HB26-1148 • 2026

Protections for Youth on Social Media

Under the bill, a "covered business" is defined as a sole proprietorship, a partnership, a limited liability company, a corporation, an association, or another legal entity, or an affiliate of such a

Children Privacy

Passed Legislature

This bill passed both chambers and reached final enrollment, even if later executive action is not shown here.

Sponsor: Rep. J. Willford, Rep. Y. Zokaie, Sen. D. Roberts, Sen. M. Weissman
Last action: 2026-04-07
Official status: House Committee on Judiciary Postpone Indefinitely
Effective date: Not listed

Plain English Breakdown

The bill summary text provides detailed requirements but lacks specifics on enforcement mechanisms.

Protection for Youth on Social Media

This bill sets rules to protect young people who use social media and online gaming services by requiring companies to follow strict privacy settings, delete data when needed, and not collect unnecessary personal information.

What This Bill Does

Defines a 'covered business' as any company that does most of its work online, offers games or features likely used by minors, collects users' personal data, and determines the purposes and means of processing this data.
Requires covered businesses to set the highest privacy levels for young users by default.
Forbids companies from asking young users to lower their privacy settings.
Prohibits collecting, selling, sharing, or keeping personal data of minors unless it's needed for a specific service they use.
Bans sending push notifications to minors between midnight and 6 AM.

Who It Names or Affects

Social media companies that offer online gaming services
Minors who use these services

Terms To Know

Covered business: A company that does most of its work online, offers games or features likely used by minors, collects users' personal data, and determines the purposes and means of processing this data.
Covered minor: A user who is under 18 years old, as determined by the covered business.

Limits and Unknowns

The bill does not specify what happens if a company breaks these rules.
It's unclear how this will be enforced or monitored.

Amendments

These notes stay tied to the official amendment files and metadata from the legislature.

L.005

HOU Judiciary

Passed [*]

Plain English: The amendment changes the purpose statement of a 'covered business' to say that making money is its main goal.

Changes the phrase from 'MAKES' to 'HAS A PRIMARY PURPOSE OF MAKING', indicating that earning profit is the main reason for a covered business's existence.

The amendment text does not provide additional context about what this change means in practice or how it affects other parts of the bill.

L.006

HOU Judiciary

Passed [*]

Plain English: The amendment adds a new section to the bill that says if any part of the law is found to be invalid, it won't affect other parts of the law.

Adds a 'Severability' clause to the bill on page 18 after line 4.

The amendment text does not provide details about what specific provisions might be invalid or how they would affect other parts of the law.

L.007

HOU Judiciary

Passed [*]

Plain English: The amendment changes the list of laws and regulations that a 'covered business' must follow when dealing with certain activities involving youth on social media.

Adds new provisions to include specific state laws and constitutional sections related to privacy, reproductive health equity, and other legal protections in how businesses handle data and conduct investigations or seizures.
Modifies existing language by removing references to 'OR' and replacing them with more detailed descriptions of the relevant statutes.

The exact impact on covered businesses is not fully explained in the provided amendment text, making it hard to predict all changes for business operations.

L.009

HOU Judiciary

Passed [*]

Plain English: The amendment removes specific sections from the bill related to definitions and requirements for covered businesses.

Removes lines 4 through 19 on page 11 of the printed bill, which contain certain definitions or requirements.
Strikes out lines 3 through 27 on page 17, likely containing more detailed rules or restrictions.
Eliminates lines 1 through 4 on page 18, possibly including additional regulatory language.

The exact content of the removed sections is not provided in the amendment text, making it hard to know precisely what has been eliminated.

L.010

HOU Judiciary

Passed [*]

Plain English: The amendment removes specific sections from the bill that define 'covered business' and related terms.

Removes lines defining what a 'covered business' is on page 7 of the bill.
Eliminates an entire page (page 8) of the bill.
Strikes out the first five lines of page 9.

The exact content removed from the bill is not provided, so it's unclear what specific definitions or details were eliminated.

L.011

HOU Judiciary

Lost

Plain English: The amendment removes certain lines from the bill and replaces them with new language that prohibits specific data practices and design features aimed at encouraging compulsive use of social media by youth starting December 1, 2026.

Removes sections on pages 9 and 10 of the original bill text.
Adds a new section to prohibit certain data and design practices that encourage excessive or compulsive use of social media platforms by young people.

The exact details of what specific data practices and design features are prohibited are not provided in the amendment text, making it unclear exactly which behaviors will be regulated.
It is unknown how these prohibitions will be enforced or what penalties might apply to businesses that violate them.

Bill History

2026-04-07 House
House Committee on Judiciary Postpone Indefinitely
2026-03-18 House
House Committee on Judiciary Witness Testimony and/or Committee Discussion Only
2026-02-04 House
Introduced In House - Assigned to Judiciary

Official Summary Text

Under the bill, a "covered business" is defined as a sole proprietorship, a partnership, a limited liability company, a corporation, an association, or another legal entity, or an affiliate of such a legal entity, that:
Conducts business in the state and generates a majority of its annual revenue from online services;
Makes available online gaming services, products, or features that are reasonably likely to be accessed by a user who is a minor or who the covered business labels as a minor (covered minor);
Collects users' personal data or has users' personal data collected on its behalf by a processor; and
Solely or jointly with others determines the purposes and means of the processing of users' personal data.

The bill states that a covered business that processes the personal data of a covered minor owes a minimum duty of care to the covered minor. The bill also requires a covered business to:
Configure default privacy settings provided to a covered minor to the highest level of privacy and to include certain default settings;
Provide a prominent, accessible, and responsive tool to allow a covered minor to request that the covered minor's account be unpublished or deleted and, if the business receives such a request, to honor it within 15 days; and
Immediately delete all data that relates to the determination of a user's age after it is determined that the user is a covered minor.

The bill prohibits a covered business from:
Providing a covered minor with a single setting that makes all of the default privacy settings less protective at once;
Requesting or prompting a covered minor to make their privacy settings less protective;
Collecting, selling, sharing, or retaining personal data of a covered minor that is not necessary to provide an online gaming service, product, or feature with which the covered minor is actively and knowingly engaged;
Using previously collected personal data of a covered minor for any purpose other than a purpose for which the personal data was collected;
Permitting an individual to monitor the online activity of a covered minor or to track the location of the covered minor without providing a conspicuous signal to the covered minor when the covered minor is being monitored or tracked;
Using the personal data of a covered minor to select, recommend, or prioritize media for the covered minor unless the covered minor makes certain requests or takes certain actions warranting such conduct by the covered business; or
Sending push notifications to a covered minor between 12 midnight and 6 a.m.

The bill imposes additional specific requirements and prohibitions for a covered business that collects users' personal data for the purpose of conducting age assurance.

The bill requires a covered business to ensure that the purchase price for an online gaming service, product, or feature that is made available through the covered business's online gaming service, product, or feature and that is reasonably likely to be accessed by a covered minor is listed in United States dollars at the point of sale.

A covered business shall impose and collect a fee on each add-on transaction that is conducted by a covered minor through the covered business's online gaming service, product, or feature. The amount of the fee is 5% of the amount of the transaction. Money collected as such fees is credited to the state public school fund.

The bill requires a social media platform to provide certain information on its website or mobile application concerning privacy policies and the use of algorithms. A social media platform is prohibited from using an algorithmic recommendation system to sell or otherwise distribute an illicit substance to a covered minor.
(Note: This summary applies to this bill as introduced.)

Current Bill Text

Read the full stored bill text

Second Regular Session
Seventy-fifth General Assembly
STATE OF COLORADO
INTRODUCED

LLS NO. 26-0293.02 Richard Sweetman x4333 HOUSE BILL 26-1148
House Committees Senate Committees
Judiciary
A BILL FOR AN ACT
CONCERNING PROTECTIONS FOR MINORS WHO ACCESS CERTAIN101
SOCIAL MEDIA.102
Bill Summary
(Note: This summary applies to this bill as introduced and does
not reflect any amendments that may be subsequently adopted. If this bill
passes third reading in the house of introduction, a bill summary that
applies to the reengrossed version of this bill will be available at
http://leg.colorado.gov.)
Under the bill, a "covered business" is defined as a sole
proprietorship, a partnership, a limited liability company, a corporation,
an association, or another legal entity, or an affiliate of such a legal entity,
that:
! Conducts business in the state and generates a majority of
its annual revenue from online services;
HOUSE SPONSORSHIP
Zokaie and Willford,
SENATE SPONSORSHIP
Weissman and Roberts,
Shading denotes HOUSE amendment. Double underlining denotes SENATE amendment.
Capital letters or bold & italic numbers indicate new material to be added to existing law.
Dashes through the words or numbers indicate deletions from existing law.
! Makes available online gaming services, products, or
features that are reasonably likely to be accessed by a user
who is a minor or who the covered business labels as a
minor (covered minor);
! Collects users' personal data or has users' personal data
collected on its behalf by a processor; and
! Solely or jointly with others determines the purposes and
means of the processing of users' personal data.
The bill states that a covered business that processes the personal
data of a covered minor owes a minimum duty of care to the covered
minor. The bill also requires a covered business to:
! Configure default privacy settings provided to a covered
minor to the highest level of privacy and to include certain
default settings;
! Provide a prominent, accessible, and responsive tool to
allow a covered minor to request that the covered minor's
account be unpublished or deleted and, if the business
receives such a request, to honor it within 15 days; and
! Immediately delete all data that relates to the determination
of a user's age after it is determined that the user is a
covered minor.
The bill prohibits a covered business from:
!Providing a covered minor with a single setting that makes
all of the default privacy settings less protective at once;
! Requesting or prompting a covered minor to make their
privacy settings less protective;
! Collecting, selling, sharing, or retaining personal data of a
covered minor that is not necessary to provide an online
gaming service, product, or feature with which the covered
minor is actively and knowingly engaged;
! Using previously collected personal data of a covered
minor for any purpose other than a purpose for which the
personal data was collected;
! Permitting an individual to monitor the online activity of a
covered minor or to track the location of the covered minor
without providing a conspicuous signal to the covered
minor when the covered minor is being monitored or
tracked;
! Using the personal data of a covered minor to select,
recommend, or prioritize media for the covered minor
unless the covered minor makes certain requests or takes
certain actions warranting such conduct by the covered
business; or
! Sending push notifications to a covered minor between 12
midnight and 6 a.m.
HB26-1148-2-
The bill imposes additional specific requirements and prohibitions
for a covered business that collects users' personal data for the purpose of
conducting age assurance.
The bill requires a covered business to ensure that the purchase
price for an online gaming service, product, or feature that is made
available through the covered business's online gaming service, product,
or feature and that is reasonably likely to be accessed by a covered minor
is listed in United States dollars at the point of sale.
A covered business shall impose and collect a fee on each add-on
transaction that is conducted by a covered minor through the covered
business's online gaming service, product, or feature. The amount of the
fee is 5% of the amount of the transaction. Money collected as such fees
is credited to the state public school fund.
The bill requires a social media platform to provide certain
information on its website or mobile application concerning privacy
policies and the use of algorithms. A social media platform is prohibited
from using an algorithmic recommendation system to sell or otherwise
distribute an illicit substance to a covered minor.
Be it enacted by the General Assembly of the State of Colorado:1
SECTION 1. In Colorado Revised Statutes, add part 19 to article2
1 of title 6 as follows:3
PART 194
PROTECTIONS FOR MINORS ON ONLINE GAMING SITES5
6-1-1901. Definitions.6
AS USED IN THIS PART 19, UNLESS THE CONTEXT OTHERWISE7
REQUIRES:8
(1) "A DD-ON TRANSACTION " MEANS AN ONLINE TRANSACTION9
THROUGH WHICH A PLAYER OR PARTICIPANT IN AN ONLINE GAMING10
SERVICE, PRODUCT, OR FEATURE ACQUIRES:11
(a) A N ITEM OR ABILITY THAT PROVIDES THE PLAYER OR12
PARTICIPANT AN ADVANTAGE OVER OTHER PLAYERS OR PARTICIPANTS; OR13
(b) A FEATURE THAT ALTERS OR ENHANCES THE ONLINE GAMING14
SERVICE, PRODUCT, OR FEATURE.15
HB26-1148-3-
(2) "A FFILIATE" HAS THE MEANING SET FORTH IN SECTION1
6-1-1303 (1.5).2
(3) "AGE ASSURANCE" MEANS A DETERMINATION, AN ESTIMATION,3
OR A COMMUNICATION ABOUT THE AGE OR AGE RANGE OF A USER.4
(4) "B USINESS ASSOCIATE " HAS THE MEANING SET FORTH IN 455
CFR 160.103.6
(5) "COLLECT" MEANS TO BUY, RENT, GATHER, OBTAIN, RECEIVE,7
OR ACCESS PERSONAL DATA BY ANY MEANS , INCLUDING BY RECEIVING8
DATA, EITHER ACTIVELY OR PASSIVELY , FROM A CONSUMER OR BY9
OBSERVING A CONSUMER'S BEHAVIOR.10
(6) "COMPULSIVE USE" MEANS THE REPETITIVE USE OF A COVERED11
BUSINESS'S ONLINE GAMING SERVICE, PRODUCT, OR FEATURE, WHICH USE:12
(a) MATERIALLY DISRUPTS ONE OR MORE MAJOR LIFE ACTIVITIES13
OF A MINOR , INCLUDING SLEEPING , EATING , LEARNING , READING ,14
CONCENTRATING, COMMUNICATING, OR WORKING; OR15
(b) S UBVERTS OR IMPAIRS A COVERED MINOR 'S AUTONOMY ,16
DECISION-MAKING, OR CHOICE DURING THE USE OF THE ONLINE GAMING17
SERVICE, PRODUCT, OR FEATURE.18
(7) "C OVERED BUSINESS " MEANS A SOLE PROPRIETORSHIP , A19
PARTNERSHIP, A LIMITED LIABILITY COMPANY , A CORPORATION , AN20
ASSOCIATION, OR ANOTHER LEGAL ENTITY , OR AN AFFILIATE THEREOF ,21
THAT:22
(a) CONDUCTS BUSINESS IN THIS STATE;23
(b) G ENERATES A MAJORITY OF ITS ANNUAL REVENUE FROM24
ONLINE SERVICES;25
(c) MAKES AVAILABLE ONLINE GAMING SERVICES, PRODUCTS, OR26
FEATURES THAT ARE REASONABLY LIKELY TO BE ACCESSED BY A COVERED27
HB26-1148-4-
MINOR;1
(d) COLLECTS USERS' PERSONAL DATA OR HAS USERS ' PERSONAL2
DATA COLLECTED ON ITS BEHALF BY A PROCESSOR; AND3
(e) SOLELY OR JOINTLY WITH OTHERS DETERMINES THE PURPOSES4
AND MEANS OF THE PROCESSING OF USERS' PERSONAL DATA.5
(8) "COVERED MINOR" MEANS A USER WHO A COVERED BUSINESS6
KNOWS IS A MINOR OR LABELS AS A MINOR PURSUANT TO AGE ASSURANCE.7
(9) "D E-IDENTIFIED DATA " HAS THE MEANING SET FORTH IN8
SECTION 6-1-1303 (11).9
(10) "MINIMUM DUTY OF CARE" MEANS ENSURING THAT THE USE10
OF THE PERSONAL DATA OF A COVERED MINOR AND THE DESIGN OF AN11
ONLINE GAMING SERVICE, PRODUCT, OR FEATURE WILL NOT RESULT IN:12
(a) R EASONABLY FORESEEABLE EMOTIONAL DISTRESS TO A13
COVERED MINOR;14
(b) REASONABLY FORESEEABLE COMPULSIVE USE OF THE ONLINE15
GAMING SERVICE, PRODUCT, OR FEATURE BY A COVERED MINOR; OR16
(c) D ISCRIMINATION AGAINST A COVERED MINOR BASED UPON17
RACE, ETHNICITY , SEX , DISABILITY , SEXUAL ORIENTATION , GENDER18
IDENTITY, GENDER EXPRESSION, RELIGION, OR NATIONAL ORIGIN.19
(11) "MINOR" MEANS A USER WHO IS UNDER EIGHTEEN YEARS OLD.20
(12) "ONLINE GAMING SERVICE, PRODUCT, OR FEATURE" MEANS AN21
ONLINE SERVICE, PRODUCT, OR FEATURE, AS DEFINED IN SECTION 6-1-130322
(16.8), THAT IS INTENDED TO FACILITATE ONLINE GAMING.23
(13) "PERSONAL DATA" HAS THE MEANING SET FORTH IN SECTION24
6-1-1303 (17).25
(14) "PROCESS" OR "PROCESSING" HAS THE MEANING SET FORTH26
IN SECTION 6-1-1303 (18).27
HB26-1148-5-
(15) "P ROCESSOR" HAS THE MEANING SET FORTH IN SECTION1
6-1-1303 (19).2
(16) "R EASONABLY LIKELY TO BE ACCESSED BY A COVERED3
MINOR" MEANS AN ONLINE GAMING SERVICE, PRODUCT, OR FEATURE THAT4
IS REASONABLY LIKELY TO BE ACCESSED BY A COVERED MINOR BASED ON5
ANY OF THE FOLLOWING INDICATORS:6
(a) T HE ONLINE GAMING SERVICE , PRODUCT , OR FEATURE IS7
DIRECTED TO CHILDREN , AS DESCRIBED BY THE FEDERAL "CHILDREN'S8
ONLINE PRIVACY PROTECTION ACT OF 1998", 15 U.S.C. SECS. 6501 TO9
6506, AND THE ASSOCIATED RULES OF THE FEDERAL TRADE COMMISSION;10
(b) T HE ONLINE GAMING SERVICE , PRODUCT , OR FEATURE IS11
DETERMINED, BASED ON COMPETENT AND RELIABLE EVIDENCE REGARDING12
AUDIENCE COMPOSITION, TO BE ROUTINELY ACCESSED BY AN AUDIENCE13
THAT IS COMPOSED OF AT LEAST TWO PERCENT MINORS WHO ARE TWO14
THROUGH SEVENTEEN YEARS OLD;15
(c) THE AUDIENCE OF THE ONLINE GAMING SERVICE, PRODUCT, OR16
FEATURE IS DETERMINED, BASED ON INTERNAL COMPANY RESEARCH, TO17
BE COMPOSED OF AT LEAST TWO PERCENT MINORS WHO ARE TWO18
THROUGH SEVENTEEN YEARS OLD; OR19
(d) THE COVERED BUSINESS KNEW OR SHOULD HAVE KNOWN THAT20
AT LEAST TWO PERCENT OF THE AUDIENCE OF THE ONLINE GAMING21
SERVICE, PRODUCT, OR FEATURE IS COMPOSED OF MINORS WHO ARE TWO22
THROUGH SEVENTEEN YEARS OLD ; EXCEPT THAT , IN MAKING THIS23
ASSESSMENT, THE BUSINESS SHALL NOT COLLECT OR PROCESS ANY24
PERSONAL DATA THAT IS NOT REASONABLY NECESSARY TO PROVIDE AN25
ONLINE GAMING SERVICE, PRODUCT, OR FEATURE WITH WHICH A MINOR IS26
ACTIVELY AND KNOWINGLY ENGAGED.27
HB26-1148-6-
(17) "U SER" MEANS A USER OF ONE OR MORE ONLINE GAMING1
SERVICES, PRODUCTS, OR FEATURES WHO RESIDES IN THE STATE.2
6-1-1902. Minimum duty of care.3
(1) ON AND AFTER DECEMBER 1, 2026, A COVERED BUSINESS THAT4
PROCESSES A COVERED MINOR'S PERSONAL DATA IN ANY CAPACITY OWES5
A MINIMUM DUTY OF CARE TO THE COVERED MINOR.6
(2) NOTHING IN THIS SECTION SHALL BE CONSTRUED TO REQUIRE7
A COVERED BUSINESS TO PREVENT OR PRECLUDE A COVERED MINOR FROM8
ACCESSING OR VIEWING ANY ITEM OF MEDIA OR CATEGORY OF MEDIA.9
6-1-1903. Default privacy settings required - tool for timely10
deletion of accounts required.11
(1) Default privacy settings.12
(a) O N AND AFTER DECEMBER 1, 2026, A COVERED BUSINESS13
SHALL CONFIGURE ALL DEFAULT PRIVACY SETTINGS PROVIDED TO A14
COVERED MINOR THROUGH AN ONLINE GAMING SERVICE , PRODUCT, OR15
FEATURE TO THE HIGHEST LEVEL OF PRIVACY, INCLUDING THE FOLLOWING16
DEFAULT SETTINGS:17
(I) N OT DISPLAYING THE EXISTENCE OF THE COVERED MINOR 'S18
ACCOUNT TO AN ADULT USER UNLESS THE COVERED MINOR EXPRESSLY19
AND UNAMBIGUOUSLY ALLOWS THE ADULT USER TO VIEW THE COVERED20
MINOR'S ACCOUNT OR THE COVERED MINOR EXPRESSLY AND21
UNAMBIGUOUSLY CHOOSES TO MAKE THEIR ACCOUNT'S EXISTENCE PUBLIC;22
(II) NOT DISPLAYING MEDIA CREATED OR POSTED BY THE COVERED23
MINOR TO AN ADULT USER UNLESS THE COVERED MINOR EXPRESSLY AND24
UNAMBIGUOUSLY ALLOWS THE ADULT USER TO VIEW THE COVERED25
MINOR 'S MEDIA OR THE COVERED MINOR EXPRESSLY AND26
UNAMBIGUOUSLY CHOOSES TO MAKE THEIR MEDIA PUBLICLY AVAILABLE;27
HB26-1148-7-
(III) NOT PERMITTING AN ADULT USER TO LIKE, COMMENT ON, OR1
OTHERWISE PROVIDE FEEDBACK ON THE COVERED MINOR'S MEDIA UNLESS2
THE COVERED MINOR EXPRESSLY AND UNAMBIGUOUSLY ALLOWS THE3
ADULT USER TO DO SO;4
(IV) NOT PERMITTING DIRECT MESSAGING BETWEEN THE COVERED5
MINOR AND AN ADULT USER UNLESS THE COVERED MINOR EXPRESSLY AND6
UNAMBIGUOUSLY ALLOWS DIRECT MESSAGING WITH THE ADULT USER;7
(V) NOT DISPLAYING THE COVERED MINOR'S LOCATION TO OTHER8
USERS UNLESS THE COVERED MINOR EXPRESSLY AND UNAMBIGUOUSLY9
SHARES THEIR LOCATION WITH A SPECIFIC USER;10
(VI) N OT DISPLAYING TO ANY USER THE USERS WHO ARE11
CONNECTED TO THE COVERED MINOR UNLESS THE COVERED MINOR12
EXPRESSLY AND UNAMBIGUOUSLY CHOOSES TO SHARE THE INFORMATION13
WITH THE USER;14
(VII) D ISABLING SEARCH ENGINE INDEXING OF THE COVERED15
MINOR'S ACCOUNT PROFILE; AND16
(VIII) NOT SENDING PUSH NOTIFICATIONS TO THE COVERED MINOR.17
(b) O N AND AFTER DECEMBER 1, 2026, A COVERED BUSINESS18
SHALL NOT:19
(I) P ROVIDE A COVERED MINOR WITH A SINGLE SETTING THAT20
MAKES ALL OF THE DEFAULT PRIVACY SETTINGS LESS PROTECTIVE AT21
ONCE; OR22
(II) R EQUEST OR PROMPT A COVERED MINOR TO MAKE THEIR23
PRIVACY SETTINGS LESS PROTECTIVE.24
(2) Timely deletion of account. ON AND AFTER DECEMBER 1,25
2026, A COVERED BUSINESS SHALL:26
(a) PROVIDE A PROMINENT, ACCESSIBLE, AND RESPONSIVE TOOL TO27
HB26-1148-8-
ALLOW A COVERED MINOR TO REQUEST THAT THE COVERED MINOR 'S1
ACCOUNT BE UNPUBLISHED OR DELETED; AND2
(b) HONOR A REQUEST DESCRIBED IN SUBSECTION (2)(a) OF THIS3
SECTION NOT LATER THAN FIFTEEN DAYS AFTER THE COVERED BUSINESS4
RECEIVES THE REQUEST.5
6-1-1904. Prohibited data and design practices - data privacy6
- compulsive use.7
(1) Data privacy. ON AND AFTER DECEMBER 1, 2026, A COVERED8
BUSINESS SHALL NOT:9
(a) C OLLECT, SELL , SHARE , OR RETAIN PERSONAL DATA OF A10
COVERED MINOR THAT IS NOT NECESSARY TO PROVIDE AN ONLINE GAMING11
SERVICE, PRODUCT , OR FEATURE WITH WHICH THE COVERED MINOR IS12
ACTIVELY AND KNOWINGLY ENGAGED;13
(b) USE PREVIOUSLY COLLECTED PERSONAL DATA OF A COVERED14
MINOR FOR ANY PURPOSE OTHER THAN A PURPOSE FOR WHICH THE15
PERSONAL DATA WAS COLLECTED , UNLESS SUCH USE IS NECESSARY TO16
COMPLY WITH AN OBLIGATION UNDER THIS PART 19;17
(c) PERMIT AN INDIVIDUAL, INCLUDING A PARENT OR GUARDIAN OF18
A COVERED MINOR , TO MONITOR THE ONLINE ACTIVITY OF A COVERED19
MINOR OR TO TRACK THE LOCATION OF THE COVERED MINOR WITHOUT20
PROVIDING A CONSPICUOUS SI GNAL TO THE COVERED MINOR WHEN THE21
COVERED MINOR IS BEING MONITORED OR TRACKED;22
(d) USE THE PERSONAL DATA OF A COVERED MINOR TO SELECT ,23
RECOMMEND, OR PRIORITIZE MEDIA FOR THE COVERED MINOR, UNLESS:24
(I) T HE COVERED MINOR EXPRESSLY AND UNAMBIGUOUSLY25
REQUESTS TO RECEIVE:26
(A) M EDIA FROM A SPECIFIC ACCOUNT , FEED , OR USER OR TO27
HB26-1148-9-
RECEIVE MORE OR LESS MEDIA FROM AN ACCOUNT, FEED, OR USER; OR1
(B) A SPECIFIC CATEGORY OF MEDIA OR TO SEE MORE OR LESS OF2
A SPECIFIC CATEGORY OF MEDIA;3
(II) THE PERSONAL DATA IS USED TO SET OR RESET PRIVACY OR4
ACCESSIBILITY SETTINGS; OR5
(III) T HE PERSONAL DATA IS USED TO PRIORITIZE MEDIA IN6
RESPONSE TO A SEARCH QUERY BY THE COVERED MINOR; OR7
(e) SEND PUSH NOTIFICATIONS TO A COVERED MINOR BETWEEN 128
MIDNIGHT AND 6 A.M.9
(2) Compulsive use. O N AND AFTER DECEMBER 1, 2026, A10
COVERED BUSINESS SHALL NOT IMPLEMENT DATA PROCESSING OR DESIGN11
PRACTICES THAT LEAD TO COMPULSIVE USE OF AN ONLINE GAMING12
SERVICE, PRODUCT, OR FEATURE.13
6-1-1905. Privacy protections for age assurance data.14
(1) ON AND AFTER DECEMBER 1, 2026, WHEN CONDUCTING AGE15
ASSURANCE, A COVERED BUSINESS OR PROCESSOR SHALL:16
(a) C OLLECT ONLY THE PERSONAL DATA OF A USER THAT IS17
NECESSARY FOR THE PURPOSE OF AGE ASSURANCE;18
(b) U PON DETERMINING THAT A USER IS A COVERED MINOR ,19
IMMEDIATELY DELETE ALL DATA THAT RELATES TO THE DETERMINATION20
OF THE USER'S AGE;21
(c) NOT USE A USER'S PERSONAL DATA FOR ANY PURPOSE OTHER22
THAN AGE ASSURANCE;23
(d) N OT COMBINE A USER 'S PERSONAL DATA WITH ANY OTHER24
USER'S PERSONAL DATA , EXCEPT FOR THE PURPOSE OF AGGREGATING25
DE-IDENTIFIED DATA;26
(e) NOT DISCLOSE A USER 'S PERSONAL DATA TO A THIRD PARTY27
HB26-1148-10-
THAT IS NOT A PROCESSOR; AND1
(f) IMPLEMENT A REVIEW PROCESS TO ALLOW A USER TO APPEAL2
THE DETERMINATION OF THEIR AGE.3
6-1-1906. Transactions involving covered minors - prices to be4
listed in U.S. dollars - fees for add-on transactions.5
(1) A COVERED BUSINESS SHALL ENSURE THAT THE PURCHASE6
PRICE FOR AN ONLINE GAMING SERVICE , PRODUCT, OR FEATURE THAT IS7
MADE AVAILABLE THROUGH THE COVERED BUSINESS 'S ONLINE GAMING8
SERVICE, PRODUCT, OR FEATURE AND THAT IS REASONABLY LIKELY TO BE9
ACCESSED BY A COVERED MINOR IS LISTED IN UNITED STATES DOLLARS AT10
THE POINT OF SALE.11
(2) A COVERED BUSINESS SHALL IMPOSE AND COLLECT A FEE ON12
EACH ADD-ON TRANSACTION THAT IS CONDUCTED BY A COVERED MINOR13
THROUGH THE COVERED BUSINESS'S ONLINE GAMING SERVICE, PRODUCT,14
OR FEATURE. THE AMOUNT OF THE FEE IS FIVE PERCENT OF THE AMOUNT15
OF THE TRANSACTION . A COVERED BUSINESS SHALL TRANSFER MONEY16
COLLECTED AS FEES PURSUANT TO THIS SUBSECTION (2) TO THE STATE17
TREASURER, WHO SHALL CREDIT THE MONEY TO THE STATE PUBLIC18
SCHOOL FUND CREATED IN SECTION 22-54-114.19
6-1-1907. Enforcement - unfair or deceptive trade practice.20
A COVERED BUSINESS OR PROCESSOR THAT VIOLATES THIS PART 1921
OR RULES ADOPTED PURSUANT TO THIS PART 19 COMMITS AN UNFAIR OR22
DECEPTIVE TRADE PRACTICE AS DESCRIBED IN SECTION 6-1-105 (1)(qqqq).23
6-1-1908. Limitations and exclusions.24
(1) N OTHING IN THIS PART 19 SHALL BE INTERPRETED OR25
CONSTRUED TO:26
(a) IMPOSE LIABILITY IN A MANNER THAT IS INCONSISTENT WITH 4727
HB26-1148-11-
U.S.C. SEC. 230; OR1
(b) P REVENT OR PRECLUDE A COVERED MINOR FROM2
DELIBERATELY OR INDEPENDENTLY SEARCHING FOR , OR SPECIFICALLY3
REQUESTING, ANY MEDIA.4
(2) THIS PART 19 DOES NOT APPLY TO:5
(a) A FEDERAL, STATE, TRIBAL, OR LOCAL GOVERNMENT ENTITY IN6
THE ORDINARY COURSE OF ITS OPERATION;7
(b) PROTECTED HEALTH INFORMATION THAT A COVERED BUSINESS8
OR BUSINESS ASSOCIATE PROCESSES IN ACCORDANCE WITH , OR9
DOCUMENTS THAT A COVERED BUSINESS OR BUSINESS ASSOCIATE CREATES10
FOR THE PURPOSE OF COMPLYING WITH , THE FEDERAL "HEALTH11
INSURANCE PORTABILITY AND ACCOUNTABILITY ACT OF 1996", PUB.L.12
104-191;13
(c) I NFORMATION THAT IS USED ONLY FOR PUBLIC HEALTH14
ACTIVITIES AS DESCRIBED IN 45 CFR 164.512; OR15
(d) INFORMATION THAT IDENTIFIES A USER IN CONNECTION WITH:16
(I) ACTIVITIES THAT ARE SUBJECT TO THE "FEDERAL POLICY FOR17
THE PROTECTION OF HUMAN SUBJECTS", AS SET FORTH IN 45 CFR 46;18
(II) R ESEARCH ON HUMAN SUBJECTS UNDERTAKEN IN19
ACCORDANCE WITH GOOD CLINICAL PRACTICE GUIDELINES ISSUED BY THE20
INTERNATIONAL COUNCIL FOR HARMONISATION OF TECHNICAL21
REQUIREMENTS FOR PHARMACEUTICALS FOR HUMAN USE OR ITS22
SUCCESSOR ORGANIZATION;23
(III) ACTIVITIES THAT ARE PROTECTED UNDER 21 CFR 50 AND 56;24
(IV) R ESEARCH CONDUCTED IN ACCORDANCE WITH THE25
REQUIREMENTS SET FORTH IN SUBSECTION (2)(d)(I), (2)(d)(II), OR26
(2)(d)(III) OF THIS SECTION OR OTHERWISE IN ACCORDANCE WITH STATE27
HB26-1148-12-
OR FEDERAL LAW;1
(V) AN ENTITY WITH A PRIMARY PURPOSE OF JOURNALISM AND A2
WORKFORCE WHOSE MAJORITY CONSISTS OF INDIVIDUALS ENGAGING IN3
JOURNALISM; OR4
(VI) A FINANCIAL INSTITUTION SUBJECT TO TITLE V OF THE5
FEDERAL "GRAMM-LEACH-BLILEY ACT", PUB.L. 106-102, AND6
REGULATIONS ADOPTED TO IMPLEMENT THAT ACT.7
6-1-1909. Rights and freedoms of covered minors.8
NOTHING IN THIS PART 19 SHALL BE CONSTRUED TO INFRINGE ON9
THE RIGHTS AND FREEDOMS OF COVERED MINORS OR BE CONSTRUED TO10
DISCRIMINATE AGAINST A COVERED MINOR BASED ON RACE , ETHNICITY,11
SEX, DISABILITY , SEXUAL ORIENTATION , GENDER IDENTITY , GENDER12
EXPRESSION, RELIGION, OR NATIONAL ORIGIN.13
6-1-1910. Rules.14
THE ATTORNEY GENERAL MAY ADOPT RULES FOR THE15
IMPLEMENTATION OF THIS PART 19, INCLUDING RULES ESTABLISHING16
PERMISSIBLE METHODS BY WHICH A COVERED BUSINESS MAY DETERMINE17
THE AGE OF A COVERED MINOR.18
SECTION 2. In Colorado Revised Statutes, 6-1-105, add19
(1)(qqqq) as follows:20
6-1-105. Unfair or deceptive trade practices - definitions.21
(1) A person engages in a deceptive trade practice when, in the22
course of the person's business, vocation, or occupation, the person:23
(qqqq) VIOLATES PART 19 OF THIS ARTICLE 1.24
SECTION 3. In Colorado Revised Statutes, add 6-1-1602 and25
6-1-1603 as follows:26
6-1-1602. Transparency - privacy - disclosures regarding the27
HB26-1148-13-
use of algorithmic recommendation systems - definitions.1
(1) ON AND AFTER DECEMBER 1, 2026, A SOCIAL MEDIA PLATFORM2
SHALL PROMINENTLY AND CLEARLY PROVIDE ON ITS WEBSITE OR MOBILE3
APPLICATION:4
(a) THE SOCIAL MEDIA PLATFORM'S TERMS OF SERVICE, POLICIES,5
AND COMMUNITY STANDARDS;6
(b) THE SOCIAL MEDIA PLATFORM'S POLICIES CONCERNING USERS'7
PRIVACY;8
(c) T HE PURPOSE OF EACH ALGORITHMIC RECOMMENDATION9
SYSTEM IN USE BY THE SOCIAL MEDIA PLATFORM;10
(d) I NPUTS USED BY EACH ALGORITHMIC RECOMMENDATION11
SYSTEM IN USE BY THE SOCIAL MEDIA PLATFORM, INCLUDING HOW EACH12
INPUT:13
(I) IS MEASURED OR DETERMINED;14
(II) USES THE PERSONAL DATA OF MINOR USERS;15
(III) INFLUENCES A RECOMMENDATION ISSUED BY THE SYSTEM ;16
AND17
(IV) IS WEIGHED RELATIVE TO THE OTHER INPUTS DESCRIBED IN18
THIS SUBSECTION (1)(d); AND19
(e) FOR EVERY FEATURE OF A WEBSITE OR MOBILE APPLICATION20
THAT USES THE PERSONAL DATA OF A MINOR USER, DESCRIPTIONS OF:21
(I) THE PURPOSE OF THE WEBSITE OR MOBILE APPLICATION;22
(II) THE PERSONAL DATA COLLECTED BY THE WEBSITE OR MOBILE23
APPLICATION;24
(III) T HE PERSONAL DATA USED BY THE WEBSITE OR MOBILE25
APPLICATION;26
(IV) H OW THE PERSONAL DATA IS USED BY THE WEBSITE OR27
HB26-1148-14-
MOBILE APPLICATION;1
(V) ANY PERSONAL DATA TRANSFERRED TO OR SHARED WITH A2
PROCESSOR OR THIRD PARTY BY THE WEBSITE OR MOBILE APPLICATION ,3
THE IDENTITY OF THE PROCESSOR OR THIRD PARTY, AND THE PURPOSE OF4
THE TRANSFER OR SHARING; AND5
(VI) HOW LONG THE PERSONAL DATA IS RETAINED BY THE WEBSITE6
OR MOBILE APPLICATION.7
(2) AS USED IN THIS SECTION, UNLESS THE CONTEXT OTHERWISE8
REQUIRES:9
(a) "ALGORITHMIC RECOMMENDATION SYSTEM" MEANS A SYSTEM10
THAT USES AN ALGORITHM TO SELECT, FILTER, AND ARRANGE MEDIA ON11
A SOCIAL MEDIA PLATFORM'S WEBSITE OR MOBILE APPLICATION FOR THE12
PURPOSE OF SELECTING, RECOMMENDING, OR PRIORITIZING MEDIA FOR A13
USER.14
(b) "MINOR USER" MEANS A USER OF A SOCIAL MEDIA PLATFORM15
WHO IS UNDER EIGHTEEN YEARS OLD.16
(c) "PERSONAL DATA" HAS THE MEANING SET FORTH IN SECTION17
6-1-1303 (17).18
(d) "P ROCESSOR" HAS THE MEANING SET FORTH IN SECTION19
6-1-1303 (19).20
(e) "SOCIAL MEDIA PLATFORM" HAS THE MEANING SET FORTH IN21
SECTION 6-1-1601 (4).22
6-1-1603. Use of algorithmic recommendation systems for23
sales of illicit substances to minors prohibited - definitions.24
(1) A SOCIAL MEDIA PLATFORM SHALL NOT USE AN ALGORITHMIC25
RECOMMENDATION SYSTEM TO SELL OR OTHERWISE DISTRIBUTE AN ILLICIT26
SUBSTANCE TO A MINOR USER.27
HB26-1148-15-
(2) AS USED IN THIS SECTION, UNLESS THE CONTEXT OTHERWISE1
REQUIRES:2
(a) "ALGORITHMIC RECOMMENDATION SYSTEM" HAS THE MEANING3
SET FORTH IN SECTION 6-1-1602 (2)(a).4
(b) (I) "ILLICIT SUBSTANCE" MEANS:5
(A) A CONTROLLED SUBSTANCE , AS DEFINED IN SECTION6
18-18-102 (5);7
(B) A HEMP PRODUCT , AS DEFINED IN SECTION 25-5-427 (2)(d),8
THAT IS NOT A TINCTURE OR COSMETIC AND HAS MORE THAN ONE AND9
ONE-FOURTH MILLIGRAMS OF THC, AS DEFINED IN SECTION 44-10-20910
(2)(d), PER SERVING OR HAS A RATIO OF CANNABIDIOL TO THC OF LESS11
THAN TWENTY TO ONE; AND12
(C) A PRODUCT THAT CONTAINS HEMP THAT IS INTENDED FOR13
HUMAN CONSUMPTION AND IS NOT A COSMETIC, A DIETARY SUPPLEMENT,14
A FOOD, A FOOD ADDITIVE, OR AN HERB.15
(II) NOTWITHSTANDING SUBSECTION (2)(b)(I) OF THIS SECTION,16
"ILLICIT SUBSTANCE" DOES NOT INCLUDE:17
(A) A PRODUCT THAT MAY BE PRODUCED AND SOLD IN COLORADO18
PURSUANT TO AND IN COMPLIANCE WITH SECTION 25-5-427, ARTICLE 1019
OF TITLE 44, AND RULES ADOPTED PURSUANT TO SUCH PROVISIONS; OR20
(B) A PRODUCT THAT MAY BE PR ODUCED FOR PERSONAL USE OR21
PRODUCED AND ADMINISTERED FOR NATURAL MEDICINE SERVICES22
PURSUANT TO AND IN COMPLIANCE WITH ARTICLE 170 OF TITLE 12,23
SECTION 18-18-434, ARTICLE 50 OF TITLE 44, AND RULES ADOPTED24
PURSUANT TO SUCH PROVISIONS.25
(c) "MINOR USER" MEANS A USER OF A SOCIAL MEDIA PLATFORM26
WHO IS UNDER EIGHTEEN YEARS OLD.27
HB26-1148-16-
(d) "SOCIAL MEDIA PLATFORM" HAS THE MEANING SET FORTH IN1
SECTION 6-1-1601 (4).2
SECTION 4. In Colorado Revised Statutes, 22-54-114, amend3
(1) as follows:4
22-54-114. State public school fund.5
(1) (a) There is hereby created in the office of the state treasurer6
a fund, separate from the general fund, to be known as the state public7
school fund. There THE FOLLOWING MONEY shall be credited to said THE8
STATE PUBLIC SCHOOL fund:9
(I) The net balance of the public school income fund existing as of10
December 31, 1973, and all distributions from the state public school11
income fund thereafter made THEREAFTER;12
(II) The state's share of all moneys MONEY received from the13
federal government pursuant to the provisions of section 34-63-102;14
C.R.S.,15
(III) MONEY RECEIVED AS FEES PURSUANT TO SECTION 6-1-190616
(2); and17
(IV) Such additional moneys MONEY as shall be IS appropriated18
AS NECESSARY by the general assembly which are necessary to meet the19
state's share of the total program of all districts, funding for institute20
charter schools, and, for fiscal years prior to the 2007-08 fiscal year, the21
contingency reserve during the budget year.22
(b) Moneys M ONEY annually appropriated by the general23
assembly shall be transferred from the state general fund and credited to24
the state public sc hool fund in f our quarterly installments on July 1,25
September 30, Decem ber 31, and March 31 to assure ENSURE the26
availability of funds for the required distribution of state moneys MONEY27
HB26-1148-17-
to school districts and institute charter schools. Such T HE quarterly1
installments shall be determined in accordance with estimates prepared2
by the department of education with respect to the required distribution3
of state moneys MONEY to school districts and institute charter schools.4
SECTION 5. Act subject to petition - effective date -5
applicability. (1) This act takes effect at 12:01 a.m. on the day following6
the expiration of the ninety-day period after final adjournment of the7
general assembly (August 12, 2026, if adjournment sine die is on May 13,8
2026); except that, if a referendum petition is filed pursuant to section 19
(3) of article V of the state constitution against this act or an item, section,10
or part of this act within such period, then the act, item, section, or part11
will not take effect unless approved by the people at the general election12
to be held in November 2026 and, in such case, will take effect on the13
date of the official declaration of the vote thereon by the governor.14
(2) This act applies to conduct occurring on or after the applicable15
effective date of this act.16
HB26-1148-18-