The Stop Profiling Youth and Kids (SPY Kids) Act bars covered online platforms from conducting market- or product-focused research on users the platform knows are children (under 13). For users the platform knows are teens (ages 13–16), the bill permits such research only with verifiable parental consent.
The statutory vocabulary borrows COPPA definitions and builds a narrow definition of "covered platform" aimed at publicly available, user-generated content services that use engagement design features and personal information for advertising or recommendations.
Why this matters: the bill targets a suite of measurement, analytics, and product‑testing practices that underlie targeted advertising and product design for minors. If enacted, many social networks, video and image-sharing sites, and apps that host follower/searchable usernames and use engagement mechanics would face new prohibitions, documentation and parental‑consent burdens, and enforcement by the Federal Trade Commission with a broad federal preemption of state laws on the same issue.
At a Glance
What It Does
The bill prohibits covered platforms from performing market- or product-focused research on users under 13 and conditions research on 13–16-year-olds on obtaining verifiable parental consent. It defines covered platforms by five criteria: public availability, searchable/followable usernames, a predominant user-generated content purpose, use of ‘‘design features’’ that increase minor engagement, and use of personal information for advertising or recommendations.
Who It Affects
The definition targets social networks, video- and image-sharing services, and other UGC platforms that use engagement mechanics and personalized ads or recommendations. It also affects advertisers, market-research vendors, in‑house analytics teams, and any third parties conducting product-testing or segmentation that uses platform-held personal data about minors.
Why It Matters
The bill alters what kinds of research and measurement platforms can perform on minors and shifts responsibility onto platforms to know user ages and obtain parental consent for teen research. It preserves an advertising‑measurement carve-out but leaves open what qualifies as ‘‘market or product-focused’’ research, creating legal uncertainty for compliance and product teams.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
The SPY Kids Act erects a bright-line protection for children under 13: covered platforms may not conduct market or product‑focused research if the platform knows the user is a child. For teens aged 13–16, the bill permits the same research only after the platform obtains verifiable parental consent, which imports COPPA’s verification standard.
The text does not define "market or product‑focused research," so enforcement will hinge on how the FTC interprets the phrase in rulemaking or actions.
The bill’s reach depends on the definition of "covered platform," which requires five elements to be present together: public availability, the ability to create a searchable/followable username or identifier, a predominant purpose of facilitating user-generated content, the presence of a ‘‘design feature’’ intended to increase minor engagement (examples listed include infinite scroll, rewards, notifications, visual badges, appearance‑altering filters), and use of personal information to advertise, market, or recommend content. This combination aims to draw in mainstream social and UGC services rather than general-purpose websites without social features.Enforcement is civil and through the Federal Trade Commission by treating violations as unfair or deceptive acts under the FTC Act; violators become subject to the FTC’s remedies and penalties.
States can bring parens patriae suits on behalf of residents, but if the FTC or the U.S. Attorney General has already filed a federal action against a defendant, states may be barred from bringing parallel suits during the pendency of that federal action. The Act also expressly preserves COPPA and prevents conflicts with a particular subsection of the FTC Act.Practically, platforms must (1) have reliable age‑detection and ‘‘knows/knowsing’’ compliance protocols—because the statute uses a knowledge standard that includes willful disregard—and (2) change data collection, analytics, A/B testing, and market‑research practices involving minors.
The bill includes an explicit exception: processing personal information solely for measuring or reporting advertising or content performance (including independent measurement) is not limited by this Act, but the boundary between allowed measurement and barred market research is likely to be contested.
The Five Things You Need to Know
The bill bars covered platforms from conducting market or product‑focused research on users the platform knows are under 13.
Research on users aged 13–16 is permitted only after the platform obtains verifiable parental consent under COPPA’s verification standard.
A "covered platform" must meet five simultaneous tests: public availability, searchable/followable usernames, predominant UGC purpose, use of specified engagement "design features," and use of personal information for advertising or recommendations.
Enforcement is by the FTC treating violations as unfair or deceptive acts under the FTC Act; states may sue as parens patriae but cannot maintain an action while a federal action is pending against the same defendant.
The Act preserves COPPA and includes an explicit carve‑out allowing processing of personal information solely for measuring or reporting ad/content performance, but does not define "market or product‑focused research.".
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Short title
Declares the bill’s short titles: the "Stop Profiling Youth and Kids Act" and the "SPY Kids Act." This is a standard heading provision that has no operational effect beyond how the law will be cited in regulations, guidance, and enforcement actions.
Definitions (age bands, covered platform, design features, knowledge standard)
Sets the core terms the rest of the Act uses. Key entries: "child" is under 13, "teen" is 13–16, and "user" is an account holder or profile creator. "Covered platform" is a conjunctive definition — all listed elements must be present — which narrows the universe to public UGC services with social identifiers, engagement design features, and personalized advertising or recommendations. "Design feature" is defined and exemplified (infinite scroll, rewards, notifications, badges, appearance filters). The Act adopts a strict "know/knows" standard meaning actual knowledge or willful disregard, raising the compliance bar for platforms’ age‑verification and recordkeeping practices.
Market research prohibitions and parental‑consent rule
Imposes the substantive prohibitions: an absolute ban on market/product research about children under 13 that the platform knows about, and a consent‑gated permission for teens 13–16. The provision cross‑references COPPA’s verifiable parental consent standard for teens, but the bill does not attempt to define "market or product‑focused research," leaving room for interpretation about whether certain analytics, segmentation, or product experiments fall inside or outside the ban. It also contains a carve‑out that allows processing of personal information solely for measuring or reporting advertising or content performance (including independent measurement). Compliance will therefore turn on operational distinctions between analytics used for ads/performance measurement and analytics used for market or product research.
Enforcement by FTC and State parens patriae actions
Designates violations as unfair or deceptive acts under the FTC Act and gives the FTC its ordinary investigative and remedial toolkit. The Act makes clear that penalties and privileges under the FTC Act apply. States may sue on behalf of residents (parens patriae) for injunctive relief, monetary relief, and other remedies, but must give notice to the FTC and are limited if a federal action against the same defendant is pending. The notice and intervention language create a formal coordination channel between state enforcers and the FTC but also a gating mechanism that can delay or channel multiple suits into a federal enforcement posture.
Interaction with other laws, federal preemption, and effective date
Section 5 preserves COPPA and prevents conflicts with 18(h) of the FTC Act. Section 6 contains a sweeping preemption clause that bars States and political subdivisions from prescribing or enforcing any law that "relates to the provisions of this Act," which is broader than a narrow field preemption and could preclude complementary or divergent state rules about youth research. Section 7 sets the Act’s effective date at 90 days after enactment, giving platforms a short implementation window unless the statute provides otherwise.
This bill is one of many.
Codify tracks hundreds of bills on Privacy across all five countries.
Explore Privacy in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Children under 13 — the Act creates a statutory prohibition on market or product‑focused research that platforms know concerns these users, reducing the likelihood of targeted product design and advertising research directed at young children.
- Parents and guardians — parents gain a statutory gatekeeping role for research involving 13–16‑year‑olds through the verifiable parental consent requirement, increasing parental control over teen‑targeted research.
- Privacy and child‑safety advocates — the law places explicit limits on commercial profiling and research techniques aimed at minors and elevates a national standard for youth protections.
Who Bears the Cost
- Covered platforms (social networks, UGC video/image services, apps with searchable usernames) — they must redesign data‑collection, analytics and research practices, implement reliable age‑detection and consent flows, and potentially stop market segmentation or testing based on minor users.
- Advertisers and market‑research vendors — loss of access to minor‑targeted research and audience insights will force changes to targeting strategies and may reduce the value of youth segments.
- Academic and independent researchers conducting market‑or product‑focused studies on minors — without a clear research exception, researchers using platform data for product or market analysis may need parental consent or rely on platforms to provide de‑identified measurement; obtaining access will become harder and legally riskier.
- State governments and consumer enforcers — the Act’s broad preemption reduces states’ freedom to craft stronger or different rules for youth research and shifts primary enforcement responsibility to the FTC, while still requiring coordination for parens patriae suits.
- FTC and compliance teams — the Commission must interpret undefined terms, conduct oversight, and enforce a new national standard, which will demand resources and create legal guidance needs for industry.
Key Issues
The Core Tension
The central dilemma is between stronger, uniform protections for minors' commercial profiling and the operational, research, and speech costs imposed on platforms, advertisers, and researchers: the bill aims to prevent companies from designing products and ads around children’s behavior, but doing so requires platforms to police age more aggressively, curtail analytics and experimentation, and potentially hamper beneficial research and tailored safety features — creating a policy trade‑off with no frictionless solution.
The statute leaves several high‑stakes interpretive questions unresolved. First, it does not define "market or product‑focused research," a term that could encompass everything from simple demographic segmenting and A/B testing of interface features to longitudinal behavioral studies used for product development.
That gap forces the FTC, through guidance or enforcement, to draw operational lines that will determine how far the ban reaches. Second, the covered‑platform definition is conjunctive and specific, but edge cases abound — platforms with private profiles, games with social features, or services that recommend content without explicit personalized advertising may sit near the boundary and face uncertain compliance choices.
Third, the Act imports COPPA's verifiable parental consent standard for teens, but COPPA historically applies only to children under 13; using that verification standard for 13–16-year-olds raises practical and privacy trade‑offs (how to verify without creating new identity‑linking risks). The "knows" standard (actual knowledge or willful disregard) shifts risk onto platforms to prove they did not know a user was a minor, which will incentivize more intrusive age‑verification or conservative blocking of youth data from research.
Finally, the broad federal preemption language will eliminate state variations but could also block state innovations that go further to protect minors; that centralization streamlines compliance at the federal level while removing state laboratories to test alternative approaches.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.