take effect; the injunction has been reported as on appeal to the Eighth Circuit.
Settledness
The preliminary injunction enjoins the defendants from enforcing the provisions of Act 900 against NetChoice's members.
- As of
- Case link
- https://www.govinfo.gov/content/pkg/USCOURTS-arwd-5_25-cv-05140/pdf/USCOURTS-arwd-5_25-cv-05140-1.pdf
- Case citation
- NetChoice, LLC v. Griffin, No. 5:25-CV-5140 (W.D. Ark. )
- Under challenge
- Yes
- Open questions
- Which practices 'evoke any addiction or compulsive behaviors' under Section 4-88-1402(d)(1), and whose 'contemporary understanding of addiction, compulsory behavior, and child cognitive development' sets the test?
- Does 'artificial sense of accomplishment' in Section 4-88-1402(d)(1) reach ordinary engagement features such as streaks, badges or like counts?
What it makes you log
Logging duty
Act 900 orders no log or record by name. It requires a social media platform to monitor for suspicious activity, including false or repeated credentials, to prevent circumvention of age verification, which cannot be done without keeping a record of the credentials used. The quarterly audit in Sec. 4-88-1402(d)(3) examines the platform's products for addictive behavior, not an age-check record. The Act sets no retention rule; any retention limit sits in the base Social Media Safety Act, which this row does not cite.
- Kind
- Implicit
- As of
- Provision
- Ark. Code Ann. Sec. 4-88-1405(a)(1), added by Act 900 Section 5
- Trigger
- age_assurance
What this law does
Amends the Social Media Safety Act to lower the covered minor age from 18 to 16, prohibit addictive design features, require default privacy settings, and disable non-essential notifications between 10 PM and 6 AM. Signed ; most provisions took effect , while the addictive design and notification duties in Section 2 carried a delayed effective date of , one year after enactment.
How courts have read itPremium data
Our analysis of this law draws on 1 court ruling.
What each ruling held, what it means for an app, and whether it still stands are premium data, in the Plus, Pro and Enterprise plans.
When LexLint raises it
When your app profile says your app operates a social platform.
Back to the example · Lint your app
Page updated .