July 31, 2026

Federal and state pressure on child online safety hardened simultaneously on two fronts Thursday, exposing the legal fault lines that will define platform compliance obligations through 2027. The US Senate placed the Kids Online Safety Act on its Legislative Calendar as Calendar No. 287, while a House subcommittee advanced a companion measure by a 13-10 vote — the narrowest of margins, but a procedural step forward. In Texas, competing court outcomes on the same statute crystallized a broader pattern: enforcement is accelerating ahead of constitutional clarity, leaving platforms exposed to binding state obligations even as federal courts carve out exemptions to adjacent provisions.

Texas's SCOPE Act litigation produced a paradox that compliance teams cannot yet resolve. Attorney General Paxton secured a temporary injunction requiring Discord to deploy age assurance and default safety settings within 90 days under HB 18, while NetChoice simultaneously claimed a Fifth Circuit ruling blocking a central provision of the same statute. Both outcomes are legally operative simultaneously. Platforms subject to HB 18 must assess which obligations survive the Fifth Circuit's ruling and which remain enforceable via the Paxton-Discord consent framework — a distinction that cannot be deferred.

Watch Level: PREPARE (social media and communications platforms with Texas user bases, platform policy and compliance counsel)

The UK Home Office's deployment of Cognitec facial age estimation technology for immigration age assessments warrants immediate scrutiny from human rights observers and compliance professionals. NIST FATE evaluation data indicate the algorithm misclassifies a majority of West African 16-year-olds as adults and carries a mean average error of 4.6 years for girls from Sub-Saharan Africa — the cohort most likely to require accurate classification. The Home Office recorded 755 children incorrectly identified as adults in 2025 before any facial age estimation system was in use. Deploying a tool with documented demographic bias in high-stakes immigration determinations signals a governance gap between procurement timelines and accuracy standards, and is likely to draw parliamentary and litigation-based challenge.

Watch Level: PREPARE (UK immigration practitioners, human rights and civil liberties counsel, biometric technology vendors operating in government contexts)

The FTC's multi-jurisdictional action against Hims & Hers, filed jointly with Utah and Los Angeles County acting for California, has now been formally entered in federal proceedings. The complaint — previously covered when filed — has advanced with no material new filings today. It remains the clearest live signal of coordinated federal-state enforcement against telehealth platforms that deploy advertising pixel infrastructure alongside sensitive health data. Digital health operators who have not audited data flows between patient-facing systems and third-party ad networks should treat this case as a compliance trigger, not a cautionary data point.

Watch Level: PREPARE (telehealth and digital health platforms, health data privacy counsel, ad-tech vendors with health sector exposure)

Australia's OAIC issued updated guidance on retail facial recognition following the 2024 Administrative Review Tribunal ruling against Bunnings, reaffirming that consent remains the default requirement under the Australian Privacy Principles. The guidance acknowledges narrow exceptions — authorized-by-law and permitted general situation pathways — but frames them as high-bar departures requiring case-by-case justification. Retailers who deployed or expanded facial recognition systems during the period of legal ambiguity should reassess their compliance posture against this clarified standard before the OAIC moves from guidance to enforcement referrals. Separately, New Zealand's Immigration Minister ordered a second independent audit of the failed Biometric Capability Upgrade project after NZ$6 million in previously undisclosed expenditure surfaced, potentially triggering mandatory Cabinet oversight thresholds and raising questions about parliamentary disclosure obligations at MBIE.

Watch Level: MONITOR (Australian retail sector, AU privacy counsel, NZ public sector governance and procurement officials)

Two US House bills introduced this week — HR 9915, the Stealth Bot Prohibition Act, referred to the Committee on Energy and Commerce, and HR 9917, the AI Kill Switch Act, referred to the Committee on Homeland Security — reflect continued congressional interest in AI behavioral controls and bot disclosure, though both remain at early committee stage. The DHS Office of Biometric Identity Management's Request for Information for a consolidated multimodal biometric examination platform signals that OBIM is preparing to modernize infrastructure that in some cases predates current biometric standards by two decades. The RFI is market research, not a solicitation, but its vendor-agnostic framing and broad functional scope indicate a competitive procurement is likely to follow within the next procurement cycle.

Watch Level: MONITOR (AI governance and compliance teams, federal contractors with biometric identity management capabilities, bot-dependent platform operators)