Skip to content

California Digital Age Assurance Act

Enacted California · In force Jan 1, 2027 · next deadline Jan 1, 2027 (in 3 months)

Deadlines

DateWhat happens
Coming up
Jan 1, 2027in 3 monthsAge signal duties begin
Jul 1, 2027in 9 monthsDeadline for existing devices and apps
Earlier
Oct 13, 202511 months agoSigned by Governor

Summaries for reference, not legal advice. Check the official text.

What it does

Operating system providers must ask for a user's birth date or age at device account setup and send an age-bracket signal to apps through an API. App developers must request that signal when an app is downloaded and launched. The signal may only be used for age compliance and not shared for other purposes.

Who it applies to
Operating system providers, covered application stores and app developers serving users in California.
Penalties
Injunction and civil penalty up to $2,500 per affected child per negligent violation and up to $7,500 per affected child per intentional violation.
Enforced by
California Attorney General
Official name
Digital Age Assurance Act (AB 1043)
Citation
Stats. 2025, ch. 675; Cal. Civ. Code section 1798.500 et seq.
Topics
children, privacy, online-safety
Verified 2026-09-25

Related

Questions about California Digital Age Assurance Act
What are the California Digital Age Assurance Act compliance deadlines?
Oct 13, 2025: Signed by Governor. Jan 1, 2027: Age signal duties begin. Jul 1, 2027: Deadline for existing devices and apps.
When does California Digital Age Assurance Act take effect?
California Digital Age Assurance Act takes effect on Jan 1, 2027. The next milestone is Jan 1, 2027: Age signal duties begin.
Who does California Digital Age Assurance Act apply to?
Operating system providers, covered application stores and app developers serving users in California.
What are the penalties under California Digital Age Assurance Act?
Injunction and civil penalty up to $2,500 per affected child per negligent violation and up to $7,500 per affected child per intentional violation.

Rule changes by email

The morning after a new data, privacy or AI law, or a deadline change; nothing in quiet weeks.

Double opt-in. Unsubscribe any time.