Age Attestation on Computing Devices

Summary

Starting July 1 2028, Colorado will force device OS providers and covered app stores to collect a user’s birth date or age bracket at account creation and transmit that limited age data to apps via a secure API. Apps must use this signal as the primary way to determine a user’s age and may not request additional personal data or share the signal with third parties. The law adds penalties for non‑compliance and exempts certain services and enterprise‑only software.

AI-generated summary — may be incomplete or inaccurate. Verify against the official bill text.

Topics

Share