MacRumors web signal

Apple Enforces Texas Age Verification in App Store

apple regulation platform policy age verification app stores

Key insights

  • Texas SB 2420 requires App Store users to confirm they are 18 or older, with minors needing parental consent via Family Sharing for every download.
  • A federal judge called the law "more likely than not unconstitutional," but the Fifth Circuit stayed that injunction, letting enforcement proceed during appeals.
  • Violations of SB 2420 carry civil penalties up to $10,000 each, and Google's Play Store faces the same obligations as Apple.

Why this matters

The Fifth Circuit's decision to stay a federal injunction that found Texas SB 2420 "more likely than not unconstitutional" demonstrates that state-level age verification mandates can proceed to enforcement even when a court has preliminarily identified serious First Amendment concerns. For developers, the Declared Age Range API mandate and parental re-consent requirements for "significant changes" add ongoing compliance overhead that directly shapes app design, update cadence, and distribution strategy in Texas. Google's identical obligations under SB 2420 confirm this is a platform-layer enforcement model covering both major app stores simultaneously, establishing a dual-platform compliance baseline that affects every developer distributing apps in the state.

Summary

Apple is enforcing Texas SB 2420 starting June 4, 2026, requiring App Store users in the state to verify their age before downloading apps. Texas residents must confirm they are 18 or older when creating an Apple Account. Minors need Family Sharing enrollment with parental consent for every download. Developers must implement Apple's Declared Age Range API to categorize apps and obtain parental approval before minors install them. Violations carry civil penalties up to $10,000 each. Essentially: (Apple, Google) are now age-gated platforms in Texas, with Google's Play Store facing identical obligations. - The Fifth Circuit stayed a federal court injunction calling the law "more likely than not unconstitutional," allowing enforcement to proceed while the constitutional case continues. - CEO Tim Cook personally appealed to Governor Greg Abbott, arguing the law forces users to share personally identifiable information even for basic apps. The constitutional challenge remains live on appeal, meaning the enforcement landscape could still shift depending on how the Fifth Circuit rules on the merits.

Potential risks and opportunities

Risks

  • Developers who have not integrated the Declared Age Range API by June 4, 2026 face civil penalties up to $10,000 per violation in Texas, with no grace period mentioned in the law or Apple's guidance
  • If the Fifth Circuit ultimately strikes down SB 2420, Apple and Google will have deployed compliance infrastructure and changed account flows for a law ruled unconstitutional, creating pressure and cost to unwind those systems
  • Apple's collection of personally identifiable information to verify user ages creates new data exposure risk for Texas App Store users and potential liability for Apple under state privacy statutes

Opportunities

  • Identity verification and age-check infrastructure vendors gain a direct procurement window as Apple and Google build out SB 2420 compliance systems at platform scale
  • Apple's Family Sharing ecosystem sees mandated enrollment growth in Texas, since under-18 users are now legally required to use it, strengthening Apple's parental control platform footprint
  • Developers who build early Declared Age Range API integrations and parental consent workflows can use SB 2420 compliance as a distribution advantage in the Texas market ahead of less-prepared competitors

What we don't know yet

  • How the Fifth Circuit will rule on the constitutional merits of SB 2420, given the district court found it "more likely than not unconstitutional" in December when it blocked the January 1, 2026 launch
  • What threshold constitutes a "significant change" requiring developers to re-obtain parental consent, as the article does not specify the law's definition
  • Whether Apple's age verification relies on self-attestation, Apple Account data, or third-party identity services, since the technical mechanism is not described in public reporting