Why did KOSA stall in the Senate?

Sen. Rand Paul objected to unanimous consent passage on October 2, 2026, citing First Amendment concerns about the bill's duty of care, leaving sponsors a lame-duck window after November 9 before the Congress expires January 3.

What is the difference between KOSA and the House KIDS Act?

KOSA imposes a duty of care to prevent enumerated harms to minors; the House bill replaces it with required policies, adds explicit age checks for sexual material harmful to minors, and uses a stricter "know or should have known" knowledge standard.

Does KOSA require age verification?

Not explicitly, and both bills disclaim it. But protections that attach to minors require identifying minors, so the knowledge standards create practical incentives for age assurance, as the Congressional Research Service has noted.

What age assurance methods could satisfy the federal bills?

The familiar layered menu: facial age estimation anchored on liveness, government documents and reusable digital credentials for escalation, and device or account signals as supporting evidence, with per-decision records as the compliance artifact.

What should platforms do while federal law is unresolved?

Build for the states and the direction of travel: layered age assurance with measured accuracy and evidence satisfies California's brackets, the state statutes, and foreign regimes today, and converts any eventual federal standard into a reporting exercise.

Back to News

The Deep Brief · Oct 5, 2026 · 4 min read

KOSA stalls in the Senate, but age assurance already won

Rand Paul blocked KOSA ahead of the pre-election recess, yet both federal bills' knowledge standards push platforms toward measurable age assurance anyway.

Rosalie Chirip

Senior Editor at deepidv

The US Capitol dome in black and white, where KOSA stalled in the Senate

The Kids Online Safety Act hit a one-senator wall on October 2, when Sen. Rand Paul objected to unanimous consent passage of S. 1748, freezing the bill until the Senate returns from its pre-election recess on November 9. With the current Congress expiring January 3, the sponsors, Sens. Marsha Blackburn and Richard Blumenthal, are left with a lame-duck window, a regular floor vote as the remaining route, and a House counterpart they have publicly said they cannot accept as written.

The House passed its version, the KIDS Act, H.R. 7757, back in June by 266 votes, but the two chambers built different machines. The Senate bill's core is a duty of care: platforms must exercise reasonable care to prevent enumerated harms to minors, from sexual exploitation to eating disorders and compulsive use. The House stripped the duty of care for reasonable policies addressing the same harms, added explicit age-check requirements for platforms carrying sexual material harmful to minors, and tightened the knowledge standard to "know or should have known," where the Senate's "fairly implied on the basis of objective circumstances" would lean on FTC guidance. Paul's objection is the constitutional argument in miniature, that a duty of care makes platforms "government-directed content moderators," a position the ACLU shares from the left, with Sen. Edward Markey raising LGBTQ+ youth concerns alongside.

The disclaimer that will not hold

Both bills carry the same curious sentence: nothing in them should be read as requiring age gating or age verification. The Congressional Research Service has already explained why the disclaimer is weaker than it looks: protections that attach to minors require knowing who the minors are, so operators "may use age-verification methods to identify minors," or must extend minor-grade protections to everyone. That is the quiet architecture of the entire debate, and it mirrors what this publication has tracked across the state map: knowledge standards function as age assurance mandates with plausible deniability. A platform facing "should have known" liability does not stay ignorant on purpose; it measures.

The Electronic Frontier Foundation's warning makes the same point from the privacy side, predicting platforms will reach for identity documents and facial-analysis systems to cap liability. The warning is half right: liability pressure does drive adoption. What it misses is that the method menu has matured precisely to answer the privacy objection, facial age estimation that never learns a name, reusable credentials disclosing an age fact and nothing else, device signals consumed without identity, the layered map California already legislated into its bracket laws.

What platforms should do with the stall

The operational read is that federal gridlock changes timing, not direction. The states are not stalled, California's brackets, the sportsbook age statutes, the app-store codes; the knowledge-standard logic appears in every draft in both chambers; and whichever text eventually passes, the compliance artifact will be the same: demonstrable, measured age assurance with per-decision evidence, the posture enforcement regimes abroad already grade. Platforms that build the layered stack now, estimation anchored on liveness, credentials for escalation, signals as supporting evidence, one evidence trail, will read the eventual federal standard as a reporting format. Platforms waiting for Washington to settle the question will discover the question was settled everywhere else first.

KOSA and Age Assurance FAQ

Why did KOSA stall in the Senate?: Sen. Rand Paul objected to unanimous consent passage on October 2, 2026, citing First Amendment concerns about the bill's duty of care, leaving sponsors a lame-duck window after November 9 before the Congress expires January 3.
What is the difference between KOSA and the House KIDS Act?: KOSA imposes a duty of care to prevent enumerated harms to minors; the House bill replaces it with required policies, adds explicit age checks for sexual material harmful to minors, and uses a stricter "know or should have known" knowledge standard.
Does KOSA require age verification?: Not explicitly, and both bills disclaim it. But protections that attach to minors require identifying minors, so the knowledge standards create practical incentives for age assurance, as the Congressional Research Service has noted.
What age assurance methods could satisfy the federal bills?: The familiar layered menu: facial age estimation anchored on liveness, government documents and reusable digital credentials for escalation, and device or account signals as supporting evidence, with per-decision records as the compliance artifact.
What should platforms do while federal law is unresolved?: Build for the states and the direction of travel: layered age assurance with measured accuracy and evidence satisfies California's brackets, the state statutes, and foreign regimes today, and converts any eventual federal standard into a reporting exercise.