Third-party assurance that the AI on phones, tablets, watches, TVs, cars and home robots treats children and every user the way the law expects. Child-safety, age-assurance and AI fraud rules now apply across the United States, the European Union, the United Kingdom, Brazil, Australia, India and Asia-Pacific, and they reach every device a family uses. AxiLayer AI and AxiSentinel™ turn those rules into evidence a parent, a regulator and a bank can rely on. California added a 13-bill child online safety package on 10 September 2026, most of it effective 1 January 2027.
In under two years, protecting children from harmful AI moved from voluntary policy to binding law in every major market. The rules now reach the operating system, the app store, the chatbot, the image tool and the payment, and each country sets its own ages, consent rules and deadlines.
A published safety policy is a static document, and a device setting is a promise. Regulators, parents and banks increasingly ask for proof that the AI behaves the way the rules require, for each age and each country, every day. Family Safety Assurance is built to provide that proof, with a human signature behind it.
From California and New York to Brazil, the European Union, the United Kingdom, Australia, India and Singapore, AxiSentinel™ tracks the child-safety, age-assurance and fraud rules that apply where families live.
Separate parental consent before a child's data is used for targeted advertising, and biometric identifiers now count as personal information. Full compliance has been required since April 22, 2026.
Platforms must remove non-consensual intimate images, including AI-generated ones, within 48 hours of a valid request. Federal Trade Commission enforcement began May 19, 2026.
Companion chatbots must remind minors they are talking to AI and run crisis-referral protocols, in force since January 1, 2026 and strengthened by SB 1119 on September 10, 2026 with risk assessments, parental controls and third-party audits from 2029. AB 1043, as amended by AB 1856, has operating systems send an age signal that apps must request, from January 1, 2027.
App stores verify age and obtain parental consent for minors' downloads and purchases, and developers receive age signals. Texas: the injunction was stayed on May 28, 2026, the Supreme Court declined to vacate the stay on July 6, 2026, and the Fifth Circuit heard argument on August 4, 2026. Alabama applies from January 1, 2027, Utah from May 6, 2027 and Louisiana from July 1, 2027.
Duty of care, private-by-default settings and limits on profiling minors are in force in Maryland, Connecticut, Colorado, Montana, Nebraska and South Carolina, partly in California, and from 2027 in Vermont. New York's Child Data Protection Act applies since June 20, 2025.
AI that exploits the vulnerabilities of children has been prohibited since February 2, 2025. Chatbot disclosure and deepfake labeling apply from August 2, 2026. The 2026 Digital Omnibus adds a ban on AI systems that generate child sexual abuse material or non-consensual intimate images, from December 2, 2026.
Article 28 guidelines published in July 2025 expect private-by-default accounts for minors, effective age assurance where risks require it, and limits on addictive design. The EU age verification solution and Digital Identity Wallet are rolling out through 2026.
Free payee name checks for euro instant transfers since October 9, 2025. The Payment Services Regulation, agreed in November 2025 and awaiting formal adoption, adds refunds for bank-impersonation fraud and wider payee checks.
Child safety duties and highly effective age assurance for services that children are likely to use, in force since July 25, 2025, enforced by Ofcom.
Since October 7, 2024, payment firms reimburse eligible victims of authorized push payment scams, including scams that use cloned voices.
In force since March 17, 2026. Reliable age assurance, where self-declaration is not accepted, age signals from app stores and operating systems, linked guardian accounts for younger teens, and no loot boxes in games for minors. ANPD plans enforcement actions from January 2027.
Age-restricted platforms must take reasonable steps to stop under-16s from holding accounts, in effect since December 10, 2025, alongside industry age assurance codes.
Banks, telecommunications providers and digital platforms were designated on May 22, 2026, effective May 28, 2026. Duties to prevent, detect, report, disrupt and respond to scams are expected from March 31, 2027.
Verifiable parental consent for anyone under 18, and no tracking, behavioral monitoring or targeted advertising directed at children. The obligations apply from May 2027.
Codes of practice require age assurance from designated app stores and safety measures from designated social media services. Since December 16, 2024, banks and telecommunications providers share responsibility for phishing scam losses.
In force since January 1, 2026. Services likely to be used by children must limit adult contact with children, limit features that extend use, and keep recommendations suitable for child users.
The Regulations on the Protection of Minors Online apply since January 1, 2024. Labeling of AI-generated and synthetic content is required since September 1, 2025.
In force since January 22, 2026. Users must be told when they interact with generative AI, and AI-generated content must be labeled.
Family Safety Assurance looks at the AI a family actually meets, on the devices they actually use, and checks it against the rules that apply to each family member.
AI on family devices decides what a child can see, which actions need a parent and when a payment looks like a scam. Each of those decisions should follow the rules for that child's age and country, and be explainable to the family.
The same three layers that serve every regulated industry: AxiReady™ finds it, AxiSentinel™ monitors it, AxiLayer AI signs it.
Finds the AI inside apps and connected devices and shows the readiness gaps.
Evaluates that AI against the child-safety, age-assurance and fraud rules for each age and country, Always On or on demand.
Issues an attestation reviewed by a qualified AxiLayer AI auditor. Nothing is signed off autonomously.
Designed so that analysis stays on the device, age is handled as an age range rather than an identity, and no photos, messages or voice recordings leave the device.
Phones, tablets, watches, TVs, cars and home robots, held to the same family rules.
When a rule changes in any country, the new requirement is encoded and evaluated without rebuilding what is deployed.
| What the rules expect | Where it comes from | Family Safety Assurance |
|---|---|---|
| Age assurance that works, not self-declaration | United Kingdom, Brazil, Australia, the EU, US app store and design code laws, California | Age-appropriate AI, everywhere |
| Parental consent and parental control | COPPA, India, Brazil, US state laws | AI agents that ask first |
| Fast removal and prevention of AI intimate image abuse | TAKE IT DOWN Act, EU AI Act, Digital Services Act | Protection from AI image abuse |
| Scam prevention, payee checks and reimbursement | United Kingdom, the EU, Singapore, Australia | Fraud signals banks can trust |
| Disclosure and labeling of AI, chatbots and synthetic content | EU AI Act, China, South Korea, California | Every AI, audited |
Whether it is one app, one device line or a whole platform, early access starts with a short conversation about the AI your users meet and the countries where they live.
Family Safety Assurance technology is patent pending in the United States, with international protection being pursued.
Child safety, companion chatbot and age assurance rules are among the fastest moving in AI. See every one, by market and date.
See the child safety and chatbot mandates →