Colorado's SB26-051 Would Require Your Operating System to Collect Your Age

Colorado is considering a bill that would require your operating system to ask your age before you can use it. Not a website. Not an app. Your OS. The whole foundation your device runs on.

Senate Bill 26-051, “Age Attestation on Computing Devices,” was introduced on January 27, 2026 and is currently in committee. It is not law yet.

How It Works

When you set up a new phone or computer in Colorado, the OS would be required to collect your birthdate or age during account creation. That data gets turned into an “age signal,” sorted into one of four brackets: under 13, 13 to 16, 16 to 18, or 18 and above.

When you download or open a covered app, developers would be able to query that signal through a real-time API. The bill limits developers to requesting only the bracket, and explicitly restricts them from asking for more data than necessary.

The bill applies to major operating system providers, including Apple, Google, Microsoft, and Canonical. If passed, changes would begin January 1, 2028.

The Privacy Problem

The bill does not require storing your exact birthdate permanently. It requires creating an age-range signal and making it available to apps. That distinction matters, and some reporting has blurred it unfairly.

But the infrastructure being built still raises real questions. Your age bracket gets tied to your device account. That link exists at the OS level, accessible to any app that requests it. Even a bracket can narrow down who you are when combined with other data points apps already collect.

Centralized identity systems also attract breaches. A Discord age verification breach last year exposed roughly 70,000 government-issued IDs. While this bill does not require ID verification, identity-linked infrastructure can become a target over time, especially if expanded later.

No Verification, So What Does It Actually Do?

The bill does not require ID checks. Users just indicate their age. Any 12-year-old can type in a fake year.

So the mechanism does not reliably protect minors from determined ones. What it does do is build a standardized age-signal layer into every major OS. That infrastructure exists after this bill, even if the bill’s stated goal falls short.

The Precedent Concern

This is the part civil liberties critics are most focused on. Once an OS-level age API exists, future legislation can build on it. Requiring actual ID verification at the same layer would be technically straightforward once the foundation is in place.

Critics argue this bill is less about protecting children today and more about creating a template. That is a speculative concern, not something the bill text itself does. But it is a reasonable one to name clearly.

Anonymous and pseudonymous device use matters for real people: abuse survivors, whistleblowers, people exploring sensitive medical or personal questions before they are ready to attach their name to them. Any erosion of that, even gradual, has real costs.

What You Can Do

If you are in Colorado:

The bill is in committee right now. This is when contact matters.

Find your legislators at leg.colorado.gov/find-my-legislator

The Senate Business, Labor, and Technology Committee is where the bill lives. Email or call them. Show up to hearings if they are open to public testimony.

Track the bill and support organizations that do this work: EFF (eff.org) and ACLU of Colorado (aclu-co.org).

If you are not in Colorado:

Similar proposals are moving in other states. Watch your state legislature. Share awareness of this bill. Most people do not know it exists.

Bottom Line

SB26-051 is a real bill in committee, not a passed law. The text does not require storing your birthdate forever or giving every app unrestricted access to your identity.

What it does do is build a standardized age-signal API into your OS, tied to your account, with no actual verification requirement. Whether that is a reasonable privacy tradeoff or a foundation for something worse is exactly the debate worth having right now, while it is still in committee.

References

• Colorado SB26-051 full text and status
• SB26-051 Fiscal Note, Legislative Council Staff (Feb 10, 2026)
• Colorado moves age checks from websites to operating systems, Biometric Update (Feb 2026)
• Senate Bill 51: Online age verification and the illusion of safety, Complete Colorado (Feb 17, 2026)
• Colorado Wants Operating Systems to Tell Every App How Old You Are, It’s FOSS (Feb 24, 2026)
• BREAKING: Colorado Bill Would Require Age Verification at the OS Level, ComplianceHub (Feb 2026)
• LegiScan: CO SB051 tracking