California Online Safety lawmaking changed in measurable ways on September 10, 2026, when Governor Gavin Newsom signed a package of child online protection laws covering companion chatbots, social media design features, targeted advertising, privacy protections and AI-generated sexual depictions involving minors, according to the Governor’s Office September 10 announcement.
For families, schools and local youth organizations, the immediate point is not that every provision changed platform behavior overnight. Several requirements have later compliance dates. The policy shift is still significant because California has now placed more duties on companies that design youth-facing social media feeds, companion chatbot systems and data practices affecting children. Communities that support students will need to separate enacted law from pending implementation steps, especially as age assurance and reporting duties take effect on specified dates.
California Online Safety Rules Now In Force
What The September 10 Package Did
The September 10, 2026 package was signed before today’s date of October 5, 2026, so it should be discussed as enacted law, not as a proposal. The Governor’s Office described the package as addressing three broad areas: chatbot safety, restrictions on addictive social media features for minors and stronger privacy protections. The measures also addressed targeted advertising to children, K-12 pupil data restrictions and limits on sharing or selling minors’ personal data unless verifiable parental consent is obtained.
The laws sit within a wider state policy push around youth digital safety. For readers tracking related California measures, The Parative Project has also reviewed California child online protections across social media design, chatbot safety, student data and consent rules. That related record matters because schools and parent groups often encounter these issues together rather than as isolated legal categories.
Why Enacted Does Not Always Mean Fully Operational
A central caution is timing. Some parts of the legal framework were already effective, while other duties are tied to January 1, 2027 or July 1, 2027. Community discussions can become confused when a signed bill, an operative duty and an enforcement mechanism are treated as the same thing. They are not. A district presentation or parent information night should identify whether a requirement is already in effect, whether regulations are due, or whether platforms still have time before a reporting date begins.
That distinction is especially relevant for California Online Safety requirements involving age assurance and parental consent. Families may reasonably ask what they should expect from an app or social media platform now, but companies may be working toward deadlines set by statute or agency implementation.
Social Media Duties For Under-16 Users
California Online Safety And Parent Consent
The Protecting Our Kids from Social Media Addiction Act, SB 976, was enacted in September 2024. The California Department of Justice says the law makes it unlawful for platforms to provide addictive feeds or similar features to minors without verifiable parental consent and says age assurance and parental consent regulations must be implemented by January 1, 2027 under SB 976 guidance.
The September 10 package also included restrictions on features such as autoplay, algorithmic feeds and other engagement maximizers for users under 16 unless parental consent is obtained. The policy theory is direct: if a feature is designed to keep a minor engaged for longer periods, the state is requiring a clearer consent and age-assurance structure before that feature is offered to younger users.
For schools, this is not simply a household screen-time issue. Students bring platform habits into classrooms, after-school programs and peer relationships. Educators are not being asked to enforce platform compliance, but they will likely be asked to explain why certain app experiences may begin to look different for younger users as requirements become active. Parent-teacher organizations can help by focusing on verified dates and duties rather than assuming every platform will respond in the same way.
Age Signals And Verification
The research record identifies Digital Age Assurance provisions, including AB 1043 and related AB 1709 requirements, that call for non-identifying age-bracket signals and age verification before access to addictive features for users under 16. The relevant age brackets identified in the research are under 13, 13 to 15, 16 to 17 and 18 or older. These age-signal and verification requirements are identified as starting January 1, 2027.
The policy balance is delicate. Age checks can support enforcement of youth protections, but they also raise privacy questions if implemented poorly. The research describes the age-bracket signal as non-identifying, which is significant because it suggests a design meant to communicate age category rather than a child’s full identity. Local community groups should watch how implementation documents describe data minimization, parent consent and retention limits as January 1, 2027 approaches.
Companion Chatbots And AI Safeguards
Adam’s Law And Chatbot Protocols
Adam’s Law, SB 1119, was also signed on September 10, 2026. The research describes it as establishing a framework for companion chatbots that includes risk and safety protocols for minors, crisis protocols for suicidal ideation or self-harm, parental controls and independent safety audits. Those provisions matter because companion chatbots can simulate ongoing personal interaction, which differs from a one-time search query or static educational tool.
The research also identifies SB 243 as a companion chatbot law passed in 2025 and chaptered on October 13, 2025, with annual reporting obligations beginning July 1, 2027. Under that framework, when an operator knows a user is a minor, the research says the operator must disclose that the chatbot is AI, remind users during long ongoing interactions that it is AI and that they should take a break, and prevent sexually explicit content or instructions.
For youth-serving institutions, the practical question is how to talk about AI systems without exaggerating either their benefits or their risks. A school club, library program or community center should avoid telling minors that a chatbot is a friend, counselor or confidential adult substitute. At the same time, local guidance should stay factual: the law places duties on covered operators, and families should read platform notices, parental control options and safety disclosures with care.
Deepfakes And Sexual Exploitation Material
The September 10 package also addressed digitally altered or AI-generated sexual depictions involving minors. The research states that California expanded child sexual exploitation definitions so such depictions are clearly covered, and that civil actions may seek relief up to $250,000 per action for third parties who knowingly facilitate distribution.
This is a community safety issue for schools because AI-generated sexual images can be used in harassment, coercion or bullying. School leaders should be careful not to describe every harmful image dispute as a criminal matter without legal review, but they can explain that California law now treats AI-generated or digitally altered sexual depictions involving minors as a serious category of harm. That framing gives families a firmer basis for reporting, documentation and support without relying on rumor or social media posts.
Privacy, Advertising And Student Data

Limits On Ads And Data Sharing
The Governor’s Office described expanded protections that include prohibiting targeted ads to children, tighter K-12 pupil data restrictions and limits on sharing or selling minors’ personal data unless verifiable parental consent is obtained. For education advocates, this may be one of the most consequential parts of the package because student privacy often sits at the intersection of classroom technology, home devices and commercial platforms.
A family may think of social media, homework software and entertainment apps as separate categories. In practice, young people move between them throughout the day. The same student may use a school-issued device, a personal phone and a household tablet. The California Online Safety framework therefore creates an opportunity for local institutions to review what data is collected, who receives it and which consent process applies.
What Families Can Ask Locally
Community engagement should begin with concrete questions rather than broad claims about technology. Families and youth organizations can ask schools and vendors to explain:
- Which digital tools collect student or minor data, and for what stated purpose.
- Whether any tool uses AI chat features, companion-style interaction or recommendation feeds.
- How parental consent is obtained, recorded and updated.
- Whether targeted advertising is present in any youth-facing service.
- Who reviews vendor compliance when state requirements change on January 1, 2027 and July 1, 2027.
These questions do not require a school district to act as a state regulator. They do support better recordkeeping and clearer communication. For broader public-interest coverage in the same network, visit EarthTimes to explore civic and policy issues affecting families and communities.
California Online Safety In Community Practice
How Local Groups Can Respond
The most useful local response is a dated implementation calendar. A parent group or district technology committee can list the September 10, 2026 signing date, January 1, 2027 age-assurance and related requirements, and July 1, 2027 chatbot reporting obligations. That calendar should distinguish what the state has enacted from what companies must still build or report.
The second task is education. Students should know that an AI companion system is not a human confidant. Parents should know that consent may become a key gatekeeping step for addictive social media features. Educators should know that privacy restrictions and data-sharing limits are not only legal compliance issues; they affect trust between schools and families.
The third task is restraint. California has enacted a broad set of protections, but the practical effect will depend on platform compliance, agency implementation, independent audits and how families use the tools made available to them. The safest community message is factual and limited: California Online Safety laws now set new standards for minors’ interactions with social media and AI systems, with several major compliance dates still ahead in 2027.

