A wave of state laws is forcing Apple's and Google's app stores to verify user age and get parental consent before minors can download apps or make in-app purchases. Texas's version is in effect right now. Three more states have similar laws lined up for 2027. None of this is legal advice — laws and court rulings are changing fast, and you should not treat this post as a substitute for a lawyer if you have a specific legal question. What follows is the practical version: what's actually true today, and what it does and doesn't change for your kid's devices.
The short version
- Texas's law is enforceable today — but it's still being fought over in court and could be struck down.
- Utah, Louisiana, and Alabama don't take effect until 2027 — all three have already been delayed once.
- These laws govern app store accounts, not web browsing or DNS — they don't replace the parental controls you should already have set up.
1. What Actually Changed
Starting with Utah in 2024, states began passing "App Store Accountability Act" laws that push age verification up to the app store level — Apple's App Store and Google Play — instead of leaving it to each individual app. The idea: instead of every app building its own age-check, the app store verifies a user's age category once, then shares a simple signal (child, younger teen, older teen, or adult) with developers, who use it to gate content, purchases, and features.
Texas passed its version, SB 2420, and it became the first to actually take effect and get enforced, even while under active court challenge. That's the headline. The details are messier — and matter for whether you need to do anything right now.
2. State-by-State: What's Live, What's Delayed
| State | Law | Status | Effective Date |
|---|---|---|---|
| Texas | SB 2420 | ✓ Enforceable now | Jan 1, 2026 (statutory) — currently enforced pending appeal |
| Utah | App Store Accountability Act | ◐ Delayed | May 6, 2027 |
| Louisiana | HB 977 | ◐ Delayed | July 2027 (pushed back from July 2026) |
| Alabama | HB 161 | ◐ Signed, not yet live | Jan 1, 2027 |
Every state besides Texas pushed its start date back at least once. That's not a coincidence — each is watching how the Texas litigation plays out before their own law faces the same First Amendment challenge in court.
3. Texas's Law Is in Effect — But Not Settled
This is the part most coverage skips: Texas's law being "in effect" doesn't mean it survived a court fight and won. Here's the actual timeline:
A federal district court blocked the law
The judge ruled the Act likely violates the First Amendment — specifically that requiring age proof before downloading an app, and parental consent for minors, restricts access to a huge range of speech — and issued a preliminary injunction stopping enforcement.
The Fifth Circuit paused that block, on appeal
The Fifth Circuit Court of Appeals stayed the district court's injunction, first administratively and then for the full duration of the appeal. That means the law is enforceable by the Texas Attorney General right now — but the underlying constitutional question hasn't been decided. It could still be struck down once the appeal is resolved, and litigation is reportedly headed toward a Supreme Court test.
Practical translation: if you're in Texas, expect to see age-verification or parental-consent prompts on your Apple or Google account today. Outside Texas, none of this applies to you yet — and even in Texas, it's fair to treat this as "current rules, subject to change" rather than settled law.
4. What These Laws Actually Require
Stripped of legal language, the Texas model (which the other states largely mirror) does three things:
Age categorization. The app store has to use a reasonable method to sort accounts into age bands — child (under 13), younger teen (13–15), older teen (16–17), or adult (18+).
Parental consent for minors. Downloads and in-app purchases by an account flagged as a minor require a parent or guardian to approve.
Visible age ratings. App stores must show a clear, accurate age rating for every app and in-app purchase, and developers have to supply the content information behind that rating.
5. What They Don't Do
This is the part that matters most for CyberDaddy readers. These laws operate at the app store account level — they say nothing about:
Web browsing. A kid can still reach adult content, gambling sites, or unmoderated forums through Safari or Chrome with zero app-store involvement. Age verification for app downloads does nothing to filter a browser.
Content already installed. Apps downloaded before an account's age category was set, or on a device that predates the law, aren't retroactively re-checked.
Devices signed in under a parent's or older sibling's account. If a kid uses grandma's iPad still logged into her adult Apple ID, none of this applies.
Search results within "safe" apps. This is the same blind spot behind the Amazon-search bypass we've written about before: Apple's built-in content restrictions allowlist major retailers, but don't inspect what a search query inside that app actually returns. An app-store age law doesn't touch that at all.
Anything network-level. DNS filtering, VPN blocking, and router-level controls are a completely separate layer these laws don't replace.
6. What to Actually Do About It
Expect and verify age/consent prompts
If your child's Apple ID or Google account gets flagged for an age check or a purchase-consent request, that's the law working as intended — approve it if it looks legitimate, the same way you'd review any account permission request.
Don't wait on a law to cover your actual gaps
Whether or not your state ever passes one of these laws, they were never designed to filter web content, catch bypass attempts, or give you visibility into what's actually happening on a device. That's still DNS filtering, Screen Time, and device-level supervision — set those up regardless of what your state legislature does next.
App store law doesn't cover the browser. CyberDaddy does.
Free guided setup covers DNS filtering, Screen Time status, and bypass detection across every device your kid owns — the layer these laws don't touch.
Frequently Asked Questions
Laws change. Your setup shouldn't depend on them.
CyberDaddy covers the layer these app-store laws don't — DNS filtering, bypass detection, and real activity visibility across every device.
Get the Texas Parent Safety Checklist. Five practical checks for what the law doesn't cover, delivered by email:
You’ll also receive practical CyberDaddy setup tips. Unsubscribe anytime.