New law requires Apple and Google to verify user ages and obtain parental consent for minors, effective January 2026
Texas Governor Greg Abbott has signed into law Senate Bill 2420, known as the App Store Accountability Act, which mandates that app store operators such as Apple and Google implement age verification systems and obtain parental consent for users under 18.
The legislation is set to take effect on January 1, 2026.
Under the new law, app store providers are required to verify the age of all users using commercially reasonable methods.
For users identified as minors, the app store must link their accounts to a parent or guardian’s account and obtain explicit consent before allowing app downloads or in-app purchases.
The bill passed both chambers of the Texas Legislature with veto-proof majorities.
It mirrors legislation already enacted in Utah and signals a growing movement among U.S. states to regulate children’s access to online platforms through app storefront accountability.
Apple opposed the legislation, arguing that while it supports child safety, the law compels all users—not just minors—to submit sensitive personal data for verification, raising privacy concerns.
Apple CEO Tim Cook reportedly contacted Governor Abbott directly in an attempt to have the bill vetoed.
Meta, the parent company of
Facebook and Instagram, has supported the legislation.
The company has backed initiatives that shift compliance burdens to app stores rather than individual platforms, aligning with its broader legal strategy in addressing regulatory proposals across multiple states.
Unless legally challenged and blocked in court, the law will become enforceable at the beginning of 2026.
Companies have until then to implement the necessary systems to comply with the provisions of SB 2420.
At least nine other states are considering similar legislation, and a comparable federal bill has been introduced, reflecting increased national focus on child safety and digital platform regulation.
The law also requires that app stores categorize users by age group and protect any personal information collected for verification using industry-standard encryption and data security measures.