CO SB051

Operating system providers must create an interface during account setup requiring account holders to indicate the user's birth date or age, generating an "age signal" that categorizes users as under 13, 13-15, 16-17, or 18+

App developers must request age signals when their applications are downloaded and launched, and must use this information as the primary indicator of a user's age range for compliance with applicable laws

Both operating system providers and developers are prohibited from sharing age signals with third parties for purposes beyond compliance, and may only collect the minimum information necessary

Civil penalties of up to $2,500 per affected minor for negligent violations and up to $7,500 per affected minor for intentional violations, enforced through civil actions by the Attorney General

Takes effect January 1, 2028, with existing devices required to have age attestation interfaces by July 1, 2028; exemptions apply to enterprise software, internal business communication apps, and technical support applications