The Florida attorney general on Thursday proposed legislation aimed at protecting children on social media. According to Law360's summary, the plan would require age verification and parental consent for apps, block AI chatbots from creating sexual content or feigning companionship, and put protective features in place on social platforms. The full text of the proposal was not available in the reporting we reviewed, so many details remain unclear. Still, the Florida age verification law privacy questions it raises are worth working through now, before any bill language is finalized.

What Florida's Proposal Would Require

Based on the summary of the proposal, three pillars stand out:

  • Age verification and parental consent for apps. Platforms would need to confirm a user's age and get a parent's approval for minors.
  • Limits on AI chatbots. Chatbots would be blocked from generating sexual content and from feigning companionship, meaning presenting themselves as a friend or partner to a young user.
  • Protective features on social media. The summary says these would be put in place, but the specifics were cut off in the available text.

This is a proposal, not an enacted law. It would need to move through the legislative process, and its final shape could change. We will not speculate on penalties, effective dates, or which companies would be covered, since those details were not provided.

How Age Verification Could Work in Practice

The proposal, as summarized, does not say how apps would verify age. That matters, because "age verification" can mean very different things. Common approaches across the industry include:

  • Uploading a government-issued ID
  • Taking a selfie so software can estimate age
  • Checking against a credit card or other financial record
  • Relying on a third-party verification service

Parental consent adds another layer. To approve a child's account, a parent may also need to prove they are the parent or guardian, which could mean collecting identity details from two people instead of one.

Florida already has experience with this area. Search results on the state's earlier law covering adult websites note it requires a "reasonable method of age verification," and one report says it requires that apps and websites offer the option of anonymous age verification. Whether a similar option would appear in this new proposal is an open question.

The Privacy Tradeoffs of Age Checks

Protecting children is a widely shared goal. The tension is that verifying a child's age often requires verifying everyone's age. Adults could be asked to hand over sensitive identity data just to use an app they already use.

That creates several concerns worth weighing:

  • Data collection. IDs, face scans, and parental records are high-value information. The more of it that exists, the more there is to protect.
  • Storage and retention. Readers should ask who holds the data, for how long, and whether it is deleted after the check.
  • Third-party handling. Many platforms outsource verification, which can put sensitive data in the hands of companies users never chose.
  • Breach risk. Identity data cannot be changed like a password. Once exposed, it stays exposed.

The last point is not hypothetical in general terms. The proposed settlement between California and the successor to 23andMe, covered in our report on the 23andMe California $6M data breach deal, is a reminder of what follows when sensitive personal data is compromised. Genetic data and government ID are different things, but both are information people cannot easily replace.

Where VPNs Fit Into Age-Gating Laws

Whenever age-gating laws appear, VPNs enter the conversation, because a VPN can change the location a website sees. Some people use them to get around regional restrictions, which is why lawmakers and platforms sometimes treat VPN use as a loophole.

The summary of Florida's proposal does not mention VPNs, so we cannot say whether the bill would address them. It is worth being clear about what a VPN does and does not do here. A VPN encrypts your traffic and masks your IP address from the sites you visit. It does not, by itself, change what a platform requires of an account holder. If an app demands age verification tied to your identity or device, a VPN is not a substitute for the check, and using one to dodge a legal requirement could carry its own consequences depending on how any final law is written.

For privacy-minded readers, the more useful framing is this: a VPN protects your network traffic, but it does not protect data you voluntarily submit to a verification service.

What This Means For You

If you live in Florida or have children who use social media or AI chatbots, the proposal could change how accounts are created and managed. Adults may face new prompts to prove their age. Parents may be asked to confirm their identity to approve a child's account.

The chatbot provisions also signal growing attention to AI products used by minors, particularly those designed to simulate friendship or companionship.

Nothing here is in force yet, so there is time to follow the debate and read the actual bill text once it is available.

Actionable Takeaways

  • Read the bill language when it is published, paying attention to how verification is done and whether anonymous options exist.
  • Ask what data is collected, who stores it, and when it is deleted before you submit an ID or face scan.
  • Prefer minimal-disclosure options where a service offers them.
  • Limit sensitive uploads to services that clearly explain their data practices.
  • Talk with kids about chatbots and what it means when software acts like a friend.

The Florida age verification law privacy conversation is just beginning. Understanding what personal data age checks may collect, and weighing the risks of sharing sensitive identity information, is the best preparation for whatever rules emerge.