Every adult who owns a smartphone in Florida would be required to prove their age to their phone’s operating system under a proposal unveiled Thursday by Attorney General James Uthmeier — a mandate that critics say is not a minor-protection gate but a universal identity-collection infrastructure embedded deeper into daily digital life than any age-verification law yet enacted in the United States.

The Safe Screens Act, announced at Polk State College in Winter Haven with Polk County Sheriff Grady Judd and local education leaders on stage, would impose age-verification requirements across three distinct layers of the digital stack: app stores operated by Apple and Google, the operating systems those stores run on, and AI chatbot platforms. The proposal follows Eleventh Circuit’s October 14 ruling that Florida’s existing HB 3 social media law is likely constitutional — a legal tailwind Uthmeier moved to capitalize on within days.

The bill has no legislative sponsor yet and faces an uncertain path to the 2027 session, which is not scheduled to begin until March 2. But its scope marks a significant escalation: where prior state laws targeted individual platforms, the Safe Screens Act targets the infrastructure every app on every phone depends on.

What the Safe Screens Act Would Require

The proposal reaches beyond the app store into the phone itself. App stores — primarily Apple’s App Store and Google Play — would be required to determine the age of every user, link minor accounts to a parent’s account, and obtain explicit parental consent before a minor can download or purchase any app. Device operating systems would be required to apply age-appropriate restrictions at the device level based on verified user age, embedding age-tiering directly into the platform layer below every application. AI chatbot operators would be required to determine the age of every account holder before providing access, per the Safe Screens Act press release.

Beyond the age gates, the proposal contains detailed behavioral mandates for teen accounts aged 14 to 17. Social media accounts for that age group would be placed in mandatory “quiet mode” blocking access between 11 p.m. and 7 a.m. and again between 8 a.m. and 3 p.m. on school weekdays — with the proposal explicitly noting that “muting notifications is not enough.” Screen time would be capped at two hours per day and 60 hours per month, inclusive of messaging and long-form video. Platforms would be required to hide like counts, disable autoplay and infinite scroll by default, and turn off cosmetic filters. Teen accounts could not be recommended to unconnected adults, and unconnected adults could not send them direct messages. Every three days, teen users would receive a prompt to switch to a non-personalized content feed they could not simply dismiss.

For AI chatbots specifically, the proposal would bar platforms from offering minors features that simulate companionship through personification or emotional engagement, facilitate unsupervised therapy, deliver sexual content, suggest the chatbot is a real person, or encourage users to isolate themselves from trusted adults.

Reports of child sexual abuse material would require human review within 48 hours, with a one-strike rule for adult offenders. The Attorney General’s office would maintain a public-facing violations database.

Penalties for knowing or reckless violations would be treated as unfair practices under Florida Statutes section 501.1736, carrying fines of up to $50,000 per violation.

Uthmeier specified that all age determinations must use “commercially reasonable, privacy-protective methods,” but the proposal names no specific verification technique — a deliberate gap that has characterized most state age-check laws to date.

Why OS-Level Verification Is Structurally Different From App Checks

The proposal’s most technically consequential element is the operating system mandate, and it is different in kind, not merely in degree, from the platform-level age checks most prior laws require.

To identify who is a minor, an operating system must first classify every user by age. There is no engineering shortcut: an OS-level age API works by collecting a birthdate at device setup, assigning the user to an age bracket (under 13, 13–15, 16–17, or 18-plus), and exposing that bracket to every app that requests it. The result is that every adult in Florida who owns an Apple or Google device would register their birthdate with that company as a condition of OS compliance — not to access any particular content, but to use their phone at all.

California’s Digital Age Assurance Act, signed by Gov. Gavin Newsom in October 2025, provides the closest enacted model: it requires OS vendors to collect birthdates at account setup and expose age-bracket signals to developers, who then receive “actual knowledge” of a user’s age range the moment they call the API. That “actual knowledge” standard is not theoretical. Under both COPPA and Florida’s own enforcement statutes, receiving an age signal that a user is under 13 — or receiving no signal at all — can trigger liability for any app that then fails to apply age-appropriate restrictions. The result is a compounding incentive: developers who receive the signal will apply restrictive defaults to avoid liability; developers who receive no signal will apply the same defaults for the same reason.

The Electronic Frontier Foundation, analyzing California’s analogous law, warned that OS-level systems “expand the collection of sensitive demographic data on a mass scale” and that the age-bracket signal creates a de facto mandate for developers to over-restrict regardless of the actual legal requirement. A letter signed by 400 computer scientists argued that comparable OS-level requirements “would build surveillance infrastructure without effectively keeping minors away from restricted content.”

The Computer and Communications Industry Association, reacting to the Eleventh Circuit’s HB 3 ruling the week before Uthmeier’s announcement, warned the decision “risks imposing identity authentication on Floridian internet users of all ages.” NetChoice’s co-director of litigation Paul Taske argued the ruling would allow Florida “to enforce its law imposing digital ID requirements as a condition for accessing lawful speech online.”

The Safe Screens Act does not specify whether privacy-preserving alternatives — such as zero-knowledge proofs, which can confirm a user’s age without transmitting identity data to the OS vendor or any third party — would satisfy its “commercially reasonable, privacy-protective methods” standard. No major OS currently deploys zero-knowledge proof verification at scale.

When Age Verification Goes Wrong: A Record of Breaches

The proposal arrives against a documented record of security failures at age verification vendors — the very companies that would be positioned to provide “commercially reasonable” compliance infrastructure under any enacted law.

In June 2024, AU10TIX — an identity verification company whose clients included TikTok, X (formerly Twitter), and Uber — suffered a data breach exposing admin credentials for over a year, compromising driver’s licenses and other government-issued documents belonging to users who had submitted them for age or identity verification. The company operates at a scale of tens of millions of users.

In October 2025, a hack of an age verification firm used by Discord exposed approximately 70,000 government IDs that users had submitted as part of an age-check process. The affected documents included passports and driver’s licenses.

The Safe Screens Act does not name any specific vendors or require independent security audits as a condition of compliance. Florida AG Uthmeier’s proposal frames the privacy obligation as a performance standard for companies to meet — without specifying how compliance would be independently verified or what recourse users would have after a breach.

A Campaign Built on Lawsuits

The Safe Screens Act is the latest escalation in a sustained technology enforcement campaign Uthmeier has waged since taking office in February 2025.

His office served subpoenas to Roblox in 2025 over the platform’s marketing to children, age verification practices, and chat moderation. In June 2026, Florida filed suit against OpenAI and CEO Sam Altman, alleging deceptive trade practices, negligence, product-liability violations, and public-nuisance claims over ChatGPT’s lack of meaningful age screening — arguing that the free version of the chatbot has no gatekeeping or age verification mechanism.

On September 8, Uthmeier proposed criminal AI legislation that would create criminal penalties for AI companies whose chatbots facilitate crimes, including fines, court-ordered monitorships, and suspension of business licenses upon conviction. On September 28, he filed a temporary injunction motion to block Florida minors from accessing ChatGPT while the lawsuit proceeds; as of the time of publication, that motion remains pending.

On June 15, Florida filed suit against TikTok for HB 3 violations, alleging the platform allowed children under 14 to create accounts and registered users aged 15 to 16 without parental consent. On October 8, Florida asked a Pasco County court to order Meta to check the ages of its Florida users — the state had opted out of Meta’s settlement, the only state to reject its share of that agreement.

On October 15 — one week before unveiling the Safe Screens Act — Uthmeier filed suit against Discord in the 20th Judicial Circuit, citing eight incidents of alleged sexual exploitation of minors on the platform between 2022 and 2026 involving Florida victims or perpetrators. The complaint alleged that Discord failed to implement adequate age verification and misrepresented its safety to parents. Florida is seeking up to $150,000 per violation where Discord allegedly knew a user was underage. Discord disputed the allegations, citing a zero-tolerance policy for child exploitation.

“Again and again, their trail to our kids leads back to Discord,” Uthmeier said at the press conference announcing that suit. “We’ve arrested more than 2,100 child predators in this state since I took office,” he added.

Riding a Legal Tailwind

The timing of Thursday’s proposal was deliberate. Nine days before the Safe Screens Act announcement, a three-judge panel of the U.S. Court of Appeals for the Eleventh Circuit ruled that HB 3 — Florida’s 2024 law banning children under 14 from social media and requiring parental consent for 14- and 15-year-olds — is likely constitutional and cleared the way for enforcement to continue while the legal challenge from the Computer & Communications Industry Association and NetChoice proceeds.

Writing for the unanimous panel, Judge Kevin Newsom concluded the law “regulates social-media platforms based on their functional capabilities and features, not the content they communicate,” and therefore triggered intermediate rather than strict First Amendment scrutiny. The law, the court held, operates not as “an outright prohibition of platform usage but rather as a ‘conditional ban’ of sorts.”

That framing — content-neutral functional regulation, intermediate scrutiny — is the constitutional template the Safe Screens Act is designed to follow. Where HB 3 targeted addictive features on social media platforms, the Safe Screens Act extends the same functional-regulation logic to the OS layer: it does not tell operating systems what speech to carry, but mandates how they must process users by age. Whether courts would apply the same intermediate scrutiny to a law that reaches the infrastructure below every app — rather than individual platforms — is an open question that has not been tested.

The Safe Screens Act’s legal architecture also draws on the Supreme Court’s 2025 ruling in Free Speech Coalition v. Paxton, which upheld a Texas law requiring age verification on sexually explicit websites under intermediate (not strict) scrutiny, departing from the strict scrutiny standard the Court had applied to prior internet content laws in Reno v. ACLU (1997) and Ashcroft v. ACLU (2004). That ruling removed what had been the strongest constitutional barrier to state age-verification mandates.

“Florida already prohibits social media accounts for anyone under 14, and the Eleventh Circuit just upheld that law,” Uthmeier said at the Safe Screens Act announcement. “The Safe Screens Act goes further.”

The Legislative Road Ahead

There is meaningful distance between an announcement and an enacted law. As Florida’s Attorney General, Uthmeier cannot introduce legislation directly — that requires a sponsor in the Florida House or Senate, and no sponsor has come forward. Florida’s 2027 legislative session does not begin until March 2.

The legislative track record suggests a complicated path. During the 2026 session, the Florida App Store Accountability Act (SB 1722) — which would have required Apple and Google to verify users’ ages before app downloads — was reported favorably out of committee before dying in Senate Judiciary on March 13, 2026. Multiple companion AI chatbot age-verification bills were similarly introduced and debated in the same session before failing to pass. The Safe Screens Act combines the ambitions of those separate proposals into a single, broader mandate — a structure that could prove easier to advance as a unified package or harder to pass given the combined scope of opposition from platform companies and civil liberties organizations.

Rep. Jennifer Kincart Jonsson (R-Lakeland) offered a supportive signal at Thursday’s event, saying, “Technology is changing faster than ever and we have a responsibility to make sure our laws keep up.” Polk County Sheriff Judd, praising the proposal at the announcement, said it “takes the power and determination of an Attorney General to keep large social media and gaming companies from exploiting and endangering our children.” But neither Jonsson nor any other legislator has committed to sponsoring the bill.

A Political Moment

The announcement carried sharp electoral timing. Uthmeier faces reelection on November 3 — nine days from the Safe Screens Act announcement — against Democratic challenger and former state Sen. Jose Javier Rodriguez, who responded pointedly. “Florida families deserve an Attorney General who understands that protecting children matters more than political headlines,” Rodriguez said.

Whether the string of platform lawsuits and the new legislative proposal consolidate Uthmeier’s image as a forceful protector of children — or whether Rodriguez’s framing of the campaign as political theater resonates with voters — will be tested at the polls.

For the technology industry, the more consequential test comes later. If the Safe Screens Act advances in the 2027 session with a legislative sponsor, Apple and Google would face the most structurally invasive age-verification requirement in the country: not a mandate to check ages at the application layer, where users can move between platforms, but a mandate to verify every user’s age at the layer every app depends on.

Frequently Asked Questions

What is the Florida Safe Screens Act, and who would it actually affect?

The Safe Screens Act is a legislative proposal by Florida Attorney General James Uthmeier, unveiled on October 22, 2026, that would require mandatory age verification at three layers of the digital stack: app stores (Apple, Google), device operating systems (iOS, Android), and AI chatbot platforms.

Despite its child-safety framing, the law’s operative burden falls on every Florida smartphone user of any age: to determine which users are minors, the operating system must first collect and classify the age of every user. That means every adult with an iPhone or Android phone in Florida would be required to register their birthdate with Apple or Google as a condition of OS compliance — not to access any specific content, but as a structural requirement of the underlying system. The bill has no legislative sponsor as of publication and awaits the 2027 session.

How does OS-level age verification work, and why is it different from a platform’s own age check?

When an operating system implements age verification, it collects users’ birthdates at device setup and stores them centrally. It then exposes an age-bracket signal — under 13, 13–15, 16–17, or 18-plus — to any app that requests it, using an API. Once an app receives that signal, it has “actual knowledge” of the user’s age range under COPPA and state privacy laws, which triggers liability if it does not apply age-appropriate restrictions. The result is a cascade: every app on the device faces pressure to apply restrictive defaults for anyone who appears to be under 18. This is structurally different from a platform’s own age check, which a user can bypass by switching apps. The OS layer sits below every app on the phone and cannot be opted out of without replacing the operating system entirely.

What happened when age verification companies were trusted with government IDs before?

The record is not reassuring. In June 2024, AU10TIX — an identity verification company used by TikTok, X (formerly Twitter), and Uber — suffered a data breach in which administrative credentials had been exposed online for over a year, compromising driver’s licenses and other government-issued documents from users who had submitted them for verification. In October 2025, a hack of an age verification firm used by Discord exposed 70,000 government identification documents, including passports and driver’s licenses. The Safe Screens Act specifies that verification must use “commercially reasonable, privacy-protective methods” but does not name any specific technology, require independent security audits of vendors, or specify what happens to users’ data after age is confirmed.

What legal authority does Uthmeier have to bring all these tech lawsuits, and what has happened so far?

Florida’s AG has broad authority to pursue consumer-protection claims under Florida’s Deceptive and Unfair Trade Practices Act (FDUTPA) and related statutes. Uthmeier has used that authority to file suits against OpenAI and CEO Sam Altman (June 2026, over ChatGPT’s lack of age screening), sued TikTok for HB 3 violations (June 2026, over HB 3 violations), Meta (October 8, 2026, seeking a court-ordered age check and rejecting the multistate $18 billion settlement), and sued Discord in October 2026 (October 15, 2026, citing eight exploitation incidents involving Florida minors or perpetrators). A motion for a temporary injunction to block Florida minors from accessing ChatGPT, filed September 28, remains pending. None of these cases has produced a final judgment. The suits are ongoing.