California Age-Estimation and Child Design Law (AB 2246)

BadLawCalifornia AB 2246California, United StatesHigh threat
Signed; Chapter 187, Statutes of 2026
  1. Introduced
  2. Passed House
  3. Passed Senate
  4. Became Law

Stage 4 of 4: Became Law

Orders services likely to attract children to estimate users' ages or treat everyone as a child, turning a law advertised as privacy protection into another mass-classification mandate.

Latest update

Signed by Governor Newsom and chaptered as Chapter 187, Statutes of 2026

View official bill record

Take action

Learn about the issue and how to make your position known.

Take action on this issue

What it does

AB 2246 replaces California's earlier Age-Appropriate Design Code with a new regime for online services, products, and features likely to be accessed by children. Businesses must estimate child users' ages with a level of certainty tied to risk or apply the law's child protections to every user. It also requires high-privacy defaults and limits profiling, unnecessary data collection, reuse, and precise geolocation. Broad harm-prevention duties and penalties of up to $5,000 per affected child for negligent violations and $15,000 for intentional violations sit behind those requirements. The law says it does not require monitoring or removing third-party content, but the age-estimation mandate remains.

What’s at stake

The law claims to minimize children's data while requiring companies to determine who the children are. That contradiction means more inference, profiling, device signals, identity documents, face analysis, or other age-assurance methods applied far beyond children. Businesses can avoid classifying users only by restricting every user as though they were a child. Either path erodes anonymous access and gives regulators leverage over ordinary online design and speech.

Our take

A privacy law should stop companies collecting data they do not need. AB 2246 instead creates a new reason to inspect and classify every person who arrives. Calling the result age estimation does not make it less invasive. California is using privacy language to normalize surveillance infrastructure that can decide who gets full access to the internet.

Timeline

Signed by Governor Newsom and chaptered as Chapter 187, Statutes of 2026Latest

Introduced in the Assembly

Sponsor

Assemblymember Buffy Wicks