Law / United States / 
Missouri
HB 1839 (HCS HBs 1839, 2921 and 3015), Age Verification on Adult Websites
Section 407.3405, RSMo, as created by 2026 Mo. Laws, HCS HBs 1839, 2921 & 3015
In force since .
An adult content age verification (AV) rule binding private bodies.
- Audit expectation
- none
What it requires
- Signed on and in force since .
- Applies to a commercial entity that knowingly and intentionally publishes or distributes material on an internet website, including a social media platform, more than one-third of which is sexual material harmful to minors.
- Use a third party to perform reasonable age verification, confirming that an individual attempting to access the material is eighteen years of age or older.no control in the NIST Privacy Framework
- The third party that performs the age verification must not retain any identifying information of the individual.NIST Privacy FrameworkCT.DM-P5
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST Privacy Framework
- CT.DM-P5Data are destroyed according to policy.
Our reading of where this law's duties sit in each framework, and in the NIST Privacy Framework, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law
If you get it wrong
Private right of actionNo
Penalties
In an action brought by the Attorney General, civil penalties of 10,000 dollars per day that a commercial entity operates a website in violation of the age-verification requirements, 10,000 dollars per instance when a commercial entity retains identifying information in violation of the section, and an additional amount of not more than 250,000 dollars if one or more minors accessed sexual material harmful to minors in violation of the age-verification requirements
Who enforces it
Enforcement body
Missouri Attorney General
Settledness
- As of
- Open questions
- Does "knowingly and intentionally" in section 407.3405.2, RSMo, require that a commercial entity know the share of its website that is "sexual material harmful to minors", or only that it knowingly publishes or distributes the material?
- Does the requirement in section 407.3405.2, RSMo, that a commercial entity "shall use a third party to perform reasonable age-verification methods" displace the allowance in 15 CSR 60-18.020(2) for a commercial entity to perform the age verification itself?
What it reaches
Age threshold
18
Covered services
Commercial entities that knowingly and intentionally publish or distribute material on an internet website, including a social media platform, more than one-third of which is sexual material harmful to minors
Verification methods
Digital ID, Gov ID, Transactional data, Third party service
What it makes you log
Log retention
Section 407.3405.3 binds the third party that performs the verification; subsection 6(2) prices each instance of retention at $10,000.
- As of
- Basis
- Purpose bound
- Prohibits retaining
- Any identifying information of the individual whose age is verified
Logging duty
Section 407.3405.3 forbids the third party that performs the age verification to retain any identifying information of the individual, and subsection 6(2) sets a civil penalty of $10,000 per instance of retention in violation. The section names no record of the check.
- Kind
- None
- As of
What this law does
Requires a commercial entity that knowingly and intentionally publishes or distributes material on an internet website, including a social media platform, more than one-third of which is sexual material harmful to minors, to use a third party to perform reasonable age verification that an individual attempting to access the material is eighteen years of age or older, and bars that third party from retaining any identifying information of the individual. The Attorney General enforces the section. Signed by the governor on ; effective .
When LexLint raises it
When your app profile says your app publishes adult content.
Back to the example · Lint your app
Page updated .