California’s A.B. 1043 and the Growing Threat to Internet Freedom

California is poised to implement A.B. 1043 in 2027, a law intended to protect young people online, but which privacy advocates warn could lead to widespread censorship and data security risks. The law mandates age-bracketing systems for users of operating systems and apps, requiring the collection of birthdate or age information. This approach, whereas seemingly aimed at safety, is raising concerns about its potential to undermine free expression, and privacy.

The Rise of Age Gating and Its Pitfalls

Age verification, age assurance, age estimation, and age gating are often used interchangeably, but they represent distinct concepts with significant implications for online rights and data privacy [1]. The Electronic Frontier Foundation (EFF) has consistently cautioned against age-gating the internet, arguing that such mandates compromise the principles of a free and open internet [3]. Despite failing to effectively protect children online, age gating has been shown to increase privacy and safety risks and may allow tech firms to avoid responsibility for irresponsible behavior [2].

How A.B. 1043 Could Lead to Censorship

A.B. 1043 requires operating systems and app stores to categorize users by age. Users must then provide their birthdate or age to be placed in the appropriate bracket. Application and software developers are also required to collect this information. The law essentially treats an age-bracket signal as definitive proof of a user’s age, potentially exposing developers to liability under laws like the California Age-Appropriate Design Code [3].

This creates a “censorship trap,” where developers may choose to block users who identify as minors or fall into age brackets they deem unsuitable, even though minors have First Amendment rights to access most online content [3]. The result is a likely over-censorship of content, effectively outsourcing censorship to private companies.

Disproportionate Impact on Compact Developers and Open-Source Software

The burdens imposed by A.B. 1043 fall particularly hard on small and open-source developers who lack the resources to implement complex age verification systems [3]. This could limit software choices and further concentrate computational power in the hands of large tech companies. The law’s broad language also raises implementation issues, as it applies to a wide range of devices, potentially requiring users to submit age information to more companies than ever before, increasing the risk of data misuse and breaches [3].

A Better Approach: Prioritizing Privacy and Data Minimization

Rather than focusing on age gates and censorship, legislators should prioritize comprehensive privacy laws that empower all users – young and old – to control their data [3]. Data minimization, a principle of collecting only the data necessary for a specific purpose, offers a more effective and privacy-respecting approach to online safety.

Key Takeaways

• A.B. 1043, set to capture effect in 2027, mandates age-bracketing systems for online users in California.
• The law raises concerns about censorship, as developers may over-restrict access to content for users who identify as minors.
• Small developers and open-source software projects will be disproportionately affected by the compliance burdens.
• A privacy-focused approach, emphasizing data minimization, offers a more effective and less restrictive path to online safety.