Introduced on April 13, 2026, by Rep. Josh Gottheimer (D-NJ) with bipartisan support including Rep. Elise Stefanik (R-NY), H.R. 8250 requires operating system providers (Apple, Google, Microsoft, Samsung, etc.) to verify the age of every user before they can set up an account or use the OS on phones, computers, or other general-purpose devices.

What the Bill Actually Does

Every user must provide their date of birth at OS setup.

If under 18, a parent/guardian must verify it.

OS providers must build an API/system so every app on the device can query and verify the user's age.

Enforced by the FTC with regulations to be written later.

It does not explicitly mandate government ID or biometrics in the text, but in practice, reliable age verification at this scale almost always leads to ID upload, facial age estimation, or device-linked profiles. This shifts the burden from individual apps/websites to the foundational layer of computing — effectively creating a national digital identity checkpoint for using any modern device.

This is exactly the overreach critics described: it's not just for "apps" — it's for the entire operating system. In the "land of the once free," this represents a profound shift away from anonymous or pseudonymous computing toward a verified-identity default.

The Pattern: "Think of the Children" as the Universal Justification

This mirrors Australia's aggressive online safety regime under the Online Safety Act and eSafety Commissioner:

Social media ban for under-16s (effective Dec 2025) → Platforms must take "reasonable steps" including age assurance.

Industry codes forcing age checks on search engines, gaming, apps, and more.

Pressure toward ID-based verification (driver's licence, etc.), even if not strictly mandated as the only method.

Both countries use genuine harms — child exploitation, mental health crises, pornography exposure — as the emotional battering ram. Real problems exist. But the solutions centralise power, erode privacy for everyone (adults included), and create permanent infrastructure for surveillance and control. Once built, this OS-level age gateway won't stay limited to "protecting kiddies." It becomes the foundation for broader content filtering, behavioural monitoring, and compliance with future government demands.

Critique: Why This is Dangerous and Counterproductive

1.Creates a De Facto Digital ID. Backbone Operating systems become identity brokers. Your device knows (and shares) your verified age everywhere. This is the infrastructure for social credit-style systems, censorship, and loss of anonymity. Anonymous speech, whistleblowing, and private research become much harder.

2.Privacy and Security Nightmare Centralising sensitive age (and parental link) data with Big Tech (or whoever they partner with) creates a massive honeypot for breaches. It also enables function creep — today age, tomorrow political views, health data, or "behaviour scores."

3.Technical and Practical Absurdity

oOpen-source OSes (Linux distros) become non-compliant or heavily burdened.

oLegacy devices, enterprise systems, and custom setups face chaos.

oEnforcement on global companies selling in the US will ripple worldwide.

4.Ineffective at Solving the Real Problem Determined kids (and bad actors) will circumvent via VPNs, shared devices, jailbreaks, or parental workarounds. Meanwhile, it normalises surveillance for all. Australia's experience shows age verification ramps up quickly but doesn't magically fix online harms.

5.Slippery Slope in the "Free World" This is classic mission creep. Start with "protect kids," end up with mandatory digital ID for internet access. Europe, Australia, and US states are all heading the same direction. The bipartisan nature (Dem + Republican sponsor) shows how child safety rhetoric unites authoritarians across the spectrum.

The Bigger Picture

In both the US and Australia, governments have failed at direct parenting, education, and cultural renewal — so they outsource responsibility to tech companies while building the surveillance tools to enforce compliance. The result: less freedom for adults, illusory gains for children, and a more controlled digital public square.

The "Parents Decide Act" doesn't let parents decide — it lets governments and corporations decide the default identity layer for computing itself. In the land of the once free, this is how liberty dies: with a tearful press conference about protecting children.