Apple's Declared Age Range API returns an age range, a declaration type and parental-control flags to an iPhone app, inside the app process. Apple keeps the birthday. Apple has applied it to new Texas accounts since June 4, 2026; California deems a developer to know the range from January 1, 2027.
Google Play's Age Signals API gives an Android app the user's age range and how it was established, never the birthdate. It returns signals in Brazil and Texas; Google announced a global expansion on July 29, 2026. The call, the four tiers, spoofing, SDK access, and what a scan and a capture show.
On September 24, 2026, Judge George H. Wu denied TikTok and ByteDance's motion to dismiss the under-13 privacy class action (MDL No. 3144) up to August 22, 2022. The pleadings do not show the plaintiffs were members of the 2019 T.K. or 2020 Privacy MDL settlement classes.
The $400 million TikTok COPPA settlement ties its last $100 million to vacating the 2019 Musical.ly consent order. On September 21, 2026, Judge George H. Wu denied the government's motion to vacate without prejudice, so the 2019 order and its records duties through 2029 remain in force.
On September 10, 2026, California enacted SB 1119 (Chapter 190). From July 1, 2027, a companion chatbot open to users under 18 must ship with parent-only default settings, may not show children cross-context behavioral ads or sell a child's chatbot data. Penalties reach $15,000 per affected child.
On September 10, 2026, California signed AB 1856, AB 1709 and AB 2246. From January 1, 2027, a developer that requests and receives the age bracket signal is deemed to know the user's age range. A state table, the Apple and Google APIs, and what a binary and a traffic capture can show.
On September 8, 2026, Connecticut Attorney General William Tong announced an investigation into MediaLab.AI Inc., owner of Kik, under the CTDPA and CUTPA. It follows a July 2025 notice of violation that, per the AG, cited sensitive data, including precise geolocation, processed without consent.
Brazil's data protection authority, the ANPD, fined ByteDance Brasil Tecnologia Ltda. BRL 153,769,671.33 for five conducts involving children's and teenagers' data in TikTok's logged-out and logged-in feeds, in Despacho Decisório nº 27/2026/CGS/SFI, signed August 24 and published August 25, 2026.
Governor Mikie Sherrill signed the New Jersey Kids Code Act (A4015/S3413) on August 11, 2026, as P.L.2026, c.73. It takes effect September 1, 2027. A covered child or minor, a parent or the Attorney General can sue, and a court may award $5,000 per violation or treble damages, whichever is greater.
On July 24, 2026, the Fifth Circuit (No. 24-50721) affirmed the injunction against the Texas SCOPE Act's monitoring and filtering duty on Section 230 grounds and vacated the injunction on the targeted ads, unlawful ads and age-verification duties for lack of standing or as foreclosed.
Italy's Garante fined Character Technologies, Inc. €158,000 in a decision of July 3, 2026, announced July 9. It found five GDPR infringements, including age verification failures from April 2024 to April 2025, and ordered fixes to the age gate, cooling-off period and minors' default profiles.
From April 22, 2026, operators must comply with the FTC's amended COPPA Rule (16 CFR Part 312). It adds separate parental consent for disclosures to third parties, biometric and government-issued identifiers, a mixed audience definition, and written security and retention programs.