AL HB317

App store providers must verify user age and affiliate minor accounts with parent accounts, obtaining verifiable parental consent before minors can download apps, purchase apps, or make in-app purchases.

App store providers must notify users of significant app changes (modifications to terms of service, privacy policy, data collection, new monetization features, or functionality changes) and obtain renewed parental consent for minor accounts.

App store providers must provide developers real-time access to age category data and parental consent status for users, while protecting personal age verification data through industry-standard encryption and limiting collection to age verification, consent, and compliance purposes.

App store providers and developers are prohibited from enforcing contracts against minors without verifiable parental consent, misrepresenting parental consent disclosure information, or sharing personal age verification data except as required by law.

Violations constitute deceptive trade practices actionable by the Attorney General, who may assess civil penalties up to $50,000 per violation, reasonable attorney fees, court costs, and punitive damages for consistent patterns of knowing or reckless conduct; the act becomes effective October 1, 2026.