< Back to Current Version

Kids Online Safety Act

Changes from September 27, 2024 to July 14, 2026

This page shows textual changes in the document between the two versions indicated in the dates above. Textual matter removed in the later version is indicated with red strikethrough and textual matter added in the later version is indicated with blue.


https://crsreports.congress.gov

Updated September 27, 2024

Kids Online Safety Act

On July 30, 2024, the Senate passed an amended version of S. 2073, titled the Kids Online Safety and Privacy Act. Title I of the act includes provisions similar to those in the Kids Online Safety Act (KOSA; S. 1409). On September 18, 2024, the House Committee on Energy and Commerce ordered an amended House version of KOSA to be reported (H.R. 7891). This In Focus summarizes Title I of S. 2073, compares it with the amended version of H.R. 7891, and provides considerations for Congress.

Summary of S. 2073 Title I

Title I of S. 2073 would create requirements for covered platforms that are used by, or reasonably likely to be used by, minors. It defines covered platforms as online platforms, online video games, messaging applications (apps), and video streaming services that connect to the internet, with some exceptions (e.g., email providers and certain news and sports websites and apps). An online platform is defined as “any public-facing website, online service, online [app], or mobile [app] that predominantly provides a community forum for user-generated content.” The bill defines minor as an individual under the age of 17 and child as an individual under the age of 13.

The requirements for covered platforms would include the following:

Duty of Care. Covered platforms would be required to

“exercise reasonable care in the creation and implementation of any design feature to prevent and mitigate” harms to minors, including (1) certain mental health disorders (anxiety, depression, eating disorders, substance use disorders, and suicidal behavior); (2) patterns of use that indicate or encourage addiction-like behaviors by minors; (3) physical violence, online bullying, and harassment of the minor; (4) sexual exploitation and abuse of minors; (5) promotion and marketing of narcotic drugs, tobacco products, gambling, or alcohol; and (6) predatory, unfair, or deceptive marketing practices or other financial harms. The platforms would not be required to prevent a minor from “deliberately and independently searching for, or specifically requesting, content.”

Safeguards for MinorsKids Online Safety Act

Updated July 14, 2026 (IF12730)

Beginning in the 117th Congress, some Members of Congress introduced different versions of a Kids Online Safety Act (KOSA)—a bill seeking to address harms to minors online by creating requirements for certain online platforms, among other provisions. In the 119th Congress, different versions of KOSA have been introduced as stand-alone bills (H.R. 6484, S. 1748). Some provisions have been included in other bills, including H.R. 7757, under a section titled "Kids Online Safety." The House versions of KOSA to date have not included a "duty of care" section, discussed below. S. 1748 and other versions of KOSA in both chambers in previous Congresses include such section.

On June 29, 2026, the House passed an amended version of the KIDS Act (H.R. 7757), which includes portions of different bills, including from H.R. 6484. The provisions in S. 1748 were included in a discussion draft of Senator Blackburn's TRUMP AI Act, released in March 2026, and portions of either the House or Senate version of KOSA are reportedly expected to be included in a package of kids' online safety bills introduced by Senator Cruz. This In Focus summarizes the "Kids Online Safety" section in H.R. 7757 passed by the House, compares it with S. 1748, and provides some considerations for Congress.

Summary of "Kids Online Safety" in H.R. 7757

The "Kids Online Safety" section in H.R. 7757 would create requirements related to minors for covered platforms. It defines covered platform as a website, software, application, or electronic service connected to the internet that (1) is publicly available; (2) enables the creation of a user identifier that is searchable by other users and can be followed by other users; (3) as its primary purpose, facilitates the sharing and access to user-generated content through text, images, video, or any other interactive medium; (4) promotes user engagement on the platform; and (5) uses personal information to advertise, market, or make content recommendations. The bill defines teen as an individual who has attained the age of 13 and is under the age of 17, child as an individual under the age of 13, and know or knows as "know or should have known."

The requirements for covered platforms would include

  • Addressing harms to minors. Covered platforms would be required to "establish, implement, maintain, and enforce reasonable policies, practices, and procedures" appropriate to the size and complexity of the platform to address the following harms to minors: (1) threats of physical violence so severe, pervasive, or objectively offensive that they impact a major life activity; (2) sexual exploitation and abuse; (3) distribution, sale, or use of narcotic drugs, tobacco products, cannabis products, gambling, or alcohol; and (4) any financial harm caused by deceptive practices.
  • Safeguards for minors. Covered platforms would be .
    Covered platforms would be

    required to provide safeguards for a user whom they know is a minor that (1) limit the ability for others to communicate with the minor; (2) prevent others from viewing a minor’s personal data that are collected or shared by the platform; (3) limit design features that encourage or increase the frequency, time spent, or activity of minors; (4) control personalized recommendation systems, including the ability to display content in chronological order and limit certain

    types of recommendations; and (5) restrict the sharing of a minor’s geolocation and provide notice when the minor’s geolocation is tracked. The platforms would be required to set the default for these safeguards at the most protective level and provide minors the option to limit the amount of time spent on the platform. The platforms would be prohibited from facilitating advertisements of narcotic drugs, tobacco products, gambling, or alcohol to a minor.

    Parental Toolsthe profile or personal information of the minor from being recommended or suggested to a user or visitor whom the platform knows is not a minor; (3) prevent other users or visitors from seeing the current online or offline status of the minor; (4) limit design features that encourage compulsive usage of the covered platform by the minor, (5) restrict the sharing of geolocation information of the minor to a third party that is not the processor and provide notice to the parent that geolocation information is collected; and (6) control any personalized recommendation system, including the ability to opt out of a personalized recommendation system and limit types or categories of recommendations. Parental tools. Covered platforms would be required . Covered platforms would be required

    to provide tools for parents of a user whomknown by the platform knows isto be a minor that allow the parent to (1) view athe minor's privacy and account settings, including the safeguards mentioned above; (2) change; (2) manage, change, and control athe child's privacy and account settings; (3) restrict athe minor's purchases and financial transactions; and (4) view metrics and restrictof total time spent on the platform and restrict time spent on the platform by the minor; (5) receive a notification when the minor receives a request from another user seeking to initiate direct or ephemeral messaging for the first time; and (6) disable direct or ephemeral messaging for the child. The platforms would be required to (1) provide parents notice about the availability of these parental tools; (2) provide minors with notice of which parental tools have been applied; and (3) ensure that the default setting of any parental tool is the most protective for a child.

  • Messaging controls. Covered platforms that allow direct or ephemeral messaging would be required to provide teens with controls to (1) receive a notification that alerts the user about a request from an unapproved contact, allowing the user to approve or deny the request; (2) view and manage a list of contacts approved for direct or ephemeral messaging; (3) disable any direct or ephemeral messaging feature; (4) prevent any specific user or group of users from initiating or continuing to engage in direct or ephemeral messaging; and (5) enable the user to set a profile as hidden.
  • Reporting mechanism. Covered platforms would be required to provide (1) a means for users and visitors to submit reports about harms to minors; (2) an electronic point of contact specific to matters involving harms to minors; and (3) a response within 10 days or as promptly as needed if the report involves an imminent safety threat.
  • Disclosure. Prior to registration or purchase, covered platforms would be required to provide notice for a user known by the platform to be a minor about the policies and practices regarding safeguards and how to access any safeguards, parental tools, and messaging controls.
  • Audit. No later than 18 months after the enactment of this section, and annually thereafter, a covered platform would be required to undergo an independent, third-party audit. The audit would be required to include an assessment of the extent to which the platform is likely to be accessed by minors, a description of the safeguards and parental tools available to minors and their parents, and a description of how the platform handles reports received through the reporting mechanism, in addition to other information. The provider of a covered platform would be required to submit the results to the Federal Trade Commission (FTC) no later than 30 days after the audit is completed and provide some of the information in a public report no later than 45 days after the audit.
  • For users that the provider of a covered platform knows are minors, the section would also require the platform to provide labels and information on advertisements (ads) and prohibit the platform from facilitating ads of narcotic drugs, cannabis products, tobacco products, gambling, or alcohol.

    The FTC and state time spent on the platform by the minor. The platforms would be required to provide users with notice of which tools have been enabled.

    Reporting Mechanism. Covered platforms would be

    required to provide a means for parents, minors, and schools to submit reports about harms to minors. The platforms would need to substantively respond within 10 days if they average more than 10 million U.S. monthly active users, 21 days if they average less than 10 million U.S. monthly active users, and as promptly as needed if the report involves an imminent safety threat.

    Disclosure. Covered platforms would be required to

    provide notice about safeguards and parental tools prior to registration or purchase if the platform knows that a user is a minor and obtain verifiable parental consent if the platform knows the user is a child.

    Transparency. A covered platform with more than 10

    million U.S. monthly active users that “predominantly provides a community forum for user-generated content and discussion” would be required to issue a public report at least once a year describing, among other things, “reasonably foreseeable risks of harms to minors and assessing the prevention and mitigation measures taken” based on an independent, third-party audit.

    Title I would direct the Federal Trade Commission (FTC) to enter into a contract with the National Academy of Sciences to conduct comprehensive studies on “the risk of harms to minors by use of social media and other online platforms.” It would direct the Secretary of Commerce, in coordination with the FTC and Federal Communications Commission, to conduct a study on potential options to verify a user’s age at the device or operating system level. It would also direct the FTC, in consultation with the

    Kids Online Safety Act

    https://crsreports.congress.gov

    Secretary of Commerce, to issue guidance for covered platforms seeking to conduct market- and product-focused research on minors and guidance related to several provisions in the bill, such as design features that encourage or increase time spent on covered platforms. Additionally, it would direct the Secretary of Commerce to establish and convene the Kids Online Safety Council—consisting of representatives from certain federal agencies, academic experts, and other stakeholders—that would provide advice related to some of the provisions.

    Title I also includes a Filter Bubble Transparency subtitle that would create additional requirements for online platforms that use an opaque algorithm, defined as “an algorithmic ranking system that determines the selection, order, relative prioritization, or relative prominence of information,” except when used to provide age-appropriate content. These platforms would be required to notify users that an opaque algorithm is used and when changes are made. Platforms would also be required to enable users to switch between the opaque algorithm and an input- transparent algorithm, defined as an algorithmic ranking system that does not use user-specific data, unless expressly provided, such as search terms or saved preferences.

    The FTC would enforce Title I. State attorneys general would be able to enforce H.R. 7757, including the "Kids Online Safety" section. The provisions in H.R. 7757 would preempt state laws and regulations to the extent that they conflict with the provisions; H.R. 7757 would not preempt any state law or regulation with respect to contract, tort, or product liability or prohibit a state from enacting or enforcing any law or regulation that provides greater protections to minors.

    H.R. 7757 Versus S. 1748

    Some differences between S. 1748 and the "Kids Online Safety" section of H.R. 7757 include the following:

  • S. 1748 includes a "duty of care" section rather than an "addressing harms to minors" section. The "duty of care" section would require covered platforms to "exercise reasonable care in the creation and implementation of any design feature to prevent and mitigate" certain harms to minors. The harms to minors include those listed under "addressing harms to minors" in H.R. 7757, as well as include (1) eating disorders, substance use disorders, and suicidal behaviors; (2) depressive and anxiety disorders that have objectively verifiable and clinically diagnosable symptoms and are related to compulsive usage; and (3) patterns of use that indicate compulsive usage.
  • S. 1748 defines the term know or knows as "actual knowledge or knowledge fairly implied on the basis of objective circumstances." The "Kids Online Safety" section in H.R. 7757 defines the term as "know or should have known." S. 1748 would would also enforce the requirements for covered platforms listed above, except for the duty of care provision.

    S. 2073 Versus H.R. 7891

    Some differences between S. 2073 and H.R. 7891 include the following:

    • The duty of care requirement in S. 2073 would apply to

    covered platforms. In H.R. 7891, the requirement would apply only to high impact online companies, which are defined as online platforms or online video game companies that generate $1 billion in annual revenue or have 100 million global monthly active users and are primarily used to access or share user-generated content. Some of the harms listed under the duty of care requirement also differ. For example, H.R. 7891 does not mention “certain mental health disorders” or online bullying, and S. 2073 does not include “promotion of inherently dangerous acts that are likely to cause serious bodily harm, serious emotional disturbance, or death.”

    • S. 2073 would define know or knows as “actual

    knowledge or knowledge fairly implied on the basis of objective circumstances.” H.R. 7891 would create different knowledge standards based on the size of the platform: “knew or should have known” for a high impact online company; “knew or acted in willful disregard” for a covered platform that does not meet the definition of a high impact online company, has an annual gross revenue of at least $200 million, and collects personal information from at least 200,000 individuals; and “actual knowledge” for other covered platforms. S. 2073 would also direct the FTC to issue guidance on the knowledge standard, including best practices and examples; H.R. 78917757 would not.

    • S. 2073 would require “an assessment of the reasonably

    foreseeable risk of harms to minors posed by the covered platform” in the public reports required from covered platforms, whereas H.R. 7891 would require “an assessment of harms to minor based on aggregate data on the exercise of safeguards and parental tools.”

    • H.R. 7891 would prohibit an online platform from

    conducting market and product-focused research without obtaining parental consent if the user is a minor. S. 2073 would direct the FTC to issue guidance.

    • S. 2073 would require covered platforms to provide

    labels and information about advertisements to minors and indicate when content is an advertisement or marketing material, including disclosures of endorsements made by other users of the platform. H.R. 7891 does not include a similar provision.

    There are some differences within certain definitions and provisions as well. For example, the definition of personalized recommendation system in S. 2073 lists fewer exceptions than in H.R. 7891.

    Considerations for Congress

    Some platforms have implemented safeguards for minors that might meet some of the requirements in Title I of S. 2073, potentially in response to congressional concerns. For example, Instagram plans to implement protections, such as making the account private by default, for users under the age of 16; parents would need to provide consent to change these protections. TikTok offers safeguards for minors, including setting accounts to private by default. Snapchat’s Family Center offers parental controls, such as allowing them to view their teen’s privacy and safety settings. No federal law requires these safeguards; some platforms might stop offering or never offer safeguards.

    If S. 2073 were enacted, some of the requirements might be subject to legal challenges. Some groups have argued that certain provisions might violate rights protected by the Free Speech Clause of the First Amendment. Recent state laws enacted to protect children online have been similarly subject to First Amendment challenges.

    Some operators might use different age verification methods to identify minors on their platforms, while others might implement changes for all users. For example, a platform might provide notice about its safeguards and parental tools to all users, particularly if it cannot determine if an individual is a minor before the individual registers.

    Some of the requirements might make it more costly to operate platforms. For example, implementing a reporting mechanism and hiring a third-party auditor to evaluate the platform’s risk prevention and mitigation efforts might be costly, particularly for those with limited resources. The requirements might also encourage companies to create platforms that include or exclude certain features. For example, a platform might limit a user’s ability to communicate with others if it does not want to implement safeguards. If the requirements reduce harms to minors, that benefit might outweigh the potential associated costs.

    Kids Online Safety Act

    https://crsreports.congress.gov | IF12730 · VERSION 2 · UPDATED

    Clare Y. Cho, Specialist in Industrial Organization and Business Policy

    IF12730

    Disclaimer

    This document was prepared by the Congressional Research Service (CRS). CRS serves as nonpartisan shared staff to congressional committees and Members of Congress. It operates solely at the behest of and under the direction of Congress. Information in a CRS Report should not be relied upon for purposes other than public understanding of information that has been provided by CRS to Members of Congress in connection with CRS’s institutional role. CRS Reports, as a work of the United States Government, are not subject to copyright protection in the United States. Any CRS Report may be reproduced and distributed in its entirety without permission from CRS. However, as a CRS Report may include copyrighted images or material from a third party, you may need to obtain the permission of the copyright holder if you wish to copy or otherwise use copyrighted material.

  • The "Kids Online Safety" section in H.R. 7757 would require covered platforms to provide parental tools related to direct and ephemeral messaging and messaging controls. S. 1748 does not explicitly mention requirements for direct and ephemeral messaging.
  • S. 1748 would require a covered platform to respond to a report about harms to a minor within 21 days if the platform averaged fewer than 10 million monthly active users during the most recent calendar year. Covered platforms that averaged more active users would be required to respond within 10 days. All covered platforms in the "Kids Online Safety" section of H.R. 7757 would be required to respond within 10 days.
  • The audit requirement in S. 1748 would apply to covered platforms that averaged more than 10 million monthly active users during the last calendar year. The audit requirement in the "Kids Online Safety" section of H.R. 7757 would apply to all covered platforms.
  • Considerations for Congress

    Some platforms independently provide safeguards for minors similar to the requirements in S. 1748 and the "Kids Online Safety" section of H.R. 7757. For example, Instagram has implemented protections for teens under the age of 18, such as making the account private by default when signing up for the app and allowing parents to set daily limits on the amount of time a teen can spend on the app. TikTok and Snapchat offer safeguards for teens under the age of 18. No federal law requires these safeguards; some platforms might stop offering or never offer safeguards. A study found that some child safety features offered by some platforms do not function as described.

    Senators Blackburn and Blumenthal criticized the removal of the duty of care provision in the "Kids Online Safety" section of H.R. 7757 passed by the House. Some civil liberties groups have argued that the duty of care provision might violate rights protected by the Free Speech Clause of the First Amendment; some commentators have stated that the KIDS Act might raise First Amendment concerns.

    S. 1748 and the "Kids Online Safety" section of H.R. 7757 both include a provision stating that the respective bills should not be construed to require covered platforms to implement an age gating or age verification functionality. Nevertheless, if either bill is enacted, some operators might use different age verification methods to identify minors on their platforms to ensure that they are complying with the law. Others might implement changes for all users. Some of the requirements, such as implementing a reporting mechanism and hiring a third-party auditor, might make it more costly to operate platforms. The requirements might also encourage platforms to include or exclude certain features. If the requirements reduce harms to minors, that benefit might outweigh the potential associated costs.