Pennsylvania, United StatesCo-sponsorship memo circulated (Dec 2025)

Pennsylvania Online Safety Protection Act (PA Online Safety)

Kids Code / KOSA-style legislation requiring platforms to conduct data protection impact assessments before launching services for minors. Prohibits collecting or selling child geolocation data, profiling children by default, and using design patterns that lead children to provide personal information.

Key Provisions

What PA Online Safety requires

01

Data protection impact assessments (DPIA) required before launching services accessible to under-18 users

02

Prohibits collecting or selling geolocation data of children

03

Prohibits profiling children by default on digital platforms

04

Bans design patterns that lead children to provide personal information

05

Co-sponsored by Rep. Jeanne McNeill (D-133) and Rep. Mandy Steele (D-33)

Rule Categories Covered

Phosra enforcement categories for PA Online Safety

Geolocation Opt-In

privacy
geolocation_opt_in

Ensures location tracking is disabled by default, requiring explicit parental authorization to enable.

Data Sharing Control

privacy
privacy_data_sharing

Controls what personal data can be shared with third parties and platform partners.

Targeted Ad Block

advertising
targeted_ad_block

Blocks behavioral advertising, ad profiling, and retargeting for minor users across connected platforms.

Data Deletion Request

privacy
data_deletion_request

Triggers data deletion workflows on connected platforms and enables full profile removal via API.

Age Gate

access control
age_gate

Enforces age verification requirements and restricts access to age-inappropriate content or features.

Commercial Data Ban

other
commercial_data_ban

Enforces commercial data ban rules across connected platforms.

Algorithmic Audit

other
algorithmic_audit

Enforces algorithmic audit rules across connected platforms.

Platforms Affected

Platforms covered by PA Online Safety

InstagramTikTokYouTubeSnapchatRobloxDiscord
Age: Under 18

MCP Enforcement

Enforce PA Online Safety with a single API call

mcp-enforcement
// Enforce PA Online Safety compliance
tool: trigger_child_enforcement
input: {
  child_id: "ch_emma_01",
  law: "PA_ONLINE_SAFETY",
  rules: [
          "geolocation_opt_in",
          "privacy_data_sharing",
          "targeted_ad_block",
          "data_deletion_request"]
}

→ Instagram    enforcement applied     ✓
→ TikTok       enforcement applied     ✓
→ YouTube      enforcement applied     ✓
→ Snapchat     enforcement applied     ✓

Start building PA Online Safety-compliant features today

Phosra handles the complexity of multi-platform compliance so you can focus on building great products for families.