New York’s Stop Addictive Feeds Exploitation (SAFE) for Kids Act takes effect on January 25, 2027, marking a major shift in the way all feed-driven apps, websites and online platforms are regulated in the state.
The SAFE for Kids Act is likely to be followed by similar legislation in other states and at the federal level. As of August 2026, 21 states have introduced bills regulating social media usage by minors, ranging from age verification requirements to rules on “addictive feeds.” In Congress, both the House (KIDS Act) and Senate (KOSA) are debating bills to protect children online, and while each enjoys bipartisan report, lawmakers continue to debate the different approaches.
When considered alongside recently passed legislation to protect children who use AI platforms, it’s clear that companies who use social media and other algorithm-driven platforms to reach their customers are operating in a new regulatory landscape.
What Does the SAFE for Kids Act Do?
The SAFE for Kids Act is a first-in-the-nation attempt to protect children from what New York state legislators have deemed “addictive” feeds on social media platforms, websites and apps. The legislation covers most major social media companies and any other platforms that rely on user-generated content and algorithmic feeds.
The primary requirements of the law include:
- No algorithmic feeds by default for users under the age of 18
- No nighttime notifications (12am-6am) for users under the age of 18
- Age verification or parental consent to access restricted content
It’s likely that other states will soon follow New York’s lead. New York has also passed several laws regulating the use of AI platforms by minors, including the RAISE Act, SOPA, and a bill restricting access to AI companions for minors that has already passed both houses of the state legislature. Together, these initiatives are a clear indicator that protecting children online will continue to be a priority in the state and across the country.
What the SAFE for Kids Act Means for the Future of Online Platforms
The impact of the SAFE for Kids Act will likely extend far beyond New York’s borders. Companies that build online platforms, apps, and websites will likely integrate these protections for children across the board rather than limit their application to one state’s residents. Those companies may be incentivized by the positive PR earned by proactively protecting children before they are legally obliged to outside of New York—especially considering recent class action lawsuits faced by social media giants like Meta, TikTok and other platforms.
The law may also create a ripple effect that improves protections and privacy for all users under the age of 18 the same way that the European Union’s General Data Protection Regulation (GDPR) influenced companies to improve how they handle user data far outside of Europe.
Even companies that don’t operate algorithmic-feed driven platforms would be wise to proactively incorporate protective measures for children on their own websites, platforms, and apps. A 2026 Common Sense Media survey found an astonishing 96% of U.S. adults survey want businesses to protect children online with measures like age verification and parental consent. This includes any business that sells goods and services online.
The New Regulatory Landscape for User Data
Protecting children online boils down to protecting their data. Websites, apps, and social media platforms must maintain strict data privacy and add explicit consent so algorithms can’t build addictive feeds. The California Invasion of Privacy Act (CIPA), a 1967 wiretapping law that today is being applied to websites and other online communications, requires explicit user consent for how data is collected, used, and stored.
Like the SAFE for Kids Act, CIPA essentially blocks online platforms from tracking data without consent, with the former aimed at protecting minors and allowing only their parents to provide that consent. In addition, CIPA impacts data privacy far outside state borders in the same way the SAFE for Kids Act will have implications beyond New York residents.
If you do business in New York, California, or anywhere else in the United States, integrating high data privacy standards for all users and specific protections for children is quickly shifting from a smart PR move to an essential business practice.