By: Paxton, Kolkhorst S.B. No. 2420
(In the Senate - Filed March 13, 2025; March 25, 2025, read
first time and referred to Committee on State Affairs;
April 7, 2025, reported adversely, with favorable Committee
Substitute by the following vote: Yeas 10, Nays 0; April 7, 2025,
sent to printer.)
Click here to see the committee vote
COMMITTEE SUBSTITUTE FOR S.B. No. 2420 By: Bettencourt
A BILL TO BE ENTITLED
AN ACT
relating to the regulation of platforms for the sale and
distribution of software applications for mobile devices.
BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS:
SECTION 1. Subtitle C, Title 5, Business & Commerce Code, is
amended by adding Chapter 121 to read as follows:
CHAPTER 121. SOFTWARE APPLICATIONS
SUBCHAPTER A. GENERAL PROVISIONS
Sec. 121.001. SHORT TITLE. This chapter may be cited as the
App Store Accountability Act.
Sec. 121.002. DEFINITIONS. In this chapter:
(1) "Age category" means information collected by the
owner of an app store to designate a user based on the age
categories described by Section 121.021(b).
(2) "App store" means a publicly available Internet
website, software application, or other electronic service that
distributes software applications from the owner or developer of a
software application to the user of a mobile device.
(3) "Minor" means a child who is younger than 18 years
of age who has not had the disabilities of minority removed for
general purposes.
(4) "Mobile device" means a portable, wireless
electronic device, including a tablet or smartphone, capable of
transmitting, receiving, processing, and storing information
wirelessly that runs an operating system designed to manage
hardware resources and perform common services for software
applications on handheld electronic devices.
(5) "Personal data" means any information, including
sensitive data, that is linked or reasonably linkable to an
identified or identifiable individual. The term includes
pseudonymous data when the data is used by a person who processes or
determines the purpose and means of processing the data in
conjunction with additional information that reasonably links the
data to an identified or identifiable individual. The term does not
include deidentified data or publicly available information.
SUBCHAPTER B. DUTIES OF APP STORES
Sec. 121.021. DUTY TO VERIFY AGE OF USER; AGE CATEGORIES.
(a) When an individual in this state creates an account with an app
store, the owner of the app store shall use a commercially
reasonable method of verification to verify the individual's age
category under Subsection (b).
(b) The owner of an app store shall use the following age
categories for assigning a designation:
(1) an individual who is younger than 13 years of age
is considered a "child";
(2) an individual who is at least 13 years of age but
younger than 16 years of age is considered a "younger teenager";
(3) an individual who is at least 16 years of age but
younger than 18 years of age is considered an "older teenager"; and
(4) an individual who is at least 18 years of age is
considered an "adult."
Sec. 121.022. PARENTAL CONSENT REQUIRED. (a) If the owner
of the app store determines under Section 121.021 that an
individual is a minor who belongs to an age category that is not
"adult," the owner shall require that the minor's account be
affiliated with a parent account belonging to the minor's parent or
guardian.
(b) For an account to be affiliated with a minor's account
as a parent account, the owner of an app store must use a
commercially reasonable method to verify that the account belongs
to an individual who:
(1) the owner of the app store has verified belongs to
the age category of "adult" under Section 121.021; and
(2) has legal authority to make a decision on behalf of
the minor with whose account the individual is seeking affiliation.
(c) A parent account may be affiliated with multiple minors'
accounts.
(d) The owner of an app store must obtain consent from the
minor's parent or guardian through the parent account affiliated
with the minor's account before allowing the minor to:
(1) download a software application;
(2) purchase a software application; or
(3) make a purchase in or using a software
application.
(e) The owner of an app store must:
(1) obtain consent for each individual download or
purchase sought by the minor; and
(2) notify the developer of each applicable software
application if a minor's parent or guardian revokes consent through
a parent account.
(f) To obtain consent from a minor's parent or guardian
under Subsection (d), the owner of an app store may use any
reasonable means to:
(1) disclose to the parent or guardian:
(A) the specific software application or
purchase for which consent is sought;
(B) the rating under Section 121.052 assigned to
the software application or purchase;
(C) the specific content or other elements that
led to the rating assigned under Section 121.052;
(D) the nature of any collection, use, or
distribution of personal data that would occur because of the
software application or purchase; and
(E) any measures taken by the developer of the
software application or purchase to protect the personal data of
users;
(2) give the parent or guardian a clear choice to give
or withhold consent for the download or purchase; and
(3) ensure that the consent is given:
(A) by the parent or guardian; and
(B) through the account affiliated with a minor's
account under Subsection (a).
(g) If a software developer provides the owner of an app
store with notice of a change under Section 121.053, the owner of
the app store shall:
(1) notify any individual who has given consent under
this section for a minor's use or purchase relating to a previous
version of the changed software application; and
(2) obtain consent from the individual for the minor's
continued use or purchase of the software application.
Sec. 121.023. DISPLAY OF AGE RATING FOR SOFTWARE
APPLICATION. (a) If the owner of an app store that operates in this
state has a mechanism for displaying a rating or other content
notice, the owner shall display for each software application
available for download and purchase on the app store:
(1) the rating under Section 121.052 assigned to the
software application; and
(2) the specific content or other elements that led to
the rating assigned under Section 121.052.
(b) The information displayed under this section must be
clear, accurate, and conspicuous.
Sec. 121.024. INFORMATION FOR SOFTWARE APPLICATION
DEVELOPERS. The owner of an app store that operates in this state
shall, using a commercially available method, allow the developer
of a software application to access current information related to:
(1) the age category assigned to each user under
Section 121.021(b); and
(2) whether consent has been obtained for each minor
user under Section 121.022.
Sec. 121.025. PROTECTION OF PERSONAL DATA. The owner of an
app store that operates in this state shall protect the personal
data of users by:
(1) limiting the collection and processing of personal
data to the minimum amount necessary for:
(A) verifying the age of an individual;
(B) obtaining consent under Section 121.022; and
(C) maintaining compliance records; and
(2) transmitting personal data using
industry-standard encryption protocols that ensure data integrity
and confidentiality.
Sec. 121.026. VIOLATION. The owner of an app store that
operates in this state violates this subchapter if the owner:
(1) enforces a contract or a provision of a terms of
service agreement against a minor that the minor entered into or
agreed to without consent under Section 121.022;
(2) knowingly misrepresents information disclosed
under Section 121.022(f)(1);
(3) obtains a blanket consent to authorize multiple
downloads or purchases; or
(4) shares or discloses personal data obtained for
purposes of Section 121.021, except as required by Section 121.024
or other law.
Sec. 121.027. CONSTRUCTION OF SUBCHAPTER. Nothing in this
subchapter may be construed to:
(1) prevent the owner of an app store that operates in
this state from taking reasonable measures to block, detect, or
prevent the distribution of:
(A) obscene material, as that term is defined by
Section 43.21, Penal Code; or
(B) other material that may be harmful to minors;
(2) require the owner of an app store that operates in
this state to disclose a user's personal data to the developer of a
software application except as provided by this subchapter;
(3) allow the owner of an app store that operates in
this state to use a measure required by this chapter in a manner
that is arbitrary, capricious, anticompetitive, or unlawful;
(4) block or filter spam;
(5) prevent criminal activity; or
(6) protect the security of an app store or software
application.
SUBCHAPTER C. DUTIES OF SOFTWARE APPLICATION DEVELOPERS
Sec. 121.051. APPLICABILITY OF SUBCHAPTER. This subchapter
applies only to the developer of a software application that the
developer makes available to users in this state through an app
store.
Sec. 121.052. DESIGNATION OF AGE RATING. (a) The developer
of a software application shall assign to each software application
and to each purchase that can be made through the software
application an age rating based on the age categories described by
Section 121.021(b).
(b) The developer of a software application shall provide to
each app store through which the developer makes the software
application available:
(1) each rating assigned under Subsection (a); and
(2) the specific content or other elements that led to
each rating provided under Subdivision (1).
Sec. 121.053. CHANGES TO SOFTWARE APPLICATIONS. (a) The
developer of a software application shall provide notice to each
app store through which the developer makes the software
application available before making any significant change to the
terms of service or privacy policy of the software application.
(b) For purposes of this section, a change is significant if
it:
(1) changes the type or category of personal data
collected, stored, or shared by the developer;
(2) affects or changes the rating assigned to the
software application under Section 121.052 or the content or
elements that led to that rating;
(3) adds new monetization features to the software
application, including:
(A) new opportunities to make a purchase in or
using the software application; or
(B) new advertisements in the software
application; or
(4) materially changes the functionality or user
experience of the software application.
Sec. 121.054. AGE VERIFICATION. (a) The developer of a
software application shall create and implement a system to use
information received under Section 121.024 to verify:
(1) for each user of the software application, the age
category assigned to that user under Section 121.021(b); and
(2) for each minor user of the software application,
whether consent has been obtained under Section 121.022.
(b) The developer of a software application shall use
information received from the owner of an app store under Section
121.024 to perform the verification required by this section.
Sec. 121.055. USE OF PERSONAL DATA. (a) The developer of a
software application may use personal data provided to the
developer under Section 121.024 only to:
(1) enforce restrictions and protections on the
software application related to age;
(2) ensure compliance with applicable laws and
regulations; and
(3) implement safety-related features and default
settings.
(b) The developer of a software application shall delete
personal data provided by the owner of an app store under Section
121.024 on completion of the verification required by Section
121.054.
Sec. 121.056. VIOLATION. (a) Except as provided by this
section, the developer of a software application violates this
subchapter if the developer:
(1) enforces a contract or a provision of a terms of
service agreement against a minor that the minor entered into or
agreed to without consent under Section 121.054;
(2) knowingly misrepresents an age rating or reason
for that rating under Section 121.052; or
(3) shares or discloses the personal data of a user
that was acquired under this subchapter.
(b) The developer of a software application is not liable
for a violation of Section 121.052 if the software developer:
(1) uses widely adopted industry standards to
determine the rating and specific content required by this section;
and
(2) applies those standards consistently and in good
faith.
(c) The developer of a software application is not liable
for a violation of Section 121.054 if the software developer:
(1) relied in good faith on age category and consent
information received from the owner of an app store; and
(2) otherwise complied with the requirements of this
section.
SUBCHAPTER D. ENFORCEMENT
Sec. 121.101. CIVIL ACTION; LIABILITY. (a) The parent or
guardian of a minor may bring an action against the owner of an app
store or the developer of a software application for a violation of
this chapter.
(b) Notwithstanding Sections 41.003 and 41.004, Civil
Practice and Remedies Code, a parent or guardian who prevails in an
action under this section is entitled to receive:
(1) injunctive relief;
(2) actual damages;
(3) punitive damages;
(4) reasonable attorney's fees;
(5) court costs; and
(6) any other relief the court considers appropriate.
(c) A violation of this chapter constitutes an injury in
fact to a minor.
Sec. 121.102. DECEPTIVE TRADE PRACTICE. A violation of
this chapter is a false, misleading, or deceptive act or practice as
defined by Section 17.46(b). In addition to any remedy under this
chapter, a remedy under Subchapter E, Chapter 17, is also available
for a violation of this chapter.
Sec. 121.103. CUMULATIVE REMEDIES. The actions and
remedies provided by this chapter are not exclusive and are in
addition to any other action or remedy provided by law.
SECTION 2. This Act takes effect January 1, 2026.
* * * * *