On June 29, 2026, the House passed the Kids Internet and Digital Safety Act, H.R. 7757, 267-117 — clearing the two-thirds threshold required under the suspension-of-rules procedure lawmakers used to fast-track it. The tally hides a stranger split: every voting Democrat backed the bill, 191-0, while Republicans divided 162-32. That unanimity vanishes on the other side of the Capitol, where the bill needs real bipartisan votes rather than a procedural shortcut.
Sponsored by Energy and Commerce Chairman Brett Guthrie (R-KY) and ranking member Frank Pallone (D-NJ), the KIDS Act stitches together 14 separate child-safety bills, including a revised Kids Online Safety Act, COPPA 2.0, and provisions on AI chatbots and children's data brokers. It requires platforms where sexual content "harmful to minors" exceeds a third of total content to deploy age-identification technology; obligates social platforms to default minors into protective settings and give parents account tools; and requires AI chatbots to disclose they aren't human. States may legislate more strictly, not more loosely — a federal floor.
The problem is real
That the House moved with this much force reflects a genuine, well-documented problem. Default-open privacy settings, autoplay and infinite-scroll design, and unrestricted messaging between adults and minors have produced measurable harms, and Congress has failed to pass any version of KOSA for four years running. Guthrie and Pallone are right that design defaults, not just content moderation, are where a serious children's-safety bill has to operate. A bill limiting who can message a minor and giving parents visibility into an account, without demanding every user hand over a government ID, is defensible on its face.
A disclaimer that isn't one
The trouble is the enforcement mechanism. As the Electronic Frontier Foundation notes, H.R. 7757 states that nothing in the Act requires a platform to implement "age gating or age verification functionality." That clause survived negotiation; what it sits beside did not get softened. The bill holds platforms liable if they "knew or should have known" a user was a minor — a negligence standard, not an actual-knowledge one. EFF's assessment is blunt: "a disclaimer doesn't magically eliminate legal risk, especially for smaller services and startups that can't afford to defend lawsuits or fight regulators." A platform that trusts a user's self-declared age and gets it wrong is still exposed. The only reliable way to avoid that exposure is to check age up front, for every user — because a platform can't know in advance which accounts belong to minors without checking all of them.
That's the mechanism behind calling this a de facto mandate: not that the statute compels verification by name, but that it makes the alternative to verification a lawsuit. State age-verification laws for adult content have already produced this same dynamic through identical liability pressure rather than an explicit technical requirement, and the results — VPN circumvention, whole-state geoblocking, and breaches at third-party verification vendors — are a preview of what a federal version scales up, not a hypothetical.
Everyone pays the verification tax
No deployed age-verification method cleanly separates "confirms this user is an adult" from "collects government ID or biometric data tying a real identity to browsing history." Identity-verification breaches are now a recurring incident category, and a law that pushes platforms — including the smaller services and startups EFF flags as least able to afford compliance infrastructure — toward collecting that data expands the exposure it claims to shrink. It also lands on adults nowhere near the bill's stated target: a new account is functionally required to prove it isn't a teenager, because the platform's incentive is to check first and never ask twice.
A different fight in the Senate
None of this is what's actually stalling the bill upstairs. Senators Richard Blumenthal (D-CT) and Marsha Blackburn (R-TN), KOSA's original co-authors, oppose H.R. 7757 because the House stripped its "duty of care" provision — a requirement that platforms take reasonable steps to prevent harm to minors independent of account settings. Blumenthal has called the House product "dead in the Senate." That fight will likely consume the next several months, but it leaves the verification-liability structure untouched on both sides — nobody drafting competing Senate language has proposed removing the "knew or should have known" standard, because a stronger duty of care makes verification pressure worse, not better.
The narrower alternative
Congress doesn't need identity infrastructure to address the harms that produced a 267-117 vote. Default-safe settings and parental controls can be implemented by defaulting every account to the safer configuration and letting users opt out — sidestepping the age question for the features that don't actually require knowing anyone's age. EFF's proposed alternative, a comprehensive privacy law built on data minimization and a ban on cross-site behavioral tracking applied to all users, would blunt most of the same harms without building the identity-verification apparatus this bill's liability language quietly requires. The House had the votes to send a message. The Senate has the chance to write a bill that doesn't need a disclaimer to hide what it does.