Electronic Frontier Foundation legal advisor Aaron Mackey warned that operating systems could require users to verify their age with identity documents starting in 2027. The requirement stems from California's Digital Age Guarantee Law, which takes effect on January 1, 2027.
The law applies to major operating systems including Windows, macOS, Android, ChromeOS, and Linux across smartphones, tablets, and desktop computers. During initial setup, the system will prompt users to state their age and will subsequently share only an age bracket with installed applications. These age ranges divide users into categories for under 13, between 13 and 16, between 16 and 18, or legal adults, allowing apps to enforce legal restrictions.
On paper, the California legislation does not mandate the submission of official identification documents, allowing users to simply declare their age. However, Mackey explained that actual compliance by technology companies will closely resemble strict age verification in practice.
Strict Verification Methods
To avoid legal liability if a minor inputs a false age, major developers such as Apple, Google, and Microsoft are expected to adopt rigorous verification mechanisms. Mackey noted that companies may implement intrusive verification methods similar to those used by adult websites.
These measures could include uploading an official identity card, supplying credit card details, or completing facial recognition scans during initial device setup. Apple and Google already possess digital wallet technologies capable of sharing identity data securely, while Microsoft is developing comparable tools for Windows.
Global Impact Outside California
Although the regulation originates in California, similar measures are expanding rapidly across other jurisdictions. Colorado has already passed comparable rules, several other American states are considering similar initiatives, and proposals exist in the United States Congress for a nationwide framework. Outside the United States, the European Union has put forward similar proposals, while Spain has already begun operating a digital passport system.
Because technology firms rarely create separate operating system versions for individual territories, Mackey believes the setup requirements will extend far beyond California. He stated that manufacturers are likely to apply these systems to all operating system users, affecting billions of people worldwide.
Debate Over Privacy and Protection
Supporters of the legislation argue that the primary objective is to protect minors when they use digital services and applications. Lawyer Nichole Rocha, who supports the measure, explained that the text aims to maintain a balance between user safety and privacy. She highlighted that omitting a mandatory official identification upload was an intentional design choice in the law.
Conversely, digital rights organizations warn that the broader privacy implications remain severe. Mackey warned that well-intentioned lawmakers writing overly broad laws threaten the fundamental nature of the internet, which currently allows people to access information anonymously, privately, and securely.
