The U.S. House of Representatives passed the KIDS Act on a 267-117 vote, a legislative package combining the Kids Online Safety Act (KOSA) with various age-gating and reporting mandates.
This isn’t just another “protect the children” bill. From a technical architecture standpoint, the KIDS Act is a nightmare of fragmented standards. It forces platforms to implement a patchwork of age-gating schemes—some relying on government IDs, others on biometric facial scanning—without providing a unified, privacy-preserving protocol.
The Technical Impossibility of Privacy-Preserving Age Verification
The KIDS Act operates on a fundamental fallacy: that you can accurately verify a user’s age without creating a permanent, hackable link between their offline identity and their digital footprint. In the current stack, there is no such thing as a “privacy-protective” age check that actually works at scale.
Currently, the industry relies on three primary, flawed methods:
- Document Uploads: Users submit government-issued IDs. This creates a honeypot of PII (Personally Identifiable Information) that is a primary target for state-sponsored actors and cybercriminals.
- Biometric Estimation: Using facial analysis to “guess” age.
- Behavioral Analysis: Using algorithms to guess a user’s age based on online behavior.
We've already seen breaches in third-party age verification providers.
Algorithmic Over-Censorship and the “Safety” Trap
The revised KOSA language within the KIDS Act doesn’t just target “harmful” content; it pressures platforms to police lawful speech. By requiring companies to “establish, implement, maintain, and enforce” policies against content like gambling, alcohol, or cannabis, the bill creates a massive liability loop.
If a regulator can sue a platform for failing to “enforce” these policies, the platform’s response will be aggressive, automated deletion. An adolescent searching for substance abuse recovery resources or a teen seeking help for a parent’s gambling addiction could find those resources scrubbed by an over-tuned moderation algorithm designed to avoid a lawsuit.
The Ecosystem Fallout: Platform Lock-in and the Death of the Indie Web
The Senate should reject it in favor of comprehensive, universal privacy laws.
A Better Path: Universal Privacy Over Targeted Surveillance
Instead of age-gates, Congress should focus on a comprehensive privacy law that benefits every user, regardless of age.
The most impactful move would be to ban behavioral advertising that tracks us across the web—again, for users of all ages.
