Illinois Enacts Social Media Age-Assurance Law (HB 5511)
Independently fact-checked against primary sources (last audited June 8, 2026). · 3 primary sources cited on this page. How we verify our legal content
Governor JB Pritzker signed HB 5511, the Children's Online Social Media Safety Act, into law on July 31, 2026. The measure, now Public Act 104-0664, cleared the Illinois General Assembly on June 1, 2026 by a 57-0 Senate vote and a 113-0 House concurrence. It verifies users' ages through the device operating system and applies default protections to minors' accounts.
Information last verified on August 13, 2026, against the enrolled bill text on ilga.gov and Governor Pritzker's July 31, 2026 signing announcement. HB 5511 is now Public Act 104-0664.
Jurisdiction scope: This article addresses Illinois House Bill 5511 and the age-assurance and minor-protection duties it would create under Illinois law. It does not state the age-verification or privacy law of other states. HB 5511 was signed into law on July 31, 2026 as Public Act 104-0664. For Illinois privacy law generally, see Illinois data privacy laws.
What Happened
On June 1, 2026, the Illinois General Assembly gave final passage to House Bill 5511, the Children's Online Social Media Safety Act. The Senate approved it 57-0 and the House concurred 113-0 the same day. Governor JB Pritzker, who proposed the measure during his February 2026 budget address, signed the bill into law on July 31, 2026. It is now Public Act 104-0664, and its provisions take effect January 1, 2028.
The legislation pairs two ideas: an age-assurance signal delivered through the device operating system, and design defaults that limit certain features for accounts that belong to minors. An earlier House version passed 82-27 in April 2026 before the chambers settled on the final text and the near-unanimous concurrence votes. Supporters frame the bill as a way to shield minors from addictive design and harmful content without barring them from using social media outright.
What the Law Actually Says
HB 5511 places the first obligation on operating-system providers, the companies that run the software on phones and tablets. No later than January 1, 2028, an operating-system provider must offer an accessible interface at account setup for the account holder to indicate a birth date or age, provide an age-category signal to an operator that requests one, and send only the minimum information necessary to do so. The model puts the age determination at the device layer rather than asking each website to collect an uploaded ID.
The second obligation falls on operators, the social media platforms. An operator may not offer a covered platform in Illinois without conducting age verification, and for every user it has actual knowledge is a minor, it must apply specified default settings. Those defaults address the design features the bill targets: algorithmic or personalized feeds, the visibility of a minor's profile, what media a minor can be shown, location sharing, and notifications during nighttime hours. The bill does not prevent a minor from downloading or using an app; it changes the default experience inside it.
Enforcement runs through the Illinois Attorney General, and the Act does not create a private right of action for individuals to sue. A court may award the Attorney General a civil penalty of $50,000 for each violation by a covered manufacturer or covered operator, with no separate tier for negligent versus intentional conduct. Illinois already regulates biometric data through its Biometric Information Privacy Act (BIPA), one of the few state privacy laws that carries a private right of action and statutory damages; for that framework, see Illinois biometric privacy law (BIPA) and the broader Illinois data privacy laws overview.
Analysis: Why This Matters
The following is analysis from the Recording Law Editorial Team.
The notable feature of HB 5511 is the mechanism. Most of the age-verification laws that states have passed in the last two years put the burden on the website: visit a covered site, upload a government ID or use a third-party check, then gain access. That model has drawn repeated First Amendment challenges. Illinois instead routes the age signal through the device operating system, so the platform receives an age category rather than a copy of an ID. Supporters argue this is less privacy-invasive and harder to challenge because the user is not handing identity documents to every site.
The constitutional backdrop is real. In Free Speech Coalition v. Paxton (2025), the U.S. Supreme Court applied intermediate scrutiny and upheld a Texas law requiring age verification for adult content, which gave states room to legislate in this space. Laws that regulate how minors experience general-audience social media, rather than access to explicit material, sit on different footing and have faced their own court challenges elsewhere. We are not predicting how any challenge to the Illinois approach would resolve. What is clear is that the device-signal design is a deliberate attempt to deliver age assurance with a smaller data footprint, and now that Illinois has enacted the law, other legislatures are watching which model holds up in court.
How This Affects You
If you are a parent in Illinois, the bill is built around a setting tied to the device account, so the age associated with a child's device would drive the default protections inside covered apps. If you are an older teenager, the bill changes defaults rather than blocking access, and the operating-system signal reports an age category rather than your full identity. These are general descriptions of how the bill is structured, not advice about any particular family's situation.
If you operate a platform or an operating system, the threshold questions are whether you are a covered operator or provider and what the January 1, 2028 timeline requires of your account-setup flow and your default settings for minors. A general summary is not a substitute for a close read of the enacted text and advice from an Illinois-licensed lawyer where the stakes warrant it. Enforcement runs through the Attorney General, not private suits.
This is general legal information, not legal advice. It covers Illinois House Bill 5511, now Public Act 104-0664, and reflects sources verified on August 13, 2026. Laws change; consult a lawyer licensed in your jurisdiction about your specific situation.
Related articles
- Illinois data privacy laws: BIPA and consumer rights
- Illinois biometric privacy law (BIPA)
- Texas app store age-verification law (SB 2420)
- Iowa age-verification law (HF 864)
Last updated: 2026-08-13. HB 5511 was signed into law July 31, 2026 as Public Act 104-0664; details verified as of August 13, 2026.
Frequently Asked Questions
Has Illinois HB 5511 become law?
Yes. Governor JB Pritzker signed HB 5511 into law on July 31, 2026. It is now Public Act 104-0664, the Children's Online Social Media Safety Act, and its provisions take effect January 1, 2028.
How does the bill verify a user's age?
Through the device operating system. Operating-system providers must offer an age-signal interface at account setup and pass an age-category signal to apps that request one, rather than each website collecting an uploaded ID.
Does the bill ban minors from social media?
No. It does not prevent minors from downloading or using apps. For users an operator knows to be minors, it requires default settings that limit features such as algorithmic feeds, profile visibility, location sharing, and nighttime notifications.
When would the requirements take effect?
The Act takes effect January 1, 2028. Device manufacturers must offer the age-signal interface by that date (by July 1, 2028 for devices set up earlier), and covered operators must begin requesting the age-bracket signal by July 1, 2028.
Who enforces HB 5511?
The Illinois Attorney General. The Act does not create a private right of action; a court may award the Attorney General a civil penalty of $50,000 for each violation by a covered manufacturer or covered operator.
How is this different from Texas's age-verification law?
Texas's app-store model requires age checks at the app-store and account level for downloads. Illinois's bill places the age signal at the device operating-system layer and focuses on default protections inside social media apps for minors.
Updates
Updated to reflect HB 5511 being signed into law July 31, 2026 as Public Act 104-0664, and corrected the enforcement civil-penalty figures to match the enrolled bill text ($50,000 per violation, no negligent/intentional tier) rather than the earlier $2,500/$7,500-per-child figures.
Independently fact-checked against the cited primary sources
Sources and References
- Illinois HB 5511 / Public Act 104-0664, Children's Online Social Media Safety Act, enrolled bill text (104th General Assembly, signed July 31, 2026)(ilga.gov).gov
- Free Speech Coalition, Inc. v. Paxton, 606 U.S. 461 (2025), upholding age verification for sexually explicit content under intermediate scrutiny (Cornell Legal Information Institute)(law.cornell.edu)
- Illinois Biometric Information Privacy Act (BIPA), 740 ILCS 14, standing Illinois biometric privacy statute(ilga.gov).gov
- Capitol News Illinois, Illinois bill limits how social media companies can target feeds to children (June 2026), corroborating passage and vote tallies(capitolnewsillinois.com)
- Illinois General Assembly, HB 5511 bill status page confirming Public Act 104-0664, approved July 31, 2026(ilga.gov).gov
- Office of Governor JB Pritzker, press release announcing the July 31, 2026 signing of the Children's Online Social Media Safety Act(gov-pritzker-newsroom.prezly.com)