Governor JB Pritzker signed the Children’s Social Media Safety Act (HB5511) into law on July 31, establishing one of the most sweeping state-level frameworks in the country for regulating how social media platforms interact with users under 18. The law targets the design features that child safety advocates have identified as structurally addictive, including algorithmic feeds, nighttime push notifications, and unrestricted adult access to minors’ profiles, while leaving content itself unregulated. The bill passed both chambers of the Illinois legislature unanimously, 57-0 in the Senate and 113-0 in the House, reflecting a rare bipartisan consensus on a tech regulation measure.
- Governor Pritzker signed HB5511 on July 31, 2026, establishing the Children’s Social Media Safety Act
- The law requires device-level age verification set during initial device setup by parents, eliminating the need for facial recognition or ID-based age checks within individual apps
- Minors will receive chronological feeds showing only content from accounts they follow, replacing algorithmically curated “for you” pages
- Social media notifications designed to drive engagement are disabled between 10 p.m. and 7 a.m., though direct messages from friends and family remain active
- Minors’ profiles will not be visible, searchable, or surfaced to adult strangers; location sharing, messaging, and financial transactions with unknown adults are blocked by default
- The Illinois Attorney General enforces the law with civil penalties up to $50,000 per violation; parents retain the ability to override default settings
- The law takes effect January 1, 2028
How the Law Changes the Default Experience for Minors
The Children’s Social Media Safety Act restructures the default social media experience for Illinois users under 18 by targeting platform design rather than content. Under the law, parents set their child’s age during initial device setup, and that age signal automatically adjusts design features across covered apps, including algorithmic feeds, profile visibility, and how adult strangers can interact with the minor’s account. The approach avoids requiring individual platforms to implement facial recognition or government ID verification, instead relying on operating-system-level age signals that platforms must honor.
The practical effect on a minor’s daily experience is significant. Instead of an algorithmically curated feed designed to maximize engagement time, minors will see a chronological feed showing only content from accounts they actively follow. Profiles belonging to minors will not appear in search results or recommendation pages visible to adult strangers. Direct messaging, location sharing, and financial transactions between minors and adults who are not friends or family connections are blocked by default.
Nighttime notifications represent another targeted intervention. Social media notifications generated by algorithmic engagement systems are disabled between 10 p.m. and 7 a.m. for users under 18. Notifications for direct messages from friends and family remain active during those hours, drawing a distinction between communication tools and the engagement loops designed to pull users back into the platform’s content feed.
Parents retain the ability to override any of the default settings, allowing families to customize their child’s online experience. That parental override provision positions the law as a baseline protection that tightens the default while preserving household-level flexibility.
Which Platforms Are Covered and Which Are Not
The law applies to social media platforms with algorithmic recommendation systems, explicitly naming platforms such as Instagram, TikTok, Facebook, Snapchat, and X. It also extends to online gaming platforms where minors can communicate with strangers, including Roblox. The scope reflects a recognition that the addictive design patterns child safety advocates have flagged are not limited to traditional social media apps but extend to any platform where algorithmically driven engagement and stranger interaction converge.
The legislation explicitly excludes news media organizations, broadband service providers, email providers, and learning management systems from the definition of covered platforms. Those carve-outs narrow the compliance burden to platforms whose core business model involves algorithmic content curation and social interaction, rather than sweeping in the broader digital ecosystem.
Enforcement Structure and Penalty Framework
The Illinois Attorney General holds enforcement authority under the new law, with civil penalties of up to $50,000 for each violation. Attorney General Kwame Raoul noted that the bill signing comes as his office continues ongoing litigation and investigation into social media platform practices affecting minors. The per-violation penalty structure creates the potential for substantial cumulative fines against platforms that fail to implement the required default protections at scale.
The law takes effect on January 1, 2028, giving platforms and device manufacturers approximately 18 months to build or adapt the technical infrastructure required for compliance. The implementation timeline acknowledges the engineering complexity involved in deploying device-level age signaling across operating systems while providing a fixed deadline that prevents indefinite delay.
The Growing State-Level Movement and Federal Stalemate
Illinois joins a growing list of states that have moved to regulate social media’s interaction with minors through legislation in 2026. New Jersey passed the Kids Code Act on June 30, adopting a design-based regulatory framework with a private right of action for families. California’s Age-Appropriate Design Code Act, signed in 2022, served as an early model but faced industry-backed legal challenges that delayed enforcement. Maryland, Minnesota, and New York have all advanced similar frameworks in their 2026 legislative sessions.
The acceleration of state-level action reflects a persistent gap at the federal level. The Kids Online Safety Act has drawn bipartisan support and advanced through congressional committees, but remains unsigned. That federal stalemate has produced a patchwork of state-by-state regulations that vary in scope, enforcement mechanisms, and technical requirements. Technology industry groups have argued that a uniform federal standard would provide more consistent protections while reducing regulatory fragmentation. Child safety advocates counter that state action fills a vacuum that Congress has failed to address for years.
The bill signing also followed Governor Pritzker’s earlier action this week signing legislation requiring Illinois school districts to adopt bell-to-bell cell phone restriction policies. Together, the two laws represent a coordinated approach to reducing screen-based disruption in children’s lives across both school and home environments.
Industry Pushback and the Legal Landscape Ahead
Technology industry lobbyists flagged potential First Amendment challenges during the legislative process, a pattern that has repeated across nearly every state that has advanced child-focused social media regulation. During committee hearings, tech representatives argued that the bill’s restrictions on algorithmic feeds could implicate protected speech. The governor’s office responded that the bill’s language was modeled after legislation in other states that has survived court challenges, and noted that the law regulates platform design features rather than restricting the content minors can access.
State Representative Jennifer Gong-Gershowitz, the House sponsor, acknowledged during floor debate that social media companies were unlikely to embrace the regulatory framework voluntarily. The unanimous vote totals in both chambers suggest that legislators across the political spectrum concluded that voluntary self-regulation by the platforms has not produced adequate protections for minors. Common Sense Media CEO James P. Steyer described the law as holding tech companies accountable for practices that parents have been demanding action on for years and urged other states to follow Illinois’s approach.
Whether tech companies mount formal legal challenges once the 2028 enforcement date approaches will depend in part on the trajectory of parallel litigation in other states. California’s AADC has been the primary legal testing ground for design-based child safety regulation, and its outcomes will likely influence how aggressively platforms challenge similar frameworks in Illinois, New Jersey, and the states that follow.
FAQs
What Does the Illinois Children’s Social Media Safety Act Require?
The law requires social media platforms to implement device-level age verification, replace algorithmic feeds with chronological content from followed accounts for users under 18, block minors’ profiles from appearing in adult strangers’ search results and recommendations, disable engagement-driven notifications between 10 p.m. and 7 a.m., and restrict messaging, location sharing, and financial transactions between minors and unknown adults. Parents set their child’s age during device setup, and default protections activate automatically across covered apps.
When Does the Illinois Social Media Safety Law Take Effect?
The law takes effect on January 1, 2028, giving platforms and device manufacturers approximately 18 months to develop the technical infrastructure needed for compliance. The Illinois Attorney General enforces the law with civil penalties of up to $50,000 per violation. Parents retain the ability to override default safety settings for their children.
Which Social Media Platforms Does the Illinois Law Cover?
The law covers social media platforms with algorithmic recommendation systems, including Instagram, TikTok, Facebook, Snapchat, and X, as well as online gaming platforms where minors can interact with strangers, such as Roblox. News media organizations, broadband providers, email services, and learning management systems are explicitly excluded from the law’s scope.
