<section number="13-76-201"><effdate>3/18/2026</effdate><histories><history>Amended by Chapter <modchap sess="2026GS">157</modchap>, 2026 General Session</history><modyear>2026</modyear></histories><catchline>App store provider requirements.</catchline><subsection number="13-76-201(1)">Beginning May 6, 2027, an app store provider shall:<subsection number="13-76-201(1)(a)">at the time an individual who is located in the state creates an account with the app store provider, or for an existing account, within 12 months after the day on which the obligations described in this section take effect:<subsection number="13-76-201(1)(a)(i)">request age category information from the individual; and</subsection><subsection number="13-76-201(1)(a)(ii)">verify the individual's age category using commercially available methods that are reasonably designed to ensure accuracy, which for a minor shall include affirmative age attestation by a parent together with other age information collected as part of the creation or use of an account;</subsection></subsection><subsection number="13-76-201(1)(b)">if the age verification method or process described in Subsection <xref depth="4" refnumber="13-76-201(1)(a)">(1)(a)</xref> determines the individual is a minor:<subsection number="13-76-201(1)(b)(i)">require the account to be affiliated with a parent account; and</subsection><subsection number="13-76-201(1)(b)(ii)">obtain verifiable parental consent from the holder of the affiliated parent account before allowing the minor to:<subsection number="13-76-201(1)(b)(ii)(A)">download an app;</subsection><subsection number="13-76-201(1)(b)(ii)(B)">purchase an app; or</subsection><subsection number="13-76-201(1)(b)(ii)(C)">make an in-app purchase;</subsection></subsection></subsection><subsection number="13-76-201(1)(c)">after receiving notice of a significant change from a developer:<subsection number="13-76-201(1)(c)(i)">notify the account holder of the significant change; and</subsection><subsection number="13-76-201(1)(c)(ii)">for a minor account:<subsection number="13-76-201(1)(c)(ii)(A)">notify the holder of the affiliated parent account; and</subsection><subsection number="13-76-201(1)(c)(ii)(B)">obtain renewed verifiable parental consent;</subsection></subsection></subsection><subsection number="13-76-201(1)(d)">provide to a developer, in response to a request authorized under Section <xref depth="3" refnumber="13-76-202">13-76-202</xref>:<subsection number="13-76-201(1)(d)(i)">age category data for a user located in the state; and</subsection><subsection number="13-76-201(1)(d)(ii)">the status of verified parental consent for a minor located in the state;</subsection></subsection><subsection number="13-76-201(1)(e)">notify a developer when a parent revokes parental consent; </subsection><subsection number="13-76-201(1)(f)">protect age category data and any associated verification data by:<subsection number="13-76-201(1)(f)(i)">limiting collection and processing to data necessary for:<subsection number="13-76-201(1)(f)(i)(A)">verifying an account holder's age;</subsection><subsection number="13-76-201(1)(f)(i)(B)">obtaining verifiable parental consent; or</subsection><subsection number="13-76-201(1)(f)(i)(C)">maintaining compliance records; and</subsection></subsection><subsection number="13-76-201(1)(f)(ii)">transmitting age category data using industry-standard encryption protocols that ensure:<subsection number="13-76-201(1)(f)(ii)(A)">data integrity; and</subsection><subsection number="13-76-201(1)(f)(ii)(B)">data confidentiality;</subsection></subsection></subsection><subsection number="13-76-201(1)(g)">for a pre-installed application:<subsection number="13-76-201(1)(g)(i)">provide available age category information in response to a request from a developer; and</subsection><subsection number="13-76-201(1)(g)(ii)">take reasonable measures to facilitate verifiable parental consent for use of the app in response to a request from a developer; and</subsection></subsection><subsection number="13-76-201(1)(h)">comply with a developer's request made in accordance with Subsection <xref depth="4" refnumber="13-76-202(6)">13-76-202(6)</xref> to prevent minor accounts from downloading or purchasing the developer's app.</subsection></subsection><subsection number="13-76-201(2)">Beginning May 6, 2027, an app store provider may not:<subsection number="13-76-201(2)(a)">enforce a contract or terms of service against a minor unless the app store provider has obtained verifiable parental consent;</subsection><subsection number="13-76-201(2)(b)">knowingly misrepresent the information in the parental consent disclosure; or</subsection><subsection number="13-76-201(2)(c)">share age category data or any associated verification data except:<subsection number="13-76-201(2)(c)(i)">between an app store provider and a developer as required by this chapter; or</subsection><subsection number="13-76-201(2)(c)(ii)">as required by law.</subsection></subsection></subsection></section>