App developer obligations

(a) In general An app developer shall— (1) verify through a covered app store’s method or process the age category of the app developer’s users or potential users and, for a minor account, whether verifiable parental consent has been obtained; (2) notify a covered app store provider of a significant change to the app; and (3) request age category data or verifiable parental consent— (A) at the time a potential app user downloads or purchases an app; (B) when the app developer implements a significant change to the app; or (C) to comply with an applicable law or regulation. (b) App developer requests An app developer may request age category data or verifiable parental consent— (1) no more than once during each 12-month period to verify the accuracy of user age verification data or continued account use within the verified age category; (2) when there is reasonable suspicion of account transfer or misuse outside the verified age category; or (3) at the time a user creates a new account with the app developer. (c) Permissible uses An app developer may use age category data to— (1) enforce any app developer-created age-related restrictions; (2) ensure compliance with applicable laws and regulations; and (3) implement any app developer-created features or defaults. (d) Restrictions An app developer may not— (1) enforce a contract or terms of service against a minor unless the app developer has verified through the covered app store provider that verifiable parental consent has been obtained; (2) knowingly misrepresent any material information in the parental consent disclosure; or (3) share age category data with an unaffiliated third party that is not a service provider or processor. (e) App age rating If an app developer provides an age rating or description of an app’s content to a covered app store or user, the age rating or description must be in plain and concise language. (f) Covered app store provider signal (1) In general Each app developer shall use a covered app store provider’s signal to determine the age category of a user. (2) Rule of construction Receipt of a covered app store provider’s signal serves as actual knowledge of a user’s age category.