These laws go further than some of those in other states. One of its key laws, the App Store Accountability Act, puts the burden on Apple, Google and other app stores to verify the age of every user under 18, not just within an app, but before any app can be downloaded. Kids are sorted into age bands, and their accounts are linked to a parent’s or guardian’s, who then manages approvals.

Another law, the Social Media Regulation Act, has evolved into Senate Bill 194 and requires platforms to assess whether or not a user is a minor with over 95% accuracy. Certain features are then off limits unless a parent gives the green light.

Utah has also passed laws to protect children who are involved with paid social media content, a common phenomenon in Utah with mommy vloggers and others. The law requires parents or other employers to establish a trust fund for kids who make $20,000 or more a year in this way. Detailed records must be kept, and children can delete the content once they reach the age of 18.

Together, these rules make up one of the strictest online protection frameworks in the country. Tech companies have tried to challenge Utah in court but haven’t succeeded.

So how do these age verification processes work? For starters, lying about your age online isn’t as easy as it used to be. Faking a birthdate or checking a box doesn’t cut it. Now, companies are asking for proof, which might mean uploading a driver’s license or passport, or taking a selfie within the platform so the app can estimate a user’s age. The idea is to make it harder to cheat the system, while collecting as little personal data as possible.

Of course, some kids look for ways around the system, like using a VPN to appear outside Utah or borrow someone else’s credentials, but the most common workaround is simply asking a parent to help.

Come 2027, Utah parents will be able to sue companies if they believe the law was ignored and their child gained access to prohibited content. Each violation could cost a company $1,000. If a child breaks the rules by faking documents or using someone else’s identity, or a parent helps them circumvent the rules, then those actions fall under Utah’s deceptive practices law, which can result in civil penalties. So far, there haven’t been any cases filed under these rules.

Still, some big concerns remain, especially around privacy. Age verification systems can collect highly sensitive personal data, like photos of government IDs and facial scans. That raises red flags, especially when this information is stored in multiple places.

In 2024, one of the top identity verification firms, AU10TIX, which serves clients like TikTok and X (formerly Twitter), left login credentials for one of its systems exposed online. For more than a year, unauthorized access to a log viewer allowed outsiders to see names, birthdates, nationalities, ID numbers and scanned documents. When kids’ data is split among several companies handling different apps or services, the risk of a breach multiplies.

There’s a way to do this better. A stronger version of Utah’s law could rely first on estimating a user’s age using biometrics like facial scans, and only request ID if there’s uncertainty. That reduces the amount of sensitive data collected. The law could also require companies to delete ID documents by default and ban long-term storage of biometric data unless absolutely necessary.

More transparency would help too. Companies should be audited by outside experts each year, with public results. If there’s a data breach, it should be disclosed quickly. Parents should get regular updates and have to renew permissions every year. And if there’s a dispute over age verification, there should be a simple appeals process with a neutral reviewer.

Finally, stronger penalties for mishandling data and a statewide campaign to educate parents and seniors on digital safety could go a long way. Utah has already taken the lead on age verification. The next step is making sure the system is just as strong on privacy.

Leslie Meredith has been writing about technology for more than a decade. As a mom of four, value, usefulness and online safety take priority. Have a question? Email Leslie at asklesliemeredith@gmail.com.