California lawmakers have passed Assembly Bill 1856, exempting qualifying open-source operating systems from the state's age-verification requirements under the Digital Age Assurance Act (DAAA). The law, approved in October 2025, takes effect on January 1, 2027, and removes the obligation for open-source OS providers to collect and share user age data with applications, easing compliance burdens for these platforms, according to medianama.com.
The bill clarifies that an operating system provider does not include entities distributing software under licenses that allow recipients to copy, redistribute, and modify the software. Earlier drafts of the bill had proposed extending age-verification duties to web browsers and website operators, but this language was removed before the final passage. Under the existing DAAA, OS providers must collect users' birth dates or ages during account setup, categorize users into four age brackets, and share this data with applications via real-time APIs when requested.
The exemption for open-source operating systems like Linux addresses concerns about the feasibility and appropriateness of imposing age-verification on software that is freely distributed and modifiable. This move differentiates open-source platforms from proprietary OS providers, who remain subject to the age-verification rules. The legislation aims to balance child protection online with practical compliance measures, reflecting the unique nature of open-source software distribution and use.
Assembly Bill 1856 will be implemented starting January 1, 2027, marking a significant regulatory adjustment for open-source operating systems in California. The Digital Age Assurance Act continues to require age verification from proprietary OS providers, maintaining protections for minors while exempting open-source software distributors.