US Lawmakers Push For OS-Level Age Check As Malaysia Preps Under-16 Social Media Ban

KUALA LUMPUR, April 21 (Bernama) -- A newly introduced bipartisan bill in the United States (US) House of Representatives seeks to mandate operating system (OS) providers to verify the age of all users, shifting the responsibility of age-checking away from individual applications to platform owners.

According to a report by BiometricUpdate.com, the proposed legislation, known as the Parents Decide Act (HR 8250), was introduced this week by US Representative Josh Gottheimer and Representative Elise Stefanik.

Under the bill, users would be required to provide their date of birth when creating an account and using an operating system. For users under the age of 18, a parent or legal guardian would be required to verify the minor’s age.

The legislation mandates mobile and computer OS companies to build a system that allows app developers to access the information necessary to verify a user's age. 

This effectively moves the age-verification infrastructure to the OS level, subject to privacy and data protection rules.

Gottheimer said that the internet is becoming increasingly treacherous for children, with artificial intelligence (AI) and platforms shaping their thoughts and actions without adequate guardrails.

"Right now, we expect children to self-police their safety online. That’s not realistic – and it’s not responsible. 

“Parents should decide what apps their kids can download, what content they can see, and how they interact online, not algorithms or tech companies," he said, as quoted by BiometricUpdate.com.

Gottheimer added that this approach creates a trusted and consistent standard across platforms, ensuring that the operating system controls the limits set for children and communicates them to apps and AI platforms.

The report states that the legislation works alongside broader bipartisan efforts to improve online safety, including Sammy’s Law, the Kids Online Safety Act, and the Children and Teens’ Online Privacy Protection Act.

Enforcement of the bill would fall under the jurisdiction of the US Federal Trade Commission (FTC). 

The FTC would be required to issue regulations within 180 days of the law's enactment covering shared devices, parent verification, and data protection standards to ensure birth-date information is collected securely and protected from breaches.

Furthermore, the FTC would be mandated to brief Congress on its rulemaking process, and within 18 months, to submit a report detailing provider compliance and whether Congress needs to update the requirements.

The bill also includes a safe harbour provision that seeks to protect compliant OS providers from being held liable under the act if they strictly follow the statute’s requirements and FTC regulations.

If passed, the law would take effect one year after its enactment.

Meanwhile, Malaysia is also taking significant steps to protect minors in the digital space. The government plans to restrict children under the age of 16 from opening personal social media accounts by June 2026. 

The initiative aims to safeguard children's well-being by aggressively tackling serious threats such as cyberbullying and grooming. It mirrors similar recent moves by nations such as Australia and Indonesia.

Communications Minister Datuk Fahmi Fadzil said last Saturday that the government, through the Malaysian Communications and Multimedia Commission (MCMC), is still conducting engagement sessions with various stakeholders to provide briefings, gather feedback, and address concerns.

He also clarified misunderstandings regarding the implementation, explaining that children would still be able to access the internet or social media platforms, but under parental supervision.

-- BERNAMA