The state of New York just finalized the rules for its SAFE for Kids Act, detailing exactly how social media platforms must verify user ages starting in January 2027. This new law targets the addictive nature of algorithmic feeds by turning them off by default for anyone under 18. Instead of seeing an endless scroll of recommended videos tailored by an algorithm, minors will only see posts from accounts they actually follow, displayed in chronological order.
Companies have options beyond asking for a driver’s license
One of the biggest questions surrounding this law was how tech companies would actually prove someone’s age without creating major privacy headaches. The final rules issued by New York Attorney General Letitia James state that platforms like TikTok and Instagram must determine a user is an adult before turning the algorithmic feeds back on.
Don’t miss the best of The Mac Observer
Set us as a preferred source and our Apple reporting ranks higher in your Google Search results and Discover feed — one tap, no account changes.
However, companies are not forced to collect government IDs from everyone. They can use alternative methods, as long as those methods meet specific accuracy benchmarks. For instance, a platform could ask a user to upload a video or cross-check an email address or phone number against other available data. The state explicitly requires companies to offer at least one verification option that does not involve a government-issued ID.
Strict privacy guardrails apply to the collected data
If an adult user submits a phone number or photo to prove they are over 17, the social media company cannot keep that data. The rules mandate that any information used for age verification must be deleted or de-identified immediately after use. Companies are forbidden from using this data for targeted advertising or any other secondary purpose.
For users under 18, parents can still opt in to allow the algorithmic feed or late-night push notifications, which are otherwise blocked between midnight and 6 a.m. But to grant this permission, the parents themselves must pass the same age verification process.
If a parent refuses consent, the platform cannot block the minor from using the app; the child just gets the default, non-algorithmic version of the service.
Discussion