United StatesH.R. 7757, Kids Internet and Digital Safety (KIDS) Act
Before the second chamber, dated , as of .
A social media and minors rule binding private bodies.
- Covered services
- Large social media and online platforms, and AI chatbot services.
- Verification methods
- Self declaration, Parental consent, Third party service
- Audit expectation
- periodic
- Who audits it
- Independent third party
- Where the report goes
- Filed with regulator, Published summary
Where it has got to
The text described here is H.R. 7757 as referred in the Senate, the text the House passed on . That print is H.R.7757 RFS, published .
Locally, this stage is referred to the Senate Committee on Commerce, Science, and Transportation.
The stage above is recorded at www.congress.gov.
Passed the House under suspension of the rules on , then received in the Senate and referred to the Committee on Commerce, Science, and Transportation on .
What it requires
- Applies to large social media and online platforms, and to AI chatbot services.
- Set default privacy and safety settings for minors.NIST Privacy FrameworkGV.PO-P2
- Verify age before giving access to mature content.no control in the NIST Privacy Framework
- Provide the AI chatbot disclosure the bill requires.no control in the NIST Privacy Framework
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST Privacy Framework
- GV.PO-P2Processes to instill organizational privacy values within system/product/service development and operations are established and in place.
Our reading of where this law's duties sit in each framework, and in the NIST Privacy Framework, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law
Who enforces it
Enforcement body
Federal Trade Commission (proposed)
Settledness
- As of
- Open questions
- Is the 'more than one-third' share of 'the material made available' on a covered platform under section 102(1)(B) of Title I measured by number of items, running time or views, and across the whole platform or each section of it?
- When does the provider of a platform that hosts user-uploaded content 'knowingly' make available sexual material harmful to minors under section 102(1)(C) of Title I?
What it makes you log
Who may demand the log
Regulator, Auditor or notified body, Public
Log retention
Section 103(b)(5) sets no retention period and also bars transferring or disclosing the data beyond that.
- As of
- Basis
- Purpose bound
- Prohibits retaining
- Technology verification measure data, meaning data collected or processed to determine whether a user is a minor, beyond what is strictly necessary to use a technology verification measure
Logging duty
The bill orders no log by name. Section 219 makes a provider of a covered platform arrange an annual independent third-party audit that must account for counts such as the safeguards and parental tools exercised and the reports received, and requires the provider to give the auditor any relevant information, which cannot be done without keeping records. Section 103(b)(5) separately limits what a provider may keep of the data used to verify age. Section 220 says the subtitle does not require age verification. As introduced.
- Kind
- Implicit
- As of
- Provision
- H.R. 7757 Section 219(a), (b)(2) and (b)(3)
- Trigger
- age_assurance
What this law does
Consolidates the Kids Online Safety Act, the Children and Teens' Online Privacy Protection Act (COPPA 2.0), a data broker registry, and other child safety bills. Would require default privacy and safety settings for minors, age verification for access to mature content, and AI chatbot disclosure. Passed the House 267-117 on , without KOSA's original duty of care provision; pending in the Senate.
When LexLint raises it
When your app profile says your app operates a social platform.
Back to the example · Lint your app
Page updated .