Does the KIDS Act Actually Protect Your Kid?

Explore the KIDS Act's impact on online safety for minors. Learn how age verification, algorithm limitations, and safety measures address online risks today.

Published Wednesday, July 01, 2026

TL;DR

The House passed the KIDS Act this week. The vote was 267-117.

It is the most comprehensive children's online safety bill Congress has ever considered. It would turn off algorithmic feeds by default for minors. It would limit private messaging and disappearing messages for teens. It would also require age verification online for adult content sites.

But here's the catch: it is not law yet. The bill faces a tough fight in the Senate. And even if it passes, it repeats a mistake our co-founder warned about months ago. Age verification alone does not solve the problem. It is a gate, not a guard. Here is what's actually in the bill, what it gets right, what it still misses, and what you can do as a parent right now.

Haven't we had this debate before?

Yes. Just at a smaller scale.

In October 2025, Cyber Dive co-founder Derek Jackson wrote an op-ed about Arizona's new age verification law for adult websites. His point was simple. Age verification, treated as the whole solution, works the same way ID checks at a liquor store do. It blocks one doorway. Determined teenagers find a side entrance. They use a VPN. They find a site that doesn't comply at all.

That was about one state law covering one type of website. This week, the same debate got a lot bigger.

On June 29, 2026, the House passed the KIDS Act. The bill number is H.R. 7757. It is the first time the full House has passed a comprehensive children's safety package. The bill now heads to the Senate, where it faces long odds.

So is this good news? Partly. Is it the full answer? No.

What's actually in the KIDS Act?

a teen girl laying in bed with a light on her face

The KIDS Act would turn off algorithmic feeds by default for minors and restrict disappearing messages for teens, changes to how the platform behaves, not just who gets through the door.

The KIDS Act is not one bill. It's a package of more than a dozen bills. The House Energy and Commerce Committee built it around two pieces of legislation that have circulated through Congress for more than four years: the Kids Online Safety Act (KOSA) and an updated Children and Teens' Online Privacy Protection Act (COPPA 2.0). Together, this KIDS Act package aims to set baseline protections online.

Here's what it would actually do, in plain language.

It turns off algorithmic feeds by default for minors. This is the centerpiece of KOSA. Right now, platforms automatically push an endless stream of algorithm-picked content to young users. Under the new bill, that would be off by default. A parent or teen could turn it back on. The platform could no longer flip that switch silently.

It restricts private messaging and disappearing messages. Kids under 13 would lose access to private messaging. Teens under 17 would lose disappearing messages. This is a direct response to something we covered in our reporting on Snapchat. Snap's own internal emails showed that disappearing messages made it easier for predators to operate and harder for parents to find evidence after the fact.

It adds safeguards for AI chatbots and gaming platforms. Minors using AI chatbots and video game platforms would get new protections. The specifics are still being worked out.

It requires age verification online for adult content sites. This is the part closest to the Arizona law Derek wrote about. It carries the same underlying tension.

It raises the legal age and tightens the knowledge standard. COPPA 2.0 raises the legal age of a "child" from 13 to 14. It adds a teen category for ages 14 to 18. It also moves toward a "knows or should have known" standard. That means platforms can no longer claim ignorance about whether minors are using their service. Groups like ParentsSOS have praised this change.

It lets states keep their own stronger laws. This package sets a federal floor. States can still pass tougher rules. Arizona's law would not be wiped out.

Wait, is this even law yet?

No. And that's the part missing from most of the coverage this week.

The bill now goes to the Senate. The Senate passed its own version of KOSA back in 2024 by a vote of 91-3. But reconciling the House and Senate versions, especially the differences around the "duty of care" standard, is exactly the kind of fight that has stalled this legislation for years.

Senator Maria Cantwell, the ranking Democrat on the Senate Commerce Committee, has been blunt. "The bottom line is that this package has gutted many of the key provisions in the Senate bill necessary to protect kids and their families," she said. "We're not going to go with some weak standard. We are going to go with a law that can be enforced."

Senator Richard Blumenthal, co-sponsor of the Senate version, put it more pointedly. "No bait and switch, no KOSA 'lite,' no abandoning basic principles."

On the House side, Energy and Commerce Committee Chairman Brett Guthrie called the vote "an important milestone, not a finish line."

What does that mean for you? Nothing changes on your child's phone this week. Probably not this month either. The political fight that has blocked this bill for years hasn't ended. It just moved to a different room.

Does this fix the privacy problem Derek warned about?

Age verification online increasingly means proving who you are, not just how old you are. That data doesn't disappear once the gate is passed.

Not really. If anything, it makes the problem bigger.

Derek's argument about Arizona's law was about a trade-off that gets lost in the celebration. Proving you're old enough to access something online increasingly means proving who you are. That data doesn't disappear. It becomes part of a system that already profits from identity. A breach tying real names to browsing history "could haunt someone for life," as he put it.

The KIDS Act raises that same concern at a much bigger scale. The Electronic Frontier Foundation has flagged it directly: the "knows or should have known" standard creates a structural problem. Platforms can't reliably tell who's a minor without checking the age of every single user, not just the ones who might be kids. To avoid legal liability, services will likely move toward verifying everyone's identity, adults included.

Carding people at the door of one liquor store is a small, local thing. Carding everyone who wants to use the internet is something else entirely. And the data involved here moves through systems with far more reach than one state's adult website registry.

There's a second risk too.

Age verification mandates push people toward riskier corners of the internet.

Kicking minors off mainstream platforms doesn't make them log off. It pushes them toward smaller, less regulated sites with even less interest in protecting anyone. That's the same "side entrance" problem Derek described with Arizona's law, except the side entrances created by a federal mandate would be harder for parents to anticipate or even find.

Why platform self-regulation hasn't been enough

Part of the argument for the KIDS Act and similar device-level approaches comes down to a simple accountability gap. A 2026 audit found that companies invest heavily in publicizing child safety features: of 2,574 press releases collected from Instagram, Snapchat, TikTok, and YouTube's official newsrooms, roughly 1 in 8 described a child safety tool. But when researchers actually tested those advertised features, about 60% failed.

The report's authors argue that safety should be treated as a third pillar of company responsibility alongside security and privacy, both of which already face independent testing, regulatory scrutiny, and legal liability when they fail. No equivalent standard currently exists for child safety features.

As the researchers put it, "a broken child safety feature can exist alongside state-of-the-art recommendation algorithms," meaning companies clearly have the technical capability to build precise, reliable systems. They simply haven't been required to apply that capability to protecting kids.

This is the case for shifting some responsibility to the device level rather than relying solely on platform-side promises: age verification and content controls built into the hardware and OS don't depend on whether a given app's safety team implemented its blocklist correctly that quarter.

So does the bill get anything right?

Yes. Two parts of it are genuinely different from a simple age check.

Turning off algorithmic feeds by default isn't a gate. It changes how the platform behaves after a young user is already inside. That distinction matters. A gate asks "are you old enough to enter," then steps aside. Turning off the algorithm keeps shaping the experience after someone's already logged in. That's closer to the kind of ongoing protection Derek's piece called for.

The same goes for restricting disappearing messages. This provision doesn't ask anyone to prove their age. It removes a design feature that made it harder for parents and investigators to find evidence after the fact, the same feature Snapchat's own internal documents flagged as a problem years before anyone outside the company knew.

Both of these target how the product works, not just who's allowed through the front door. That's closer to what Derek's piece actually called for.

What can parents do right now?

a mother and her daughter sitting on a bed looking at a laptop

Laws can slow access. They can't replace the conversation that happens at home.

The KIDS Act could take years to become law, if it ever does. You don't have years. Here's what Derek's framework looks like in practice today.

Get device-level visibility. Look for tools that show what's actually happening on your child's device. Content viewed. Messages sent. Searches run. Even deleted activity. The right tools do this without asking your child to hand over ID to a stranger on the internet. This layer works no matter what Congress eventually passes.

Talk before the algorithm gets there first. Talk with your kid about what they're seeing online, why certain content is built to be addictive, and what healthy limits look like. Better to have that conversation before they go looking for answers somewhere with zero oversight.

Give access in stages, not all at once. A federal law will eventually draw a hard line at 13 or 14 or 17. Real parenting rarely works in hard lines. Think of digital freedom more like a learner's permit. Earned gradually, based on maturity, not a birthday.

Use privacy-preserving verification where you actually need it. When age checks are genuinely necessary, look for systems that confirm someone's "over 18" without handing over a full identity record. Some emerging tools, like the digital wallet pilots underway in the EU, point toward what that could look like done right.

The bottom line

Derek ended his piece on Arizona's law with a line that still holds: checking IDs online is the digital equivalent of carding someone at the door of a bar. That's not nothing. It can genuinely slow some kids down in some situations.

But it's not the same as knowing what's actually happening on your child's phone, in real time, no matter which app or platform or AI chatbot they're using on any given afternoon. The KIDS Act might become law eventually. Whether it does or doesn't, that distinction stays true.

Aqua One was built around exactly that distinction. It doesn't depend on a platform's age verification system working correctly. It doesn't ask your child to hand over ID to use it. It shows you what's happening on the device itself, in real time, through features like Instant Replay and Nudity Prevention. The same kind of visibility Derek described when a 14-year-old's contact on Roblox moved the conversation to video, and the device locked and alerted the parent before anything worse could happen.

That's not a replacement for the policy fight still playing out in the Senate. But it's not waiting around for it either.

Worried if an app is safe for your kid?

We break it down. No fluff. No sugarcoating. Just the truth.

📲 Deep dives on trending apps
⚠️ Real risks, no hype
🚨 Get alerts when new guides drop

Drop your email. Stay ahead. Protect your family.

Q&A

Question: Is the KIDS Act law yet, and what happens next?

Short answer: No. The House passed H.R. 7757 on June 29, 2026, by a 267–117 vote, marking the first time a comprehensive children’s online safety package cleared the full House. The bill now moves to the Senate, which hasn’t passed a comprehensive package this Congress.

Senators will have to reconcile differences, especially over the “knowledge standard," with the Senate’s earlier 2024 KOSA benchmark. Senator Maria Cantwell has already called the House standard “too weak” to stand up in court, and House Chairman Brett Guthrie characterized the vote as a milestone, not a finish line.

Bottom line: nothing changes on your child’s phone this week, and likely not this month.

Question: What would the KIDS Act actually change for kids and teens online?

Short answer: It sets baseline protections built from multiple bills, notably KOSA and COPPA 2.0:

Algorithmic feeds off by default for minors; a parent or teen could opt back in, but platforms can’t silently switch them on.

Messaging limits: under 13 lose private messaging; under 17 lose disappearing messages, addressing abuses highlighted in Snapchat’s own internal emails.

New safeguards for AI chatbots and gaming platforms (details still being finalized).

Mandatory age verification for adult content sites.

COPPA 2.0 updates: raises “child” from 13 to 14, creates a teen category (14–18), and moves toward a “knows or should have known” standard so platforms can’t plead ignorance about minors; groups like ParentsSOS support this shift.

Federal floor, not a ceiling: states can keep or pass stronger rules (e.g., Arizona’s law stands).

Question: Why does the article say age verification is a “gate, not a guard”?

Short answer: Age checks can block one doorway but don’t secure the environment kids actually use. Determined teens can use VPNs or noncompliant sites, the “side entrance” problem. Worse, proving age often means tying real identity to browsing, creating long-lived privacy risks if data is breached.

At scale, the “knows or should have known” standard may push services to verify every user’s age, adults included, to avoid liability, as the Electronic Frontier Foundation warns. That can drive minors off mainstream platforms toward smaller, less regulated corners of the internet, where risks are higher, and parental visibility is lower.

Question: Are there parts of the KIDS Act that could meaningfully improve safety?

Short answer: Yes, two design-focused changes stand out:

Default-off algorithmic feeds for minors reshape what kids see after they’re inside, rather than just checking their age at the door.

Removing disappearing messages for teens preserves evidence and hampers predators, aligning with concerns flagged in Snapchat’s internal documents. These provisions target how products behave, not simply who can enter, closer to the ongoing, in-product protections the article argues for.

Question: What can parents do right now while Congress debates?

Short answer:

Get device-level visibility: use tools that show content viewed, messages sent, searches, and even deleted activity, without requiring your child to hand over ID to third parties.

Talk early: discuss how algorithms steer content, why some content is addictive, and healthy limits, before platforms shape the narrative.

Grant access in stages: think “learner’s permit,” with privileges earned by maturity, not just birthdays.

Choose privacy-preserving checks where needed: prefer systems that confirm “over 18” without storing full identity.

Jordan Arnold

Kansas-born, digital native on a mission to help parents decode the online world their kids actually live in. When I’m not swimming laps or obsessing over the perfect Eastern European train route, I’m dodging judgmental stares from my bald, bossy cat, who’s absolutely convinced he should be in charge (and he might not be wrong).

Type 2 Helper / INTJ Architect

Back to Home