Summary
- California (AB 1856) and Colorado (SB 26-051) have enacted laws requiring operating systems to implement device-level age verification but have specifically exempted open-source software.
- These mandates require “Operating System Providers” to collect a user’s age during account setup and share a non-identifiable “age signal” with third-party apps.
- Following significant backlash from open source community, both states narrowed their definitions to exclude Linux and open source software distributed under licenses that allow users to copy, redistribute, and modify the code.
- While a pure Linux distribution is exempt, platforms like Valve’s SteamOS may still fall under the mandate. This is because SteamOS ships with a proprietary storefront and client.
- Similarly, while Android is technically open source, the version shipped on most phones includes proprietary Google Play Services, which would likely trigger the mandate.
No. I think a chunk of this is aimed at open source.
The people who wrote the bill, who I have actually spoken with rather than speculating, didn’t know what open source means. Like most normal people, they only know Windows, Mac, iOS and Android.
They do know open source is now, which is why they have started modifying the bill. I’m not defending it, but contex is important.