Age Appropriate Design Code

Status On Monday, 29th August 2022, the California State Senate approved the California Age-Appropriate Design Code Act. Both the Senate and the State Assembly did so unanimously, so there is clear bi-partisan support. If signed by the Governor, the law comes into force on July 1, 2024. What is it The law applies to all […]

2 min read
September 1, 2022
Share this article:

Status

On Monday, 29th August 2022, the California State Senate approved the California Age-Appropriate Design Code Act.

Both the Senate and the State Assembly did so unanimously, so there is clear bi-partisan support. If signed by the Governor, the law comes into force on July 1, 2024.

What is it

The law applies to all online services where it is reasonable to expect they are “likely to be accessed by children under 18”.

This affects most websites containing adult content accessible in California because one of the legal tests set out in the California Age-Appropriate Design Code is whether the site is actually being routinely accessed by a significant number of children rather than whether the site is designed for children.

Requirements

The requirements for all such adult sites under the Act are to determine the age of all users with a reasonable level of certainty.

Furthermore, the new legislation mandates that sites must overhaul their privacy and safety standards based on the California Age-Appropriate Design Code’s age verification requirements.

Potentially impacted sites will need to complete a Data Protection Impact Assessment to document any risk of material detriment to children that arises from the business’s data management practices, e.g., by exposing children to harmful or potentially harmful content, contacts, or conduct. This is in compliance with the California Age-Appropriate Design Code.

Among other requirements, if the end user is a child the sites must limit use of personal information (including geolocation) for any reason other than that for which that personal information was originally collected.

Adult content sites will also need to enforce published terms, policies, and community standards established by the business, including, but not limited to, privacy policies and those concerning children.

Penalties

Sites must create a timed plan to mitigate or eliminate the risks.

The bill would hold violators liable for a civil penalty of not more than $2,500 per affected child for each negligent violation or not more than $7,500 per affected child for each intentional violation.

There are 2.4 million children in California, so theoretically, fines of up to $18bn are possible, but in practical terms, they are easily millions of dollars.

Verifymy services will assist adult sites in navigating and addressing many of these new legal requirements.

About the author

Verifymy

Verifymy is a safety technology provider on a mission to safeguard children and society online.

Subscribe and keep up to date

Related articles

Online Safety

Recent headlines involving X, its AI tools, and the proliferation of non-consensual synthetic imagery have brought a long-standing issue back into sharp focus: how do we protect people – and particularly children and those disproportionately targeted, including women and girls – from image-based abuse in an age of generative AI? While non-consensual intimate image (NCII) […]

4 min read
February 10, 2026
Regulation

Australia today becomes the first country in the world to introduce an outright ban on under-16s holding social media accounts, a move that has captured global attention. Governments from Europe to North America are already signalling that they are watching closely – not only to see whether the policy reduces online harms, but also to […]

4 min read
December 9, 2025
Regulation

Brazil recently took a significant step toward protecting minors in digital spaces. On September 17, 2025, the country’s president signed Bill 2628/2022, known as the Digital ECA (Estatuto Digital da Criança e do Adolescente). The law will take effect on March 17, 2026, and will be enforced by the ANPD, Brazil’s data protection authority. The […]

3 min read
October 20, 2025
our solutions
industries
Company
resources