LOS ANGELES — California Gov. Gavin Newsom, a Democrat, signed into law Assembly Bill (AB) 1043 on Monday, implementing an age verification regime that requires users’ ages to be verified at the device operating system and/or app store level when setting up a new phone, tablet, or computer.
The bill, known as the Digital Age Assurance Act, covers all major operating systems, including Google’s Android and Apple’s iOS. Set to take effect on Jan. 1, 2027, it requires the companies that own and operate these systems to develop a mechanism allowing users to enter and confirm their ages by the summer of that year.
This also means that age verification must occur when users download or purchase apps and content from Google Play or the Apple App Store.
Under the legislation, violations could cost companies up to $2,500 per affected child, with intentional violations climbing to $7,500 per child. The law also “shields” companies from liability for so-called “erroneous age signals” as long as they make a good-faith effort to comply.
Erroneous signals may arise from the use of virtual private networks (VPNs) and other proxy tools designed to bypass age restrictions online.
In addition, the law introduces new safety requirements for digital platforms and services, including measures to prevent suicide and self-harm, clear warnings about social media and AI-powered chatbots, and tougher penalties for profiting from unlawful deepfakes.
“Emerging technology like chatbots and social media can inspire, educate, and connect—but without real guardrails, technology can also exploit, mislead, and endanger our kids,” Gov. Newsom said in a statement issued by his office. He continued, “We’ve seen some truly horrific and tragic examples of young people harmed by unregulated tech, and we won’t stand by while companies continue without necessary limits and accountability.
“We can continue to lead in AI and technology, but we must do it responsibly—protecting our children every step of the way. Our children’s safety is not for sale.”
Beyond device-level age verification, the legislation mandates warning labels on social media platforms to alert young users to the potential risks of excessive use.
It also strengthens penalties for deepfake pornography, allowing victims of non-consensual deepfakes to pursue civil damages of up to $250,000 against individuals who knowingly distribute such material.
“These bills establish guardrails that protect our children’s health and safety while ensuring innovation moves forward responsibly, showing that we can have both at once, always with future generations in mind,” said Jennifer Siebel Newsom, the First Partner of California.
Industry stakeholders have long touted device-level age verification as a potential compromise to existing age-gating systems, which typically occur at the website or platform level. Aylo, the parent company of Pornhub.com, has previously endorsed device-level verification as a privacy-preserving alternative to ID uploads and facial scans.