Changeflow GovPing Government & Legislation HB26-1148 Protections for Youth on Social Media
Priority review Consultation Added Consultation

HB26-1148 Protections for Youth on Social Media

Favicon for leg.colorado.gov CO Legislature Bill Search
Detected
Email

Summary

Colorado bill HB26-1148 would impose sweeping duties on "covered businesses" (online services generating majority revenue digitally, offering gaming to minors, and collecting personal data) regarding minors' data privacy. The bill mandates default high-privacy settings, 15-day account deletion rights, data minimization, and prohibits push notifications to minors between midnight and 6am. A 5% transaction fee on add-on purchases by minors would be credited to the state public school fund.

What changed

HB26-1148 would establish a comprehensive minor protection framework for covered businesses (online services with gaming features likely accessed by minors, collecting personal data). Covered businesses must configure default privacy settings to maximum protection, provide tools for account unpublishing/deletion within 15 days, immediately delete age-determination data once minor status is confirmed, and may not collect data beyond what is necessary for active engagement. The bill bans single-click privacy rollbacks, prompts to weaken settings, location tracking without conspicuous alerts, algorithmic content prioritization for minors, and overnight push notifications.

Technology companies operating online gaming services or social media platforms accessible to Colorado minors face significant operational changes. The broad definition of 'covered business' captures any entity doing business in Colorado with majority online revenue and minor-accessible gaming—potentially including out-of-state companies. The 5% add-on transaction fee imposes new costs on gaming monetization. Compliance teams should monitor the legislative process and assess whether current privacy-by-default practices, data retention policies, and notification systems meet the proposed requirements.

What to do next

  1. Monitor bill progress through Colorado legislature
  2. Assess whether your online service qualifies as a 'covered business' under the definition
  3. Prepare compliance roadmap for new minor data protection obligations including 15-day deletion requests, notification restrictions, and transaction fees

Archived snapshot

Apr 8, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

HB26-1148

Protections for Youth on Social Media

| Type | Bill |
| --- | --- |
| Session | 2026 Regular Session |
| Subjects | Children & Domestic Matters |
Concerning protections for minors who access certain social media.

Recent Bill (PDF) Recent Fiscal Note (PDF) Bill Summary:

Under the bill, a "covered business" is defined as a sole proprietorship, a partnership, a limited liability company, a corporation, an association, or another legal entity, or an affiliate of such a legal entity, that:

  • Conducts business in the state and generates a majority of its annual revenue from online services;
  • Makes available online gaming services, products, or features that are reasonably likely to be accessed by a user who is a minor or who the covered business labels as a minor (covered minor);
  • Collects users' personal data or has users' personal data collected on its behalf by a processor; and
  • Solely or jointly with others determines the purposes and means of the processing of users' personal data.
    The bill states that a covered business that processes the personal data of a covered minor owes a minimum duty of care to the covered minor. The bill also requires a covered business to:

  • Configure default privacy settings provided to a covered minor to the highest level of privacy and to include certain default settings;

  • Provide a prominent, accessible, and responsive tool to allow a covered minor to request that the covered minor's account be unpublished or deleted and, if the business receives such a request, to honor it within 15 days; and

  • Immediately delete all data that relates to the determination of a user's age after it is determined that the user is a covered minor.
    The bill prohibits a covered business from:

  • Providing a covered minor with a single setting that makes all of the default privacy settings less protective at once;

  • Requesting or prompting a covered minor to make their privacy settings less protective;

  • Collecting, selling, sharing, or retaining personal data of a covered minor that is not necessary to provide an online gaming service, product, or feature with which the covered minor is actively and knowingly engaged;

  • Using previously collected personal data of a covered minor for any purpose other than a purpose for which the personal data was collected;

  • Permitting an individual to monitor the online activity of a covered minor or to track the location of the covered minor without providing a conspicuous signal to the covered minor when the covered minor is being monitored or tracked;

  • Using the personal data of a covered minor to select, recommend, or prioritize media for the covered minor unless the covered minor makes certain requests or takes certain actions warranting such conduct by the covered business; or

  • Sending push notifications to a covered minor between 12 midnight and 6 a.m.
    The bill imposes additional specific requirements and prohibitions for a covered business that collects users' personal data for the purpose of conducting age assurance.

The bill requires a covered business to ensure that the purchase price for an online gaming service, product, or feature that is made available through the covered business's online gaming service, product, or feature and that is reasonably likely to be accessed by a covered minor is listed in United States dollars at the point of sale.

A covered business shall impose and collect a fee on each add-on transaction that is conducted by a covered minor through the covered business's online gaming service, product, or feature. The amount of the fee is 5% of the amount of the transaction. Money collected as such fees is credited to the state public school fund.

The bill requires a social media platform to provide certain information on its website or mobile application concerning privacy policies and the use of algorithms. A social media platform is prohibited from using an algorithmic recommendation system to sell or otherwise distribute an illicit substance to a covered minor.

(Note: This summary applies to this bill as introduced.)

Prime Sponsors


Representative

Yara Zokaie
Representative

Jenny Willford
Senator

Mike Weissman
Senator

Dylan Roberts

Committees

House

Judiciary

Share:

If you require reasonable accessibility accommodation to access this content, please email accessibility@coleg.gov.


Status

Under Consideration

Introduced

Under Consideration


Related Documents & Information

| Date | Version | Documents |
| --- | --- | --- |
| 02/04/2026 | Introduced | PDF |

| Date | Version | Documents |
| --- | --- | --- |
| 03/09/2026 | Initial Fiscal Note | PDF |

| Activity | Vote | Documents |
| --- | --- | --- |
| Postpone House Bill 26-1148 indefinitely. | The motion passed on a vote of 8-3. | Vote summary |

| Activity | Vote | Documents |
| --- | --- | --- |
Hearing Summary
| Date | Amendment Number | Committee/ Floor Hearing | Status | Documents |
| --- | --- | --- | --- | --- |
| 04/07/2026 | L.011 | HOU Judiciary | Lost | PDF |
| 04/07/2026 | L.010 | HOU Judiciary | Passed [] | PDF |
| 04/07/2026 | L.009 | HOU Judiciary | Passed [
] | PDF |
| 04/07/2026 | L.007 | HOU Judiciary | Passed [] | PDF |
| 04/07/2026 | L.006 | HOU Judiciary | Passed [
] | PDF |
| 04/07/2026 | L.005 | HOU Judiciary | Passed [*] | PDF |
* Amendments passed in committee are not incorporated into the measure unless adopted by the full House or Senate.

** The status of Second Reading amendments may be subsequently affected by the adoption of an amendment to the Committee of the Whole Report. Refer to the House or Senate Journal for additional information.

| Date | Location | Action |
| --- | --- | --- |
| 04/07/2026 | House | House Committee on Judiciary Postpone Indefinitely |
| 03/18/2026 | House | House Committee on Judiciary Witness Testimony and/or Committee Discussion Only |
| 02/04/2026 | House | Introduced In House - Assigned to Judiciary |
Prime Sponsor

Rep. J. Willford | Rep. Y. Zokaie


Sen. D. Roberts | Sen. M. Weissman

Sponsor

(None) Co-Sponsor

(None)

Quick Links

Named provisions

Definitions - Covered Business Duty of Care to Covered Minors Privacy Settings Requirements Account Deletion Rights Age Data Deletion Prohibited Practices Push Notification Restrictions Age Assurance Requirements Transaction Fee on Add-Ons

Get daily alerts for CO Legislature Bill Search

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CO Legislature.

What's AI-generated?

The plain-English summary, classification, and "what to do next" steps are AI-generated from the original text. Cite the source document, not the AI analysis.

Last updated

Classification

Agency
CO Legislature
Instrument
Consultation
Legal weight
Non-binding
Stage
Consultation
Change scope
Substantive
Document ID
HB26-1148

Who this affects

Applies to
Technology companies Manufacturers Retailers
Industry sector
5112 Software & Technology
Activity scope
Minor data collection Online platform regulation Privacy settings configuration
Geographic scope
Colorado US-CO

Taxonomy

Primary area
Data Privacy
Operational domain
Compliance
Topics
Consumer Protection Artificial Intelligence

Get alerts for this source

We'll email you when CO Legislature Bill Search publishes new changes.

Optional. Personalizes your daily digest.

Free. Unsubscribe anytime.