Regulation

Kids Online Safety Act (KOSA)

A pivotal piece of legislation targeting a wide range of online dangers that children and teens face today.

What is it?

KOSA, or the Kids Online Safety Act, is a proposed piece of US legislation aimed at increasing protections for children and teens on the internet.

Current status: As of now, KOSA has not been enacted into law. While it has gained bipartisan support, it faces ongoing debate over its potential benefits and risks. Some revisions have been proposed to address criticisms, but the ultimate impact will depend on how it is implemented if passed.

What are the details?

This bill sets out requirements to protect minors from online harms.

The requirements apply to covered platforms, which are applications or services (e.g., social networks) that connect to the internet and are likely to be used by minors. However, the bill exempts internet service providers, email services, educational institutions, and other specified entities from the requirements.

Covered platforms must take reasonable measures in the design and operation of products or services used by minors to prevent and mitigate certain harms that may arise from that use (e.g., sexual exploitation and online bullying).

Additionally, covered platforms must provide (1) minors with certain safeguards, such as settings that restrict access to minors’ personal data; and (2) parents or guardians with tools to supervise minors’ use of a platform, such as control of privacy and account settings.

Covered platforms must also

  • disclose specified information, including details regarding the use of personalised recommendation systems and individual-specific advertising to minors;
  • allow parents, guardians, minors, and schools to report certain harms;
  • refrain from facilitating advertising of age-restricted products or services (e.g., tobacco and gambling) to minors; and
    annually report on foreseeable risks of harm to minors from using the platform.
  • Additionally, the bill requires large (based on specified revenue, employment, or user criteria) websites, internet applications, and search engines (including social network sites) to meet certain requirements before using algorithms that prioritise information furnished to the user based on user-specific data. For example, such platforms must (1) provide users with notice that the website uses such algorithms, and (2) make available a version of the platform that uses algorithms that do not prioritize information based on user data.

 

The bill provides for enforcement through the Federal Trade Commission and states.

Further, the bill requires the commission to seek to contract with the National Academy of Sciences to study the risks of harm to minors by the use of social media and other online platforms.

The bill establishes a council to advise on implementing the bill. It also requires guidance for market and product research focused on minors and an evaluation of options to verify a user’s age.

Recent update: September '24

At the end of September 2024, The U.S. House Committee on Energy and Commerce advanced a highly debated version of KOSA, now referred to as “KOSA 2.0.” This bill, initially passed in the Senate with overwhelming bipartisan support, seeks to protect children online but has faced criticism over its potential free speech implications and regulatory overreach. Alongside KOSA 2.0, the Children and Teens’ Online Privacy Protection Act (COPPA 2.0) has also resurfaced, marking a renewed legislative push to tackle the complex issue of online safety for minors.

Major changes in KOSA 2.0

The most significant alteration in KOSA 2.0 is the removal of the explicit duty of care for issues such as “anxiety, depression, eating disorders, substance use disorders, and suicidal behaviours”. Instead, the revised bill focuses on preventing “promotion of inherently dangerous acts that are likely to cause serious bodily harm, serious emotional disturbance or death”. This shift has raised eyebrows among lawmakers and advocates, as it narrows the scope of protections originally intended for young users.

Additionally, the bill reinforces privacy protections, although it no longer includes detailed measures for addressing broader mental health concerns. Critics argue that these revisions may weaken the bill’s ability to tackle the wide array of online dangers that children face today.

About the author

Lina Ghazal

Lina is Head of Regulatory & Public Affairs at Verifymy, with over 10 years of experience working across media and tech, in both the public and private sectors — including at Ofcom, TF1, and Meta. Lina specialises in building impactful policy initiatives and partnerships, and has worked closely with regulators, industry leaders, and civil society across Europe, the Middle East, Africa, and the US to help shape the future of online safety.
Got a question?
Contact us to learn how Verifymy can help.

Got a question?

Contact us to learn how Verifymy can help.

How can we help?

Verifymy can assist services in excluding minors altogether and determining the age range of child users so their experience can be tailored appropriately to their age. ​

Age assurance methods

Verifymy’s age assurance solution for any online product, service or business, features the widest range of age verification and age estimation methods to ensure the highest pass rates possible with minimal business disruption.

icon-email-based-age-estimation

Email address

An age estimation method that uses an email address to accurately determine user age while preserving privacy.
icon-facial-age-estimation

Facial age estimation

An age estimation method based on a person’s facial features captured in a short selfie video.
icon-government-issued-id-scan

Government-issued ID

An age verification method that uses ID scanning to determine a user’s exact age.
icon-government-issued-id-scan

Government-issued ID and face match

An age verification method that uses government-issued IDs to determine a user's age and employs face match technology to verify ID ownership.
icon-credit-card

Credit card

An age verification method using credit card authorisation to confirm age.
icon-name-and-address

Name & address

An age verification method that uses customer order details to verify age during account creation or order processing.
icon-mobile-phone-number

Mobile phone number

An age verification method confirming the phone is in the possession of and authorised for use by a person aged 18+
Content

Get in touch

Discover how we can help you solve your compliance and safeguarding challenges.
our solutions
industries
Company
resources