1. (1) Beginning May 6, 2027, a developer shall:

   1. (a) verify through the app store's data sharing methods:

      1. (i) the age category data of account holders located in the state; and
      2. (ii) for a minor account, whether verifiable parental consent has been obtained;
   2. (b) notify app store providers of a significant change to the app; and

   3. (c) request age category data or parental consent:

      1. (i) at the time an account holder:

         1. (A) downloads an app;
         2. (B) purchases an app; or
         3. (C) launches a pre-installed application for the first time;
      2. (ii) when implementing a significant change to the app; or
      3. (iii) to comply with applicable laws or regulations.

2. (2) Beginning May 6, 2027, a developer may request age category data:

   1. (a) no more than once during each 12-month period to verify:

      1. (i) accuracy of age category data associated with an account holder; or
      2. (ii) continued account use within the verified age category;

   2. (b) when there is reasonable suspicion of:

      1. (i) account transfer; or
      2. (ii) misuse outside the verified age category; or
   3. (c) at the time an account holder creates a new account with the developer.

3. (3)

   1. (a) Beginning May 6, 2027, when initially implementing any developer-created safety-related features or defaults, a developer shall use the lowest age category indicated by:

      1. (i) age verification data provided by an app store provider; or
      2. (ii) age data independently collected by the developer.
   2. (b) Subsection (3)(a) does not prohibit a developer from allowing a parent to customize age-related restrictions, safety-related features, or content settings for individual users within a minor account after the initial defaults described in Subsection (3)(a) are set.

4. (4) Beginning May 6, 2027, a developer may not:

   1. (a) enforce a contract or terms of service against a minor unless the developer has verified through the app store's data sharing methods that verifiable parental consent has been obtained;
   2. (b) knowingly misrepresent any information in the parental consent disclosure; or
   3. (c) share age category data with any person.

5. (5) Beginning May 6, 2027, a developer may only use age category data received through the app store's data sharing methods to:

   1. (a) enforce any developer-created age-related restrictions;
   2. (b) ensure compliance with applicable laws and regulations; or
   3. (c) implement any developer-created safety-related features or defaults.
6. (6) Beginning May 6, 2027, a developer may request that an app store provider prevent minor accounts from downloading or purchasing the developer's app.

Amended by Chapter 157, 2026 General Session