Last week, the House voted 267-117 to pass the KIDS Act—a tangled package of internet legislation that combines a revised Kids Online Safety Act (KOSA) with reporting requirements, new regulations, and a whole lot of age-gating.

It will now go to the Senate, where its fate remains uncertain. And if you're a parent trying to navigate your child's digital life, you need to understand this is about surveillance dressed up as child protection.

Headlines like "New Law to Protect Kids Online." sound good, but if you've read about the 2026 COPPA update, you know where this leads. The same lawmakers who claimed to protect children's biometric data just handed platforms a legal loophole to collect even more. Here's what the KIDS Act actually does, why it matters, and where the gaps remain.

What Is the KIDS Act?

The KIDS Act is a legislative package that combines multiple internet-related bills into one. At its core, it pushes for:

Age-Gating Across the Board: Platforms would be pressured to implement age-verification schemes using different standards. This isn't a single, unified system. It's a patchwork of requirements that forces companies to guess what counts as compliant.

More Monitoring, Less Privacy: The bill encourages, and in some cases mandates, increased surveillance of children's online activity. More scanning, more data collection, more reporting to government agencies.

Expanded Reporting Requirements: Platforms would need to study and report on various aspects of child safety, creating bureaucratic overhead that doesn't necessarily translate to better outcomes for families.

Privacy is protection. Does this sound like privacy? It's just a data-collection bonanza wrapped in concern for kids.

The Problem: Age-Gates Are Data-Gates

I wrote about the COPPA age-verification loophole in May. The FTC said, "You can't take my child's face without permission." Then they added, "Unless we claim we need it for age verification." The KIDS Act doubles down on this.

Age-verification requires identity data. Documents, biometrics, or third-party verification services. Every time a platform verifies your child's age, they're creating a record. A record that links your child's identity to their browsing history, their device fingerprint, and their behavioral patterns. The irony is that to prove your child is a child, you have to give up their privacy.

And who holds that data? The platforms. Who decides how long to keep it? The platforms. Who can access it if breached? Nobody knows.

What Should Be Done Instead

The Electronic Frontier Foundation opposed this bill from the start. And they're not alone—many privacy advocates and civil liberty groups raised similar concerns. Their core argument is simple:

Instead of age-gating and surveillance, pass a comprehensive privacy law for everyone.

A strong privacy law would:

  • Ban behavioral advertising across all ages
  • Limit data retention by default
  • Give users actual control over their information
  • Require transparency about what's being collected

The KIDS Act does none of this. Instead, it creates a complicated system of checks that doesn't benefit children and actively harms everyone's privacy. The EFF is urging the Senate to reject the KIDS Act and focus on bipartisan privacy legislation instead. But I wouldn't hold my breath.

The Neurodivergent Lens

For neurodivergent families, age-gating creates real barriers that non-ND families barely notice.

Interface Overwhelm: Age-verification flows are often dense, confusing, and full of dark patterns. Long legal text, nested menus, and confusing toggles can trigger anxiety or shutdown. The "right to consent" is hollow if the interface is a maze.

Executive Function Burden: Multi-step verification processes—upload ID, wait for approval, confirm via email, set up parental linkage—require sequential planning and working memory that many ND kids (and ND parents) struggle with in the moment.

The "Normal" Assumption: The KIDS Act assumes an neurotypical user—one who can read complex terms, navigate multi-step forms, and understand the implications of each toggle. It doesn't account for cognitive differences. It doesn't account for families who need more inclusive pathways.

What You Can Do Now

The House has voted and the bill is moving to the Senate. Your senators have the final say.

1. Contact Your Senators: Tell them to reject the KIDS Act and support comprehensive privacy legislation instead. The EFF has a direct action link to find your reps. Use it.

2. Stay Informed: Track the vote. This isn't going away quietly. The Senate debate will happen fast, and public pressure matters.

3. Prepare Your Family: Regardless of the outcome, the trend is toward more data collection, not less. Continue auditing permissions, limiting tracking, and teaching your children to question what they're asked to share.

4. Support Privacy-Focused Alternatives: Use tools that prioritize sovereignty by design. See our Firegap Approved page for services, apps, and devices.

The Big Picture

This is another example of the cycle we're trapped in. Platforms exploit us and legislators do too little too late. Reactionary laws get written for the last crisis, not the next one. The result is a regulatory landscape that empowers surveillance.

The KIDS Act is another layer on top of a broken foundation. It shifts the burden onto families while platforms continue harvesting data under the guise of "safety."

We need to collectively push back and chart a different way: strong privacy protections for everyone, no age-gates, no verification traps. Data sovereignty as a default. Until that happens, you're the only one holding the line for your family.

Contact your senators and reject the KIDS Act. Demand privacy is built into the system in a way that works for everyone.