RESET Act

The RESET Act bans covered online platforms from allowing an individual to create or keep an account or profile if the platform knows the person is under 16 years old. "Knows" means the platform has actual knowledge or acts in willful disregard of the user’s age. Platforms must review their users and, within 60 days after the law takes effect, identify accounts they know belong to minors. Within 180 days, they must notify those users that their accounts will be terminated, and within 30 days after giving that notice, they must close the accounts. When a minor’s account is terminated, the platform must immediately delete all personal data collected from or submitted by that user. For 90 days after termination, the platform must, if technically possible and not blocked by licensing agreements, provide the minor with a copy of their personal data if the minor asks. This copy must be easy to read and also provided in a portable, structured, machine‑readable format. The platform has 45 days to respond to such a request. A violation of these rules is treated as an unfair or deceptive act or practice under the Federal Trade Commission Act. The Federal Trade Commission (FTC) has its usual powers to investigate and enforce and can seek penalties and other remedies. State attorneys general and certain state officials may also sue in state or federal court to stop violations, enforce the law, and seek money relief for residents, after notifying the FTC. If the FTC or U.S. Attorney General has already filed a federal case on the same violations against the same defendant, new state actions on those same alleged violations must wait until that federal case is finished. The bill blocks states and local governments from having or enforcing their own laws that relate to this section’s rules, meaning these federal rules would override any similar state rules. The act defines key terms, including “minor” (under age 16), “personal data” (using the Children’s Online Privacy Protection Act definition), “covered platform” (by reference to the TAKE IT DOWN Act), and “user.” Unless a part of the section says otherwise, the law would start to apply one year after enactment.

This bill could significantly change how children under 16 use certain social media and other covered online platforms. If it becomes law and is applied broadly, many minors would no longer be able to keep accounts on those platforms, which could affect how they communicate, get information, and take part in online communities. For parents and guardians, the bill may change how they manage their children’s online activity, as some platforms would no longer be available for younger teens. For platforms, it would create new duties and costs related to identifying minors, closing accounts, deleting data, and handling data access requests. The bill also matters for privacy and consumer protection law. It gives the FTC and state officials clear authority to enforce these rules and sets one national standard that overrides related state and local laws. The exact impact would depend on how “covered platform” is defined in the other law it cites and how “knows” is interpreted and applied in practice.

• Covered platforms may not allow an account or profile for any user the platform knows is under 16 years old.
• Within 60 days of enactment, platforms must identify accounts they know belong to minors; within 180 days they must notify those users of termination; and within 30 days after notice, they must terminate those accounts.
• After terminating a minor’s account, platforms must immediately delete all personal data collected from or submitted by that user.
• For 90 days after termination, minors may request a copy of their personal data, which must be provided in both a human‑readable form and a portable, structured, machine‑readable format.
• Platforms must fulfill a minor's data‑access request within 45 days, subject to technical feasibility and licensing limits.
• Violations are treated as unfair or deceptive acts or practices under the Federal Trade Commission Act.
• The Federal Trade Commission enforces the bill using its existing authorities, remedies, penalties, and procedures.
• State attorneys general and certain state officials may bring civil actions in state or federal court to stop violations, enforce compliance, and seek damages or restitution for residents.
• If the FTC or U.S. Attorney General has already brought a federal civil action over the same alleged violations against the same defendant, new state actions on those violations are paused until that federal case is resolved.
• The bill preempts (overrides) any state or local law that relates to the provisions of this section.
• The section generally becomes effective one year after enactment.

• The bill does not itself spell out what counts as a "covered platform"; it adopts that definition from the separate TAKE IT DOWN Act, so the scope depends on another law.
• The definition of “personal data” is tied to the Children’s Online Privacy Protection Act, which may not cover all types of data some people think of as personal.
• Even though states are allowed to enforce this federal law, the preemption clause blocks them from keeping or adding their own overlapping rules on this specific subject.
• The law applies only when a platform "knows" a user is a minor (actual knowledge or willful disregard), which may leave gray areas where age is uncertain.