California Governor Gavin Newsom signed Assembly Bill 1709 on September 10, 2026, barring covered platforms from providing addictive features to users under 16 years of age and exposing noncompliant operators to civil penalties of up to fifty thousand dollars per affected minor. The signing was confirmed in a statement posted to LinkedIn and reported by public broadcaster KQED, which described the measure as part of a package of online child safety bills enacted that day.

In Short

California passed a law that stops social apps from showing kids under 16 the features that keep them scrolling, like autoplay videos and feeds picked by an algorithm. It matters because those same features are how platforms hold attention and sell ads against it, so the rules touch the core of how the youngest slice of the audience is monetized. If a company breaks the rule knowingly, it can be fined up to $50,000 for each child it harms, and only the state or a local prosecutor can bring the case.

What the statute prohibits

The operative language is narrow and specific. Under the new Chapter 22.9 added to the Business and Professions Code, a covered platform "shall not provide an addictive feature to a user who is under 16 years of age," and must "implement reasonable measures to ensure that users under 16 years of age are not provided any addictive feature on the covered platform." The bill defines an addictive feature as one of a listed set of "psychologically exploitative features intended to maximize engagement that foreseeably lead to compulsive use," naming an addictive feed and autoplay explicitly, with room for the Attorney General to designate others by regulation.

The definition of an addictive feed carries the weight here. It covers any website, service, or application, or portion of one, where multiple pieces of user-generated media are recommended, selected, or prioritized for display based, in whole or in part, on information associated with the user or the user's device. The statute then lists seven carve-outs. Content surfaced from a user's own explicit, unambiguous request escapes the definition, as does a chronological next item in a preexisting sequence from the same source, direct private messages between users, and prioritization done solely to comply with the chapter itself. Search results not persistently tied to the user, and information limited to privacy or accessibility settings or signals about whether a user is a minor, are also excluded.

Two categories of service fall outside the "covered platform" label entirely. The first is any site or app where interactions between users are limited to commercial transactions or to consumer reviews of products, sellers, services, events, or places. The second is any service that operates a feed for the primary purpose of cloud storage. Everything else that offers an addictive feature "as a significant part of the service" is in scope, expressly including social media platforms as already defined in Section 22675 of the code.

The bill does not force minors off platforms. A covered platform may still let a user under 16 create or maintain an account, provided that user receives no addictive feature. Where a platform does not preserve such a stripped-down account, it must delete the account of a user under 16 and any personal information associated with it.

The penalty structure

Enforcement runs through civil action alone, and standing is restricted. Only the Attorney General or a local public prosecutor may bring a case; the statute creates no private right of action. That design mirrors the enforcement architecture California wrote into its earlier feed law and stands in contrast to bills in other states that have attached private rights of action to platform obligations.

The penalty tiers turn on intent. A knowing violation draws up to fifty thousand dollars per affected minor. A negligent violation draws up to twenty-five thousand dollars per affected minor. In setting any penalty, a court is directed to weigh the size of the covered platform, the severity and duration of the violation, and the operator's good faith efforts to comply. The per-minor structure is the figure that matters for anyone modeling exposure: a platform with a large under-16 base faces penalties that scale with the number of affected users rather than a single capped fine.

Age verification hinges on a law that has not taken effect

AB 1709 does not build its own age-checking machinery. It leans on the Digital Age Assurance Act, directing that before providing an addictive feature to a user, a covered platform "shall verify the age of a user pursuant to the Digital Age Assurance Act," subject to any regulation the Attorney General adopts. Where a platform cannot verify age that way, it must fall back on an age determination made under the referenced Health and Safety Code provision.

The dependency is consequential because of timing. The Digital Age Assurance Act, formally Assembly Bill 1043, requires operating system providers to collect age information at device account setup and transmit an age-bracket signal to application developers. It was signed in October 2025 and takes effect on January 1, 2027, extending that device-signal architecture to a fifth American state. Until that date arrives and the signal is flowing, the primary mechanism AB 1709 names for establishing who is under 16 is not yet operating. The age assurance methods available in the interim, from facial estimation to inference from held data, sit at varying and contested confidence levels, and the international framework standard governing them, ISO/IEC 27566-1:2025, appeared only in December 2025.

A new advisory commission inside the Justice Department

Section 3 of the bill adds Chapter 5.4 to the Government Code, establishing an e-Safety Advisory Commission "as an independent advisory body that is only for administrative purposes within the Department of Justice." The statute is emphatic that the body is purely advisory: its recommendations are "not binding upon, and shall not be imputed to, any agency or department of the state," and it is not considered part of the Justice Department for other purposes.

The commission is to consist of seven members, with four appointed by the Governor and one each by the President pro Tempore of the Senate, the Speaker of the Assembly, and the Attorney General. Members serve without compensation, for a maximum of eight consecutive years, at the pleasure of their appointing authority. The bill prescribes the expertise the body must draw on, spanning pediatrics, child and adolescent psychology, platform design and age assurance technologies, children's online safety advocacy, academia, and K-12 education. At least one member must have experience working on LGBTQ+ civil rights or statewide public policy related to LGBTQ+ youth.

The commission's remit is to advise state government on the state of age assurance technologies and their privacy implications, feedback from users and parents, the differential impact of online age restrictions on different groups of youth, harmful design features, and state agency rulemaking under the new chapter. On or before January 1 of each year, it must report to the Legislature and the Governor on its activities and on recommendations for legislative changes.

The legislative findings name internal platform research

The bill opens with sixteen numbered legislative findings, and their framing is pointed. The Legislature declares that social media platforms "are intentionally designed to maximize user engagement through features such as algorithmic content recommendation, infinite scroll, autoplay, and notifications, which mirror known behavioral reinforcement systems associated with addiction." It cites internal statements from company executives and researchers confirming platforms are engineered to encourage compulsive use through "dopamine-driven" feedback loops, and internal documents showing that increasing "time spent" by young users has been "a central business objective."

Further findings reference internal research acknowledging that minor users are "particularly sensitive to reinforcement in the form of social reward" and lack the neurological development to control screen time, alongside peer-reviewed and longitudinal neuroimaging research on adolescent reward systems. The Legislature concludes that establishing a minimum age requirement is "a reasonable and evidence-based measure to reduce exposure to addictive digital environments during critical stages of neurological and psychological development."

The package around it

AB 1709 was not signed in isolation. According to KQED, the same day's package included Senate Bill 1119, co-authored by Sen. Steve Padilla and Assemblymembers Buffy Wicks and Rebecca Bauer-Kahan, which requires operators of AI companion chatbots to assess the risks their products pose to children, document the findings, and hand them to an independent auditor, alongside parental controls and in-app crisis support. It also included Assembly Bill 2, from Assemblymember Josh Lowenthal, raising the damages a large social media company can face when its conduct harms a child, a measure Lowenthal pursued across three legislative sessions.

At the signing, Newsom framed the effort as scaffolding rather than a finished structure. "We're establishing a framework," he said, "so that we can really enact a more aggressive posture as it relates to enforcement." Jim Steyer, whose group Common Sense Media backed all three bills, called the legislative package "the first step in the United States towards comprehensive regulation and commonsense guardrails around these platforms." According to KQED, AB 1709 passed the Legislature without a no vote.

A day earlier, according to the same report, Newsom signed two bills setting up enforcement infrastructure aimed at AI developers: AB 1405, from Bauer-Kahan, creating a state registry of independent AI auditors with standards for their independence, transparency, and integrity; and SB 813, from Sen. Jerry McNerney, establishing a framework for independent verification organizations that can set the standards those auditors would uphold. Bauer-Kahan told KQED the registry will begin to take shape in January and will expand to include a new category of work, that of the AI auditor.

Industry response to the AI bills came from two labs. OpenAI's Chris Lehane, vice president of global affairs, wrote in a statement that "it is so great to see SB 1119 signed into law," adding that "it both meets the moment for parents and sets teens up for educational success." Anthropic, which endorsed SB 813 and AB 1405 in August, had its government affairs spokesperson Cesar Fernandez commend the two lawmakers "for their leadership on these important issues" while noting that "more work is needed to ensure AI developers are required to have safeguards evaluated by independent third-party experts." KQED reported that it reached out to Meta, YouTube, TikTok, and Snap for comment and that those companies had not yet responded.

Why this matters for the advertising market

The mechanism AB 1709 restricts is the same mechanism that produces addressable attention. Autoplay and the personalized feed are not incidental product features; they are the surfaces where impressions are generated and time-on-platform accumulates, and time-on-platform is what determines inventory supply for the under-16 cohort. Restricting the feature for that cohort does not merely change a compliance checkbox. It removes, for users a platform identifies as under 16, the ranking systems that most directly drive session length.

The legal ground under that restriction shifted in California weeks before the signing. A federal judge ruled in early August 2026 that minors' algorithmic content feeds are not protected speech under the First Amendment, denying preliminary injunction motions brought by Meta, TikTok, and Google with YouTube against provisions of Senate Bill 976, the Protecting Our Kids from Social Media Addiction Act. That ruling let California begin enforcing sections of the earlier addictive-feed law that the platforms had argued amounted to protected editorial expression. AB 1709 extends the logic of that framework from a consent-based model, where a parent could authorize an addictive feed, to a categorical prohibition for the under-16 band.

The platforms are already litigating the adjacent statute. Google, YouTube, and Meta filed separate federal lawsuits in November 2025 challenging SB 976's restrictions on personalized feeds for minors, arguing the requirements violated First Amendment rights and that the law was underinclusive because it permitted minors to reach the same content through search or with parental consent. AB 1709's structure closes the parental-consent path for the youngest users, which may narrow one of the underinclusiveness arguments while inviting others.

California is not legislating alone, and the compliance surface is becoming a patchwork. New York's companion chatbot law took effect last November, and Idaho, Oregon, and Washington passed their own rules during 2026. The state's separate companion chatbot disclosure law, SB 243, was signed in October 2025, requiring companion bots to tell minors they are talking to a machine and to route users in crisis to help. For media buyers and platform compliance teams, the practical consequence is that the definition of a reachable teen audience now varies by jurisdiction and by feature, and the penalty for getting it wrong in California is measured per minor.

The financial stakes attached to child-safety failures at these platforms have been rising independent of this statute. A New Mexico jury found Meta liable in March 2026 and imposed $375 million in penalties for failing to safeguard users from child predators, and a Los Angeles jury the following day found Meta and YouTube negligent. Federal cases brought by states and school districts in Oakland are scheduled for jury trials in the summer of 2026. Against that backdrop, a statute that converts a specific product feature into a per-minor civil penalty adds a defined, quantifiable line item to an already expanding category of exposure.

The obligations also intersect with a broader compliance framework built around COPPA and a wave of age-assurance mandates now landing across US states and abroad. What AB 1709 adds is not a new theory of harm but a hard age line, a named set of prohibited features, and a penalty that scales with the affected population, all enforceable by the state alone and dependent on an age-signal system that does not switch on until 2027.

Timeline

Summary

Who: California Governor Gavin Newsom, Assemblymember Josh Lowenthal as author, the California Department of Justice and its new e-Safety Advisory Commission, and the covered platforms subject to the law.

What: Assembly Bill 1709, a statute barring covered platforms from providing addictive features, defined to include addictive feeds and autoplay, to users under 16, carrying civil penalties of up to $50,000 per affected minor for knowing violations and up to $25,000 for negligent ones, enforceable only by the Attorney General or a local prosecutor.

When: Signed September 10, 2026, after passing both chambers on August 31, 2026, with age verification dependent on the Digital Age Assurance Act that takes effect January 1, 2027.

Where: California, applying to natural persons who reside in the state and access or seek to create accounts on covered platforms.

Why: The Legislature found that platform engagement features are engineered to encourage compulsive use among adolescents, citing internal company research and peer-reviewed studies, and concluded that a minimum age requirement for addictive features is an evidence-based measure to protect minors during critical stages of development.