Is childproofing the internet constitutional? A tech law expert draws out the issues
- Written by Meg Leta Jones, Associate Professor of Technology Law & Policy, Georgetown University
Mounting pressure to regulate children’s use of technology in the United States raises the question: Is childproofing the internet constitutional?
In response to significant political pressure[1] stemming from alarming revelations[2] about youth experience with digital technologies, a wave of state laws have recently passed across the U.S. They address a variety of online harms affecting children, ranging from exposure to pornography[3] and risky content[4] to manipulative design[5] and social media access[6].
Meg Leta Jones
While the court considers the Texas law, the U.S. House will be considering[12] the Kids Online Safety Act[13], known as KOSA, and the Children and Teens Online Privacy Protection Act[14], referred to as COPPA 2.0, because it updates the 1998 Children’s Online Privacy Protection Act, COPPA[15]. KOSA addresses addictive design features and parental controls, and COPPA limits data collection and use. Senate leaders merged the two into KOSPA[16], which passed 91-3.
Age-gating
All these laws demand that platforms treat children differently from adults, and so require platforms to know who is a child and who is an adult. This practice is referred to as age-gating and includes a few methods.
Meg Leta Jones
The old COPPA 1.0 added restrictions, responsibilities and liability for sites directed at kids or sites that had knowledge a user was under 13. Most sites avoid the law’s restrictions and requirements by simply including language in their terms of service forbidding those under 13 from creating an account. Others, like Facebook, eventually went further, asking the user to input their age or date of birth. Kids long ago learned to circumvent[17] the virtually meaningless barrier.
The new wave of laws requires more, using one of two age-gating options: inference and verification. To infer age, the platforms make a good guess by using data generated by the user, either through biometric scans of the face or voice or analysis of the data troves the platforms already collect for targeted advertising. Age verification involves relying on evidence already vetted by another institution such as a government ID or credit card.
While the inference method provokes significant privacy concerns[18], age-gating advocates argue[19] that age verification at the operating system or browser level is effective and doesn’t burden users or put their privacy at risk.
The last time the constitutionality of age-gating the internet came before the Supreme Court, the law did not survive. In 1997, the Supreme Court in Reno v. ACLU[20] invalidated provisions of the Communications Decency Act enacted to protect children from exposure to explicit material online because they lacked the precision required to narrowly target unprotected speech. Congress made some adjustments and tried again with the Children’s Online Protection Act[21], not to be confused with COPPA, which ultimately failed[22] as well but under a highly fractured court.
Meg Leta Jones
3 questions
While the constitutional analysis, the technology and the associated research are fairly complex, the outcome depends on answers to three main questions.
To limit sharing or accessing content, the government needs to have a good reason. So, the first question to ask is whether the harms to kids are really that bad and whether the challenged law mitigates the harms. Laws sometimes fail this test.
Like in 2011, when the Supreme Court scuttled California’s attempt[23] to prohibit the sale of violent video games to minors, Utah’s efforts to limit children’s access to social media recently stalled[24] after the government could not convince the district court that a compelling link exists between youth mental health problems and social media.
Meg Leta Jones
The second question is whether restrictions and obligations related to children place burdens on speakers and seekers who have legitimate rights to share and access information freely. While the 5th Circuit maneuvered around this question by relying on the constitutionality of laws that require showing an ID to access offline pornography, other courts have gotten technical. For instance, Arkansas’s Social Media Safety Act did not survive because the court determined[25] adults would be deterred from creating accounts if it involved producing an ID or biometric scans.
This question may come down to not only the technical reality or potential of age-gating but also user experience research.
Meg Leta Jones
The third question is whether alternatives, namely parental controls, work better and leave adult access unhindered. Although some parents and policymakers insist parental controls[26] have not worked to protect children, lower courts[27] considering the new wave of age-gating have found that parental controls remain superior options for addressing online harms to children, just like the Supreme Court did two decades ago.
Meg Leta Jones
Nobody knows how the Supreme Court will answer these three questions this time around. So much has changed. The court has changed, the technology has changed, the research has changed, childhood has changed. If age-gating laws are upheld as constitutional, more big changes are likely to follow.
References^ significant political pressure (www.nytimes.com)^ alarming revelations (www.theatlantic.com)^ pornography (www.newsweek.com)^ risky content (leginfo.legislature.ca.gov)^ manipulative design (www.nysenate.gov)^ social media access (www.flsenate.gov)^ already been challenged (www.nytimes.com)^ U.S. Supreme Court will review (www.scotusblog.com)^ federal district court determined (law.justia.com)^ 5th U.S. Circuit Court of Appeals overturned (www.ca5.uscourts.gov)^ in the 1960s (supreme.justia.com)^ U.S. House will be considering (thehill.com)^ Kids Online Safety Act (www.congress.gov)^ Children and Teens Online Privacy Protection Act (www.congress.gov)^ COPPA (www.ftc.gov)^ KOSPA (www.congress.gov)^ learned to circumvent (firstmonday.org)^ privacy concerns (www.theverge.com)^ age-gating advocates argue (thehill.com)^ Reno v. ACLU (www.law.cornell.edu)^ Children’s Online Protection Act (www.law.cornell.edu)^ ultimately failed (scholarship.law.uwyo.edu)^ scuttled California’s attempt (www.law.cornell.edu)^ recently stalled (fingfx.thomsonreuters.com)^ court determined (law.justia.com)^ parental controls (www.wsj.com)^ lower courts (s3.documentcloud.org)Authors: Meg Leta Jones, Associate Professor of Technology Law & Policy, Georgetown University 
