Linux Developers Seek Exemptions From State Age Verification Laws

Colorado lawmakers introduced a bill in January that would require operating systems to collect users' ages during device setup and pass that information to app developers. The measure, SB26-051, was modeled on a California law and aimed to let developers restrict age-inappropriate content for children.

_OS Linux distribution. He spent weeks engaging with state lawmakers to explain the challenges the requirement would create for open-source projects. On April 23, Richell testified before a Colorado House of Representatives committee. He stated that open-source software provides broad access to computing education and that age-gating systems could limit its educational value.

The bill passed on May 1 with an exemption for open-source operating systems. Richell said the change creates a template that he hopes other states will follow.

California enacted AB 1043 last year, requiring operating systems and app stores to collect ages starting January 1, 2027. The Linux Foundation and individual developers have raised concerns about compliance costs for volunteer-run projects and conflicts with open-source principles of minimal data collection.

Michael Dolan, SVP of strategic programs at the Linux Foundation, said protecting children online is important but that age verification mandates on open-source systems create new privacy risks while remaining easily circumvented. If an open-source developer adds age-gating features, others can create a fork that removes them.

Questions remain about liability in such cases.

Canonical, the company behind Ubuntu, stated in a March 4 blog post that it is reviewing the California law with legal counsel but has no concrete plans yet for changes to Ubuntu. Fedora Project leader Jef Spaleta suggested in a February forum comment that a local API or a new age field in the user mapping system could offer a minimal-compliance approach.

The developers of MidnightBSD modified their license in February to exclude California residents from desktop use of the operating system effective January 1, 2027. The change is intended to limit liability without altering the software. Zorin OS CEO Artyom Zorin noted in a March forum post that his company is based in Ireland with no physical presence in California, raising questions about enforceability.

Developers of Garuda Linux expressed a similar view regarding jurisdiction. Illinois is considering HB4140, modeled on the California law. New York’s S8102A, currently in committee, would apply age assurance requirements to any device capable of accessing internet content.