Illinois Passes Social Media Age-Assurance Bill (HB 5511)

The Illinois General Assembly gave final passage to HB 5511, the Children's Online Social Media Safety Act, on June 1, 2026, by a 57-0 Senate vote and a 113-0 House concurrence. The bill would verify users' ages through the device operating system and apply default protections to minors' accounts. It awaits Governor JB Pritzker, who has pledged to sign it.

Information last verified on June 8, 2026. This is a developing story; we update it as the record changes.

Jurisdiction scope: This article addresses Illinois House Bill 5511 and the age-assurance and minor-protection duties it would create under Illinois law. It does not state the age-verification or privacy law of other states, and it describes a bill that has passed the legislature but is not yet enacted as of June 8, 2026. For Illinois privacy law generally, see Illinois data privacy laws.

What Happened

On June 1, 2026, the Illinois General Assembly gave final passage to House Bill 5511, the Children's Online Social Media Safety Act. The Senate approved it 57-0 and the House concurred 113-0 the same day. Governor JB Pritzker, who proposed the measure during his February 2026 budget address, celebrated the vote and said he would sign it. As of June 8, 2026, he had not yet signed the bill, so it is not yet law and its provisions are not in force.

The legislation pairs two ideas: an age-assurance signal delivered through the device operating system, and design defaults that limit certain features for accounts that belong to minors. An earlier House version passed 82-27 in April 2026 before the chambers settled on the final text and the near-unanimous concurrence votes. Supporters frame the bill as a way to shield minors from addictive design and harmful content without barring them from using social media outright.

What the Law Actually Says

HB 5511 places the first obligation on operating-system providers, the companies that run the software on phones and tablets. No later than January 1, 2028, an operating-system provider must offer an accessible interface at account setup for the account holder to indicate a birth date or age, provide an age-category signal to an operator that requests one, and send only the minimum information necessary to do so. The model puts the age determination at the device layer rather than asking each website to collect an uploaded ID.

The second obligation falls on operators, the social media platforms. An operator may not offer a covered platform in Illinois without conducting age verification, and for every user it has actual knowledge is a minor, it must apply specified default settings. Those defaults address the design features the bill targets: algorithmic or personalized feeds, the visibility of a minor's profile, what media a minor can be shown, location sharing, and notifications during nighttime hours. The bill does not prevent a minor from downloading or using an app; it changes the default experience inside it.

Enforcement runs through the Illinois Attorney General, and the civil penalties the bill authorizes are recoverable only by that office. The penalty is up to $2,500 for each affected child for a negligent violation and up to $7,500 for each affected child for an intentional violation. Illinois already regulates biometric data through its Biometric Information Privacy Act (BIPA), one of the few state privacy laws that carries a private right of action and statutory damages; for that framework, see Illinois biometric privacy law (BIPA) and the broader Illinois data privacy laws overview.

Analysis: Why This Matters

The following is analysis from the Recording Law Editorial Team.

The notable feature of HB 5511 is the mechanism. Most of the age-verification laws that states have passed in the last two years put the burden on the website: visit a covered site, upload a government ID or use a third-party check, then gain access. That model has drawn repeated First Amendment challenges. Illinois instead routes the age signal through the device operating system, so the platform receives an age category rather than a copy of an ID. Supporters argue this is less privacy-invasive and harder to challenge because the user is not handing identity documents to every site.

The constitutional backdrop is real. In Free Speech Coalition v. Paxton (2025), the U.S. Supreme Court applied intermediate scrutiny and upheld a Texas law requiring age verification for adult content, which gave states room to legislate in this space. Laws that regulate how minors experience general-audience social media, rather than access to explicit material, sit on different footing and have faced their own court challenges elsewhere. We are not predicting how any challenge to the Illinois approach would resolve. What is clear is that the device-signal design is a deliberate attempt to deliver age assurance with a smaller data footprint, and other legislatures are watching which model holds up.

How This Affects You

If you are a parent in Illinois, the bill is built around a setting tied to the device account, so the age associated with a child's device would drive the default protections inside covered apps. If you are an older teenager, the bill changes defaults rather than blocking access, and the operating-system signal reports an age category rather than your full identity. These are general descriptions of how the bill is structured, not advice about any particular family's situation.

If you operate a platform or an operating system, the threshold questions are whether you are a covered operator or provider and what the January 1, 2028 timeline requires of your account-setup flow and your default settings for minors. A general summary is not a substitute for a close read of the enacted text, if the bill is signed, and advice from an Illinois-licensed lawyer where the stakes warrant it. Enforcement runs through the Attorney General, not private suits.

This is general legal information, not legal advice. It covers Illinois House Bill 5511 as passed by the legislature and reflects sources verified on June 8, 2026. The bill is not yet enacted, laws change, and this story is developing; consult a lawyer licensed in your jurisdiction about your specific situation.

---

Related articles

• Illinois data privacy laws: BIPA and consumer rights
• Illinois biometric privacy law (BIPA)
• Texas app store age-verification law (SB 2420)
• Iowa age-verification law (HF 864)

---

Last updated: 2026-06-08. This is a developing story; details verified as of June 8, 2026.