Meta to implement age‑verification framework under $17 B settlement with 52 U.S. states

What happened

Meta has agreed to a $17 billion settlement with 52 state attorneys general that mandates age‑assurance technology for its platforms. The settlement requires Meta to apply age‑verification methods within one year, classify users into 18+, 13‑17, and under‑13 buckets, and retain age‑related data only briefly. It also obliges Meta to provide an appeal process and allows AGs to request user data for law‑enforcement purposes.

Why it matters for trust and compliance

• Its status is announced. It is not law yet. Track it, but do not treat it as an obligation.
• The settlement imposes extensive age‑verification and data‑retention obligations on Meta, affecting privacy and surveillance of all users.
• It relates to COPPA. The regulations library explains what that law requires.

Who is affected

Recommended actions

1. Review consent, cookie and tracking practices against the requirement.
2. Check that privacy notices describe the practices this addresses.
3. Revisit retention schedules and data minimisation for the data involved.
4. Map the security requirements to existing controls and close gaps.
5. Review age assurance and protections for minors' data.