Read the full stored bill text
Second Regular Session
Seventy-fifth General Assembly
STATE OF COLORADO
REENGROSSED
This Version Includes All Amendments
Adopted in the House of Introduction
LLS NO. 26-0433.01 Richard Sweetman x4333 SENATE BILL 26-051
Senate Committees House Committees
Business, Labor, & Technology
A BILL FOR AN ACT
CONCERNING AGE ATTESTATION FOR USERS OF COMPUTING DEVICES.101
Bill Summary
(Note: This summary applies to this bill as introduced and does
not reflect any amendments that may be subsequently adopted. If this bill
passes third reading in the house of introduction, a bill summary that
applies to the reengrossed version of this bill will be available at
http://leg.colorado.gov.)
The bill requires an operating system provider to:
! Provide an accessible interface at account setup that
requires an account holder to indicate the birth date or age
of the user of that device to provide a signal regarding the
user's age bracket (age signal) to applications available in
a covered application store;
! Provide an application developer (developer) that requests
an age signal, with respect to a particular user, the technical
SENATE
3rd Reading Unamended
March 3, 2026
SENATE
Amended 2nd Reading
March 2, 2026
SENATE SPONSORSHIP
Ball and Liston, Hinrichsen
HOUSE SPONSORSHIP
Paschal and Ricks,
Shading denotes HOUSE amendment. Double underlining denotes SENATE amendment.
Capital letters or bold & italic numbers indicate new material to be added to existing law.
Dashes through the words or numbers indicate deletions from existing law.
ability to call an age signal via a reasonably consistent
real-time application programming interface that identifies,
at a minimum, the user's age-bracket data; and
! Send only the minimum amount of information necessary
to comply with the bill. An operating system provider shall
not share an age signal with a third party for a purpose not
required by the bill.
The bill requires a developer to request an age signal with respect
to a particular user from an operating system provider or a covered
application store when the developer's application is downloaded and
launched. A developer that receives an age signal is deemed to have
knowledge of the age range of the user to whom that age signal pertains
across all platforms of the application and points of access of the
application. However, if a developer has clear and convincing
information that a user's age is different than the age indicated by an age
signal, the developer shall use that information as the primary indicator
of the user's age range.
A developer shall not:
!Request more information from an operating system
provider or a covered application store than is necessary to
comply with the bill; or
! Share an age signal with a third party for a purpose not
required by the bill.
A person that violates the bill must pay a civil penalty of not more
than $2,500 for each minor affected by each negligent violation or not
more than $7,500 for each minor affected by each intentional violation.
The penalty is assessed and recovered in a civil action brought by the
attorney general.
Be it enacted by the General Assembly of the State of Colorado:1
SECTION 1. In Colorado Revised Statutes, add article 30 to title2
6 as follows:3
ARTICLE 304
Age Attestation for Online Users5
6-30-101. Definitions.6
AS USED IN THIS ARTICLE 30, UNLESS THE CONTEXT OTHERWISE7
REQUIRES:8
(1) (a) "ACCOUNT HOLDER" MEANS AN INDIVIDUAL IN THE STATE9
051-2-
WHO IS AT LEAST EIGHTEEN YEARS OLD , OR THE PARENT OR LEGAL1
GUARDIAN OF A USER WHO IS UNDER EIGHTEEN YEARS OLD , AND WHO2
ESTABLISHES AN ACCOUNT ON A DEVICE.3
(b) "ACCOUNT HOLDER" DOES NOT INCLUDE:4
(I) A PARENT OF AN EMANCIPATED MINOR WHO IS A USER OF A5
DEVICE; OR6
(II) A PARENT OR LEGAL GUARDIAN OF A MINOR WHO IS A USER OF7
A DEVICE IF THE PARENT OR LEGAL GUARDIAN IS NOT ASSOCIATED WITH8
THE MINOR'S DEVICE.9
(2) "AGE-BRACKET DATA" MEANS NONPERSONALLY IDENTIFIABLE10
DATA DERIVED FROM A USER'S BIRTH DATE OR AGE FOR THE PURPOSE OF11
SHARING WITH DEVELOPERS , WHICH DATA INDICATES THE USER 'S AGE12
RANGE , INCLUDING, AT A MINIMUM, DATA THAT INDICATES WHETHER A13
USER IS:14
(a) UNDER THIRTEEN YEARS OLD;15
(b) THIRTEEN YEARS OLD OR OLDER BUT UNDER SIXTEEN YEARS16
OLD;17
(c) SIXTEEN YEARS OLD OR OLDER BUT UNDER EIGHTEEN YEARS18
OLD; OR19
(d) EIGHTEEN YEARS OLD OR OLDER.20
(3) "A GE SIGNAL " MEANS AGE -BRACKET DATA SENT BY A21
REAL-TIME SECURE APPLICATION PROGRAMMING INTERFACE OR22
OPERATING SYSTEM TO AN APPLICATION.23
(4) "APPLICATION" MEANS A SOFTWARE APPLICATION THAT MAY24
BE RUN OR DIRECTED BY A USER ON A DEVICE.25
(5) (a) "C OVERED APPLICATION STORE " MEANS A PUBLICLY26
AVAILABLE INTERNET WEBSITE, SOFTWARE APPLICATION, ONLINE SERVICE,27
051-3-
OR PLATFORM THAT DISTRIBUTES AND FACILITATES THE DOWNLOAD OF1
APPLICATIONS FROM THIRD-PARTY DEVELOPERS TO USERS OF DEVICES.2
(b) "COVERED APPLICATION STORE" DOES NOT INCLUDE AN ONLINE3
SERVICE OR PLATFORM THAT DISTRIBUTES ANY OF THE FOLLOWING4
APPLICATIONS IF THE APPLICATION RUNS EXCLUSIVELY WITHIN A5
SEPARATE HOST APPLICATION:6
(I) EXTENSIONS;7
(II) PLUG-INS;8
(III) ADD-ONS; OR9
(IV) OTHER SOFTWARE APPLICATIONS.10
(6) "D EVELOPER" MEANS A PERSON THAT WRITES , CREATES ,11
MAINTAINS, OR CONTROLS AN APPLICATION.12
(7) "DEVICE" MEANS ANY GENERAL-PURPOSE COMPUTING DEVICE13
THAT CAN ACCESS A COVERED APPLICATION STORE OR DOWNLOAD AN14
APPLICATION.15
(8) "M INOR" MEANS AN INDIVIDUAL WHO IS UNDER EIGHTEEN16
YEARS OLD.17
(9) "O PERATING SYSTEM PROVIDER " MEANS A PERSON THAT18
DEVELOPS, LICENSES, OR CONTROLS THE OPERATING SYSTEM SOFTWARE19
ON A DEVICE.20
(10) "U SER" MEANS A MINOR WHO IS THE PRIMARY USER OF A21
DEVICE.22
6-30-102. Requirements for operating system providers and23
developers.24
(1) AN OPERATING SYSTEM PROVIDER SHALL DO THE FOLLOWING:25
(a) PROVIDE AN ACCESSIBLE INTERFACE AT ACCOUNT SETUP THAT26
REQUIRES AN ACCOUNT HOLDER TO INDICATE THE BIRTH DATE OR AGE OF27
051-4-
THE USER OF THAT DEVICE FOR THE PURPOSE OF PROVIDING AN AGE1
SIGNAL TO APPLICATIONS AVAILABLE IN A COVERED APPLICATION STORE;2
(b) PROVIDE A DEVELOPER THAT REQUESTS AN AGE SIGNAL, WITH3
RESPECT TO A PARTICULAR USER, THE TECHNICAL ABILITY TO CALL AN AGE4
SIGNAL VIA A REASONABLY CONSISTENT REAL -TIME APPLICATION5
PROGRAMMING INTERFACE; AND6
(c) S END ONLY THE MINIMUM AMOUNT OF INFORMATION7
NECESSARY TO COMPLY WITH THIS ARTICLE 30. AN OPERATING SYSTEM8
PROVIDER SHALL NOT SHARE AN AGE SIGNAL WITH A THIRD PARTY FOR A9
PURPOSE NOT REQUIRED BY THIS ARTICLE 30.10
(2) (a) A DEVELOPER SHALL REQUEST AN AGE SIGNAL WITH11
RESPECT TO A PARTICULAR USER FROM AN OPERATING SYSTEM PROVIDER12
OR A COVERED APPLICATION STORE WHEN THE DEVELOPER'S APPLICATION13
IS DOWNLOADED AND LAUNCHED.14
(b) (I) A DEVELOPER THAT WILLFULLY DISREGARDS AN AGE15
SIGNAL IS DEEMED TO HAVE KNOWLEDGE OF THE AGE RANGE OF THE USER16
TO WHOM THE SIGNAL PERTAINS ACROSS ALL PLATFORMS OF THE17
APPLICATION AND POINTS OF ACCESS OF THE APPLICATION.18
(II) A DEVELOPER SHALL NOT WILLFULLY DISREGARD CLEAR AND19
CONVINCING INFORMATION THAT INDICATES THAT A USER 'S AGE IS20
DIFFERENT THAN THE AGE-BRACKET DATA INDICATED BY AN AGE SIGNAL21
PROVIDED BY AN OPERATING SYSTEM PROVIDER OR BY A COVERED22
APPLICATION STORE.23
(c) (I) E XCEPT AS PROVIDED IN SUBSECTIONS (2)(b)(II) AND24
(2)(c)(II) OF THIS SECTION , A DEVELOPER SHALL TREAT AN AGE SIGNAL25
RECEIVED PURSUANT TO THIS ARTICLE 30 AS THE PRIMARY INDICATOR OF26
A USER'S AGE RANGE.27
051-5-
(II) IF A DEVELOPER HAS CLEAR AND CONVINCING INFORMATION1
THAT A USER 'S AGE IS DIFFERENT THAN THE AGE INDICATED BY AN AGE2
SIGNAL RECEIVED PURSUANT TO THIS ARTICLE 30, THE DEVELOPER SHALL3
USE THAT INFORMATION AS THE PRIMARY INDICATOR OF THE USER'S AGE.4
(d) A DEVELOPER THAT RECEIVES AN AGE SIGNAL PURSUANT TO5
THIS ARTICLE 30 SHALL USE THE AGE SIGNAL TO COMPLY WITH APPLICABLE6
LAW.7
(e) A DEVELOPER THAT RECEIVES AN AGE SIGNAL PURS UANT TO8
THIS ARTICLE 30 SHALL NOT:9
(I) REQUEST MORE INFORMATION CONCERNING THE USER FROM AN10
OPERATING SYSTEM PROVIDER OR A COVERED APPLICATION STORE THAN11
THE MINIMUM AMOUNT OF INFORMATION NECESSARY TO COMPLY WITH12
THIS ARTICLE 30; OR13
(II) C OMMUNICATE THE AGE SIGNAL TO A THIRD PARTY FOR A14
PURPOSE NOT REQUIRED BY THIS ARTICLE 30.15
6-30-103. Applicability to existing devices.16
(1) WITH RESPECT TO A DEVICE FOR WHICH ACCOUNT SETUP WAS17
COMPLETED BEFORE JANUARY 1, 2028, AN OPERATING SYSTEM PROVIDER18
SHALL PROVIDE, BEFORE JULY 1, 2028, AN ACCESSIBLE INTERFACE THAT19
ALLOWS AN ACCOUNT HOLDER TO INDICATE THE BIRTH DATE OR AGE OF20
THE USER OF THAT DEVICE FOR THE PURPOSE OF PROVIDING AN AGE21
SIGNAL REGARDING THE USER 'S AGE -BRACKET DATA TO APPLICATIONS22
AVAILABLE IN A COVERED APPLICATION STORE.23
(2) IF AN APPLICATION LAST UPDATED ON OR AFTER JANUARY 1,24
2027, WAS DOWNLOADED TO A DEVICE BEFORE JANUARY 1, 2028, AND THE25
DEVELOPER HAS NOT REQUESTED AN AGE SIGNAL WITH RESPECT TO THE26
USER OF THE DEVICE ON WHICH THE APPLICATION WAS DOWNLOADED, THE27
051-6-
DEVELOPER SHALL REQUEST AN AGE SIGNAL FROM A COVERED1
APPLICATION STORE WITH RESPECT TO THAT USER BEFORE JULY 1, 2028.2
6-30-104. Enforcement - penalties.3
(1) A PERSON THAT VIOLATES THIS ARTICLE 30 SHALL PAY A CIVIL4
PENALTY OF NO MORE THAN TWO THOUSAND FIVE HUNDRED DOLLARS FOR5
EACH MINOR AFFECTED BY EACH NEGLIGENT VIOLATION , OR NO MORE6
THAN SEVEN THOUSAND FIVE HUNDRED DOLLARS FOR EACH MINOR7
AFFECTED BY EACH INTENTIONAL VIOLATION . THE ATTORNEY GENERAL8
SHALL ASSESS AND RECOVER THE PENALTY IN A CIVIL ACTION.9
(2) I F AN OPERATING SYSTEM PROVIDER OR A COVERED10
APPLICATION STORE MAKES A GOOD FAITH EFFORT TO COMPLY WITH THIS11
ARTICLE 30, TAKING INTO CONSIDERATION AVAILABLE TECHNOLOGY AND12
ANY REASONABLE TECHNICAL LIMITATIONS OR OUTAGES, THE OPERATING13
SYSTEM PROVIDER OR COVERED APPLICATION STORE IS NOT LIABLE FOR AN14
ERRONEOUS AGE SIGNAL INDICATING A USER 'S AGE RANGE OR FOR15
CONDUCT BY A DEVELOPER THAT RECEIVES AN AGE SIGNAL INDICATING A16
USER'S AGE RANGE.17
6-30-105. Applicability - limitations.18
(1) THIS ARTICLE 30 DOES NOT MODIFY , IMPAIR, OR SUPERSEDE19
ANY ANTITRUST LAW, INCLUDING THE "COLORADO STATE ANTITRUST ACT20
OF 2023", ARTICLE 4 OF THIS TITLE 6.21
(2) T HIS ARTICLE 30 DOES NOT REQUIRE THE COLLECTION OF22
ADDITIONAL PERSONAL INFORMATION FROM DEVICE OWNERS OR DEVICE23
USERS THAT IS NOT NECESSARY TO COMPLY WITH THIS ARTICLE 30.24
(3) AN OPERATING SYSTEM PROVIDER OR A COVERED APPLICATION25
STORE SHALL COMPLY WITH THIS ARTICLE 30 IN A NONDISCRIMINATORY26
MANNER, INCLUDING BY:27
051-7-
(a) IMPOSING AT LEAST THE SAME RESTRICTIONS AND OBLIGATIONS1
ON ITS OWN APPLICATIONS AND APPLICATION DISTRIBUTION AS IT DOES ON2
THOSE FROM THIRD-PARTY APPLICATIONS OR APPLICATION DISTRIBUTORS,3
RESPECTIVELY; AND4
(b) NOT USING NONPUBLICLY AVAILABLE DATA COLLECTED FROM5
A THIRD PARTY IN THE COURSE OF COMPLIANCE WITH THIS ARTICLE 30 TO6
COMPETE AGAINST THAT THIRD PARTY, GIVE THE COVERED APPLICATION7
STORE'S SERVICES PREFERENCE RELATIVE TO THOSE OF A THIRD PARTY, OR8
USE THE NONPUBLICLY AVAILABLE DATA IN AN ANTICOMPETITIVE MANNER9
IN VIOLATION OF APPLICABLE LAW.10
(4) THIS ARTICLE 30 DOES NOT APPLY TO:11
(a) A BROADBAND INTERNET ACCESS SERVICE , AS DEFINED IN12
SECTION 40-15-209 (4)(a);13
(b) A TELECOMMUNICATIONS SERVICE, AS DEFINED IN 47 U.S.C.14
SEC. 153 (53); 15
(c) THE DELIVERY OF OR USE OF A PHYSICAL PRODUCT; OR16
(d) D ATA MAINTAINED BY A STATE INSTITUTION OF HIGHER17
EDUCATION, AS DEFINED IN SECTION 23-18-102 (10), THE STATE , THE18
JUDICIAL DEPARTMENT OF THE STATE, OR A COUNTY, CITY AND COUNTY,19
OR MUNICIPALITY IF THE DATA IS COLLECTED , MAINTAINED, DISCLOSED,20
COMMUNICATED, AND USED AS AUTHORIZED BY STATE AND FEDERAL LAW21
FOR NONCOMMERCIAL PURPOSES.22
(5) T HIS ARTICLE 30 DOES NOT IMPOSE LIABILITY THAT ARISES23
FROM THE USE OF A DEVICE OR APPLICATION BY AN INDIVIDUAL WHO IS24
NOT THE USER TO WHOM AN AGE SIGNAL PERTAINS ON AN OPERATING25
SYSTEM PROVIDER, A COVERED APPLICATION STORE, OR A DEVELOPER.26
(6) NOTWITHSTANDING ANY PROVISION OF THIS ARTICLE 30 TO THE27
051-8-
CONTRARY, THIS ARTICLE 30 DOES NOT APPLY TO A DEVELOPER IF THE1
PREDOMINANT OR EXCLUSIVE FUNCTION OF THE APPLICATION THAT THE2
DEVELOPER WRITES, CREATES, MAINTAINS, OR CONTROLS IS:3
(a) F ACILITATING COMMUNICATION WITHIN A BUSINESS OR AN4
ENTERPRISE AMONG EMPLOYEES OR AFFILIATES OF THE BUSINESS OR5
ENTERPRISE, SO LONG AS ACCESS TO THE APPLICATION IS RESTRICTED TO6
EMPLOYEES OR AFFILIATES OF THE BUSINESS OR ENTERPRISE;7
(b) S ELLING ENTERPRISE SOFTWARE TO BUSINESSES ,8
GOVERNMENTS, OR NONPROFIT ORGANIZATIONS; OR9
(c) P ROVIDING OR OBTAINING TECHNICAL SUPPORT FOR A10
SOFTWARE PLATFORM, PRODUCT, OR SERVICE.11
SECTION 2. Act subject to petition - effective date. This act12
takes effect January 1, 2028; except that, if a referendum petition is filed13
pursuant to section 1 (3) of article V of the state constitution against this14
act or an item, section, or part of this act within the ninety-day period15
after final adjournment of the general assembly, then the act, item,16
section, or part will not take effect unless approved by the people at the17
general election to be held in November 2026 and, in such case, will take18
effect January 1, 2028.19
051-9-