Texas just drew a bold line in the sand for the future of online age verification.
On Tuesday, Governor Greg Abbott signed the App Store Accountability Act into law, positioning Texas as the second U.S. state — after Utah — to mandate that app stores, not individual apps, be responsible for verifying user ages before granting access to downloads. The legislation, set to take effect January 1, 2026, intensifies the national debate around digital gatekeeping and privacy in an era where lawmakers are scrambling to safeguard children online.
Tech giants now face a mounting regulatory pincer. On one side, mounting pressure from federal lawmakers like Sen. Mike Lee (R-Utah) and Rep. John James (R-Mich.) is pushing for a nationwide approach mirroring Texas’ strategy. On the other, Apple is publicly pushing back — not against the concept of protecting children, but against the idea that its app store should become the identity cop of the internet.
“We believe there are better proposals that help keep kids safe without requiring millions of people to turn over their personal information,” Apple said, voicing concerns that the new rules could compromise user privacy by centralizing sensitive data.
Privacy advocates and platform providers alike are now grappling with a key dilemma: Who should control the digital ID checkpoint — the app, the store, or a third party?
Joe Kaufmann, Global Head of Privacy and Data Protection Officer at Jumio, believes the Texas law marks a pivotal shift in how identity is validated across the internet.
“The Texas App Store Accountability Act reflects a broader shift in how trust and identity are managed online,” Kaufmann said. “While aimed at protecting minors, it highlights the growing need for reliable and responsible identity verification across all age groups.”
The answer, according to Kaufmann, may lie in managed identities — persistent but privacy-conscious digital credentials that signal age verification without hoarding personal information.
“Just like a hand stamp at a club or a bracelet at a festival, a persistent identifier of verification can signal eligibility without additional sharing or retention,” Kaufmann explained. “Incorporating third-party identity management and verification services consolidates responsibility while limiting the need for persistent sharing of personal information.”
In a rare show of unity, social media platforms that typically war with regulators are backing the move. Meta, X (formerly Twitter), and Snap released a joint statement applauding Texas and endorsing app store-led verification.
“Parents want a one-stop shop to verify their child’s age and grant permission for them to download apps in a privacy-preserving way,” the companies stated, calling app stores “the best place for it.”
But critics worry that giving Apple or Google centralized control over digital identity could worsen existing concerns about market dominance and data overreach — especially as Meta and other firms simultaneously press lawmakers to scrutinize app store power via the new Coalition for Competitive Mobile Experience.
For now, all eyes turn to Congress, where the next battle over digital identity, child safety, and privacy is just beginning. Whether lawmakers land on age checks at the app store, in the cloud, or through third-party systems, one thing is clear: the fight over who owns your digital identity is only getting started.
