Field Notes

synthesis

Mandatory parental surveillance of adolescents

StatusWorkingUpdatedStands on5 sourcesSupportsnotes

Since roughly 2023, United States federal and state legislators have introduced and enacted a series of laws that require digital platforms to verify the age of users, obtain parental consent before minors can use their services, and in some cases provide parents with access to the content of a minor’s communications. A parallel wave has moved through Australia, the UK, France, and India. The laws vary in scope and mechanism, but they share an architecture: identify which users are minors, route their access through a parent, and restrict by default.

The effect is a legal framework in which a teenager has no zone of online activity that is shielded from parental oversight by default. Whether this is a necessary safety measure or an overextension that causes its own harms is the live dispute this note maps.

The US legislative landscape

Federal bills. the Kids Online Safety Act (KOSA) would require platforms to provide parents with controls to monitor accounts held by children aged sixteen and younger. COPPA 2.0 would extend parental-consent obligations to teenagers. The Kids Off Social Media Act would ban under-13s and require parental consent for 13–17-year-olds. The App Store Accountability Act would make parental consent a condition of a minor downloading any app.

State laws. the pace has been faster than Congress’s. Nebraska’s Parental Rights in Social Media Act requires platforms to let parents view their children’s posts and messages. Texas’s SCOPE Act mandates parental tools for controlling a minor’s privacy and account settings and monitoring and limiting their time on the platform. Utah requires parental consent before a minor can download or purchase any app. Arkansas, Louisiana, and Virginia prohibit various platform actions without the consent of a verified parent. Florida bans under-14s from social media accounts and requires parental consent for 14- and 15-year-olds. California’s AB 1709 would ban under-16s from social media; AB 1043 requires operating systems to sort users into age brackets at device setup and transmit the bracket to apps and services.

Outside the US, Australia’s under-16 social media ban took effect in late 2025. The UK Online Safety Act requires age assurance that is functionally met by age verification or facial estimation. France adopted an under-15 ban in mid-2026. India’s DPDP Act treats everyone under 18 as a child and requires verifiable parental consent for all data processing.

Effects on adolescent privacy

The laws affect privacy through several compounding mechanisms.

Identity collection. To determine whether a user is a minor, a platform must establish the age of every user. The laws encourage or require government ID uploads, facial age estimation, or behavioral inference from browsing data. Known breaches of age-verification data include a Discord contractor that exposed 70,000 ID photos in 2025 and the Tea app breach that exposed 13,000 ID photos and selfies.

Parental consent as a gate. In the strongest form, a minor cannot create an account or download an app without a parent’s approval. This extends the gatekeeping function from risk mitigation to access itself: information, community, and political speech are also behind the gate.

Parental monitoring mandates. Several laws require platforms to provide parents with access to the content of a minor’s communications, not only metadata or time-use statistics. Nebraska’s law allows parents to view posts and messages. Texas’s SCOPE Act requires parental tools for controlling privacy settings. These are legal obligations on platforms, not optional features.

Default restriction. Virginia’s law imposes a default one-hour daily time limit reversible with parental consent. California’s AB 1043 transmits minor status to every app and service at the device level. The default condition is the restricted one; a less restricted experience requires a parent to act.

Criminal liability. The Colin Gray prosecution carries the logic to its endpoint. The judge cited a parent’s failure to monitor a teenager’s online activity as a component of criminal culpability for murder. The Behavioral Forensics parental liability white paper argues for extending criminal liability to parents who give children unsupervised digital access.

The critique

Several lines of criticism have been raised against this legislative trend.

Efficacy. Australia’s ban has been in effect since late 2025; a majority of young people report they can still access social media, and crisis helplines report increased calls from youth who lost online community and resources. In the UK, the Online Safety Act was followed by a sharp increase in VPN purchases and traffic migration to noncompliant sites with weaker safety practices than the regulated platforms. Age verification creates databases of identifying documents that have been breached in practice.

The concealment evidence. Weinstein and Przybylski (2019) found that controlling parental restriction styles elicit reactance, which increases adolescents’ intent to conceal their online activity, while autonomy-supportive styles reduce it. Some research has associated parental monitoring apps with increased online victimization, though the causal direction is not firmly established.

Developmental privacy. Citron and Waldman (2025) argue that intimate privacy is a prerequisite for identity formation, autonomy, and close relationships during adolescence. Their article contends that the parental control model embedded in US law removes the conditions for this developmental work.

Effects on vulnerable adolescents. LGBTQ+ youth use online spaces to find community, explore identity, and access resources unavailable in unsupportive homes. A 2020 Trevor Project survey found that 29% of LGBTQ+ youth had experienced homelessness or been kicked out. Routing a teenager’s online access through a parent’s approval and oversight makes these young people dependent on the adults from whom they may need independence.

Industry incentives. Citron and Waldman argue that the parental control model shifts the burden of data privacy and online safety from platforms to parents. The FTC has documented that by age 13, ad firms hold an average of 72 million data points per child. Under this view, parental consent functions as a liability shield that allows data extraction to continue while platforms claim they have met their obligations.

The evidence base for the underlying causal claims. Marwick, Smith, Caplan, and Wadhawan (2024) argue that child online safety legislation draws on correlations between social media use and youth mental health outcomes that do not establish causation. The same period saw rising gun violence, climate-related anxiety, the COVID-19 pandemic, increasing income inequality, and changes in parenting practices, all of which also correlate with mental health outcomes. The relationship may be bidirectional — teenagers experiencing mental health difficulties may retreat into heavier online use, as adults do — and the legislative response may be an instance of a recurring pattern of moral panic about youth and new media.

Connection to existing vault notes

Parental control tools evidence review found little support for technical controls as a stand-alone intervention. Alternatives to age verification argues that parents have an important but bounded role and that platform design creates risks no family can individually audit or bargain away. Less harmful social media develops an autonomy-respecting model that differentiates prepubertal children, early adolescents, and older adolescents rather than treating everyone under 18 as one category.

The legislative trend documented here pushes in the opposite direction on each of these dimensions: it makes technical controls mandatory, it treats parents as the primary mechanism, and it applies a uniform under-18 framework that the evolving-capacities literature argues against.

Built on 5 sources (5 external).

Working out connections…