Every New Law Designed to Protect Your Kids Online in 2026: What Parents Actually Need to Know

Every New Law Designed to Protect Your Kids Online in 2026: What Parents Actually Need to Know

I watched a mother testify on Capitol Hill yesterday. Cheryl Brown stood at a podium in front of the Senate Commerce Committee, held a photograph of her seventeen-year-old daughter McKenna, and described how a social media platform's recommendation algorithm served her child a steady drip of content about self-harm until McKenna acted on it. The room was quiet in the way rooms get quiet when people are afraid to breathe.

That was May 12, 2026. Cheryl was part of a parents' rally timed to Mother's Day — grieving mothers, fathers, and advocacy groups crowding the hallways of Congress to demand that lawmakers finally do something about the digital environments their children live in for six, eight, ten hours a day. Senate Commerce Chairman Ted Cruz stood at that same podium and made a promise: the Kids Online Safety Act would pass his committee, pass the full Senate, pass the House, and land on the President's desk this year.

Maybe it will. Maybe it won't. Congress has been promising to protect kids online since before my oldest was born, and my oldest is fourteen. But something is different this time, and it's not just the speeches.

The courts moved first

In March 2026, two juries did something no jury had done before. A New Mexico jury found Meta liable for failing to protect children from sexual exploitation on its platforms and ordered the company to pay $375 million. The next day, a California jury found Meta and YouTube liable for designing platform features that cause children to become addicted — treating social media apps, for the first time, as defective products engineered to exploit developing brains. Meta got 70% of the blame. YouTube got 30%. The combined payout was modest — around $6 million — but there are roughly 2,000 similar lawsuits still pending.

Those verdicts changed the math in Washington. Lawmakers who'd spent years arguing that the market would self-correct suddenly had juries telling them it hadn't.

What's actually in the bills

There are at least five major pieces of federal legislation working through Congress right now, and I'll be direct: the names are confusing, the provisions overlap, and nobody — including most members of Congress — can keep them straight. So here's what each one would actually mean for your family.

The Kids Online Safety Act (KOSA) — S.1748 — is the big one. It creates a "duty of care" that forces social media platforms to prevent their products from harming minors. That means defaulting to the strongest privacy settings for anyone under seventeen, giving parents tools to manage their kids' accounts, letting kids opt out of algorithmic recommendations entirely, and establishing a dedicated channel for parents and educators to report harmful content. KOSA does not require age verification through government IDs — the bill explicitly says that. And teenagers don't need parental permission to create accounts. What it does require is that platforms stop designing features they know hurt kids and pretending they didn't know.

COPPA 2.0 — S.836 — already passed the Senate unanimously in March 2026, which in this political climate is roughly as likely as a solar eclipse happening during a snowstorm. The original COPPA, passed in 1998, only protected kids under thirteen. COPPA 2.0 extends those protections to everyone under seventeen. It bans targeted advertising to children and teenagers. It gives kids and teens the right to delete their data. And it replaces the old "actual knowledge" standard — where platforms could claim they had no idea a user was twelve — with a tougher "knowledge fairly implied" standard. Translation: if a platform's own data shows a user is probably a minor, they can't pretend otherwise.

The Kids Off Social Media Act — S.278 — is the bluntest instrument. It bans children under thirteen from creating or maintaining social media accounts, period. For teens thirteen to sixteen, it prohibits platforms from using algorithms to push content into their feeds. No more recommendation engines curating an endless scroll for a fifteen-year-old. The bill also requires schools receiving federal funding to work toward limiting social media access on their networks. Over 90% of mothers surveyed support the minimum age of thirteen.

The Parents Decide Act — H.R.8250 — takes a completely different approach. Instead of regulating platforms, it regulates operating systems. Apple and Google would have to require a date of birth during device setup. If the user is under eighteen, a parent or guardian must verify it. From that point forward, age-appropriate content settings flow through to every app on the device. The idea is that you set it once, at the operating system level, and every app inherits those protections. Whether Apple and Google will build this correctly is a separate question.

The KIDS Act — the House version of KOSA, essentially — passed the House Energy and Commerce Committee in March and folds in some COPPA 2.0 provisions. It's working through the same legislative pipeline.

States aren't waiting

Here's the part that surprised me. While Congress debates, state legislatures have introduced nearly 300 children's online safety bills in 2026 alone. Three hundred. And they're going places Congress hasn't.

Idaho, Oregon, and Washington have already signed into law bills regulating AI companion chatbots for minors. Oregon's law — SB 1546, signed March 2026 — requires chatbot providers to detect suicidal ideation and interrupt with crisis referrals, to remind users every three hours that the chatbot isn't human, and to disclose that the "person" they're talking to is software. The law includes a private right of action with $1,000 in statutory damages per violation. Washington's version — HB 2225 — goes further: it prohibits chatbots from using manipulative engagement techniques that encourage minors to withhold information from trusted adults.

Read that last sentence again. A chatbot that tells your kid not to tell you something is now illegal in Washington state.

Massachusetts Governor Maura Healey has proposed legislation requiring age verification for social media, mandatory parental consent, and disabling addictive features like infinite scroll and push notifications during school hours. New York Governor Kathy Hochul announced proposals to restrict AI chatbots for minors and combat the youth mental health crisis at the state level.

Across 27 states, 78 AI chatbot safety bills are reshaping the regulatory landscape. This is not theoretical. Idaho's law takes effect July 2027. Oregon's and Washington's are effective January 2027. Parents in those states will see real changes within a year.

What none of this fixes

I need to be honest about something, because most of the coverage I've read this week doesn't say it.

Laws don't parent your kids. They never have. The most comprehensive children's online safety legislation in American history will not stop a determined thirteen-year-old from finding content you don't want them to see. It will not make TikTok's algorithm suddenly understand that your daughter's anxiety disorder makes doom-scrolling dangerous for her specifically. It will not teach your son why the AI chatbot that calls him "babe" and tells him it loves him is not his friend.

What these laws can do — and this is not nothing — is shift the burden. Right now, every parent in America is personally responsible for fighting a $150 billion social media industry that employs thousands of engineers specifically to make their products harder to put down. That fight isn't fair. It was never fair. And the courts just confirmed it: these platforms are defective products. The companies that built them bear responsibility for the harm they cause.

KOSA, COPPA 2.0, the Kids Off Social Media Act, the state chatbot laws — they represent the beginning of a world where parents don't have to fight alone. Where the default settings protect your child instead of exploiting them. Where a platform that knows your kid is twelve can't just shrug.

But the conversation at your kitchen table still matters more than any bill on Capitol Hill. Your kid still needs you to ask what they saw online today, to sit with them when they're upset about something that happened in a group chat, to explain why the AI chatbot isn't their friend even when it says all the right things. No law replaces that. The law just makes it so you're not doing it completely alone.

What to do right now

Don't wait for these bills to pass. Most of the protections parents need already exist — they're just buried in settings menus nobody reads.

Turn on Apple's Communication Safety features. Set up Google Family Link. Review the privacy settings on every app your child uses. Talk to your kids about AI chatbots — a growing number of them are using companion apps without telling you, and three states just made laws about it because the problem is that widespread. If your child is on social media, sit with them and look at their feed together. Not to spy. To understand what the algorithm is showing them.

And if you want to add your voice to the parents pushing for these laws, ParentsSOS is the organization that coordinated yesterday's Capitol Hill rally. They'll tell you exactly who to call in your state and what to say.

Digipalz teaches kids digital citizenship — how to think critically about the technology in their lives, how to protect themselves, and how to be good humans online. Every module in our curriculum was built for exactly this moment. Because even when the laws catch up, your kids still need to understand why the guardrails exist.

Start a free trial →

If your child is in crisis, contact the 988 Suicide & Crisis Lifeline by calling or texting 988. For online exploitation, report to the National Center for Missing & Exploited Children at CyberTipline.org or call 1-800-843-5678.