S 5090: Digital Age Assurance Act of 2026
S 5090 in plain English: This bill would require age verification measures to protect minors in digital environments. It establishes civil penalties for violations, with fines up to $2,500 for negligent violations and up to $7,500 for knowing or intentional violations.
Stated purpose
The bill aims to create a system where operating system providers collect users' age information and share an age-range signal with app developers, websites, and browsers, so that platforms required by law to verify user age can do so without collecting sensitive personal data directly.
Key points
- Requires age assurance measures on digital platforms to protect minors
- Negligent violations carry a civil penalty up to $2,500
- Knowing or intentional violations carry a civil penalty up to $7,500
- Referred to the Senate Committee on Commerce, Science, and Transportation
Arguments supporters make
- A centralized age signal means users share their birthdate once with their device's operating system instead of repeatedly handing personal information to dozens of apps and websites, reducing privacy exposure.
- Using age brackets, verifiable credentials, and zero-knowledge proofs keeps the system privacy-protective — sites and apps learn only whether a user is above or below a certain age, not their exact birthdate or identity.
- Children gain a consistent layer of protection across apps and websites, making it harder for platforms to accidentally or intentionally grant minors access to age-restricted content.
Arguments opponents make
- Requiring every device user to submit a birthdate to an operating system provider creates a central database of sensitive information that could be breached, misused, or accessed by governments, raising serious privacy risks.
- The bill places a heavy technical and compliance burden on operating system providers, developers, and website operators, which could disadvantage smaller companies and entrench large tech firms that can more easily absorb those costs.
- Age-bracket signals tied to device accounts may not reliably stop determined minors from accessing restricted content — for example, by using a parent's device or account — while burdening every adult user with mandatory age disclosure.
Tradeoffs
Routing age verification through operating systems may improve child safety and reduce repeated data collection by individual apps, but it also concentrates sensitive personal information with a small number of powerful tech companies and requires all users, not just those seeking age-restricted content, to register their age as a condition of using their device.
Current status in Congress: In committee.
NewsClear — neutral news & congressional tracking · Bill of the Week