TL;DR
California is moving to amend its Digital Age Assurance Act to exempt most open-source Linux operating systems from age-verification requirements. The change follows significant criticism from privacy advocates and Linux developers. The bill is currently in review, with the amendment under consideration.
California lawmakers are moving to exempt most open-source Linux distributions from its upcoming Digital Age Assurance Act after significant backlash from privacy advocates and the open-source community.
The proposed amendment to Assembly Bill 1856 (AB 1856) aims to clarify that operating system providers distributing software under licenses allowing copying, redistribution, and modification are not subject to the law’s age-verification requirements. This would likely exempt major Linux distributions such as Debian, Fedora, Ubuntu, Arch Linux, and Mint from the law, which is scheduled to take effect on January 1, 2027.
The original law, passed in late 2025 as Assembly Bill 1043, mandated that operating systems request users’ ages during device setup and expose age brackets to applications. Critics argued that this broad requirement could force open-source projects, which are community-maintained and often decentralized, to implement invasive age-verification systems. Privacy groups, including the Electronic Frontier Foundation, warned that such measures could enable broader online identity tracking.
The amendment was introduced on February 11, 2026, by Assembly Member Buffy Wicks, and recent revisions, including the latest on May 18, 2026, specify that open-source licenses permitting modification exclude those distributions from the law’s scope. As of May 19, 2026, the bill is in the second reading stage, with further legislative review pending.
Why It Matters
This development is significant because it indicates a potential retreat by California from a controversial law that could have imposed invasive age-verification requirements on open-source operating systems. The exemption could preserve the privacy and flexibility of Linux ecosystems, which are widely used in both personal and enterprise settings. For the broader tech community, it reflects ongoing tensions between regulatory efforts and open-source software principles, as well as the influence of community backlash on legislation.
Linux operating system USB boot drive
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Background
California’s Digital Age Assurance Act was enacted in late 2025 to shift online age verification from individual websites to the operating system level, aiming to protect minors. However, the law’s broad language raised concerns among open-source developers and privacy advocates about unintended consequences, including the potential for open-source OS to be forced into invasive age-tracking roles. The backlash led to legislative revisions, including the recent amendment proposing exemptions for open-source distributions.
“The amendment clarifies that open-source operating systems are not subject to the same requirements, respecting the nature of community-maintained projects.”
— Assembly Member Buffy Wicks
“The law’s original language risked creating a surveillance infrastructure for online identity, which this amendment helps to prevent.”
— Electronic Frontier Foundation
What Remains Unclear
It is not yet confirmed whether the full legislative process will approve the exemption, or if additional restrictions will be applied. The scope of the exemption and how it will be implemented in practice remains to be clarified as the bill proceeds through committee reviews.
What’s Next
The bill is currently in the second reading stage in California’s legislature. Next steps include committee hearings, potential amendments, and a legislative vote. If approved, the exemption could be codified before the law’s scheduled enforcement date on January 1, 2027.
Key Questions
What does the exemption for Linux mean for users?
If the exemption passes, most Linux distributions will not be required to implement age-verification systems mandated by California’s law, preserving user privacy and the open-source nature of these OSes.
Will proprietary platforms like SteamOS still be affected?
Proprietary platforms with closed ecosystems, such as SteamOS, may still fall under the law if they are considered commercial operating system providers, as the amendment primarily targets open-source projects.
When will the law take effect if the amendment is approved?
The original law is scheduled to take effect on January 1, 2027. The legislative process for the amendment is ongoing, and it is not yet confirmed if it will be enacted before that date.
Source: Hacker News
