California Steps Back From Dangerous Expansion of its Age-Gating Law
Original reporting by Electronic Frontier Foundation
California Assembly Bill 1856 (A.B. 1856) refers to proposed legislation that initially threatened to significantly expand the state's contentious age-gating framework across the internet. Authored by Assemblymember Buffy Wicks, the bill initially contained language that would have compounded serious threats to users’ speech, privacy, and security by extending mandatory age-gating requirements—already slated for operating systems and app stores under A.B. 1043—to web browsers and websites. This expansion risked pushing more services towards invasive age verification methods like ID checks and biometric scanning, creating a gateway for increased data collection and potential breaches, and further limiting access to lawful online content for both young people and adults.
A legislative shift
However, the California legislature has now stepped back from these most problematic provisions. Lawmakers removed the language that would have expanded A.B. 1043’s framework to browsers and websites, a move welcomed by digital rights advocates. Additionally, an earlier amendment to A.B. 1856 exempted open-source operating systems, mitigating threats to the open-source community. These significant changes have led the Electronic Frontier Foundation (EFF) to remove its opposition to A.B. 1856. While EFF still considers the underlying A.B. 1043 unconstitutional and fundamentally opposed to the principle of not requiring age verification to access the internet, this legislative rollback represents a crucial victory against the widespread imposition of intrusive age-gating mandates. The broader fight for online anonymity, privacy, and security against such regulations continues.
The California Legislature's decision to remove problematic expansion language from A.B. 1856 is a significant, albeit narrow, victory for digital rights advocates. While the immediate threat of extending an invasive age-gating framework to browsers and websites has been averted, and open-source operating systems granted an exemption, the fundamental challenge remains. A.B. 1043, set to take effect in 2027, continues to pose a serious risk to user privacy, security, and free expression by effectively mandating age verification across app stores and operating systems.
Shaping the Digital Future
This legislative maneuver in California underscores a growing global trend: the push for age verification as a regulatory tool. While ostensibly aimed at protecting minors, such mandates fundamentally reshape the internet, moving it away from an open, anonymous, and permissionless space towards a system requiring identity verification for basic access. The precedent set by A.B. 1043, even in its current form, is troubling. It risks normalizing the collection of sensitive personal data, increasing vulnerabilities to breaches, and erecting barriers to online participation for all users, regardless of age. This struggle is not merely about a single bill; it represents a critical juncture in determining the very architecture of our digital lives, with implications for how privacy, freedom, and accessibility will be defined in the coming decades. The ongoing vigilance of users, developers, and advocates will be paramount in challenging these pervasive frameworks and preserving an open internet for everyone.
Frequently asked questions
- What is California's AB 1043 law, and how does it regulate online access for young people?
- California's A.B. 1043, effective January 2027, mandates operating systems and app stores to collect users' ages, categorize them into age brackets, and restrict minors from specific online content or services. Although it doesn't explicitly require age verification, the significant financial penalties for non-compliance are expected to push services toward implementing invasive age verification methods, raising concerns about privacy and free speech for all users.
- How did the recent legislative changes to California's A.B. 1856 impact age-gating proposals?
- Recent amendments to California's A.B. 1856 removed language that would have expanded the state's age-gating framework to include web browsers and websites. This legislative step-back prevents a significant expansion of a controversial law, which was initially feared to worsen threats to online speech, privacy, and security. Additionally, the revised bill now includes an exemption for open-source operating systems, addressing concerns from the open-source community.
- Why are experts concerned about mandatory age verification systems for accessing the internet?
- Experts are concerned that mandatory age verification systems necessitate users providing sensitive, immutable personal information, linking their offline identity to online activity. This practice threatens online anonymity, privacy, and security, as collected data is vulnerable to leaks, hacks, or misuse. Such systems can also create barriers to lawful speech for both adults and young people, fundamentally reshaping internet access in invasive ways.