Missouri Digital Media Protection Bill

Overview

The House Committee Substitute for House Bill Nos. 3393 & 2392 (HCS HBs 3393 & 2392) was a significant legislative effort in the 103rd General Assembly, Second Regular Session of Missouri, aimed at addressing the growing concerns surrounding digital media, artificial intelligence (AI)-generated content, and the online safety of minors. Introduced primarily by Rep. Don Mayhew (HB 3393) and Rep. Marty Joe Murray (HB 2392, known as the "Missouri Social Media Safety for Minors Act"), the combined bill sought to repeal existing sections 573.010 and 573.550, RSMo, and introduce seven new sections to enhance protections for individuals, particularly minors, affected by digital media. The legislation was designed to tackle issues such as the proliferation of deepfakes, the addictive nature of social media platforms, and the need for robust age verification mechanisms to shield children from inappropriate online interactions and content.

Despite advancing through the House Committee on Emerging Issues with a "Do Pass" recommendation on April 2, 2026, the HCS HBs 3393 & 2392 ultimately did not become law. The bill died in the House without ever reaching a floor vote or being placed on a House calendar. Consequently, it was not sent to the Senate, and the 2026 regular legislative session concluded in May 2026 without further action. This outcome means the bill, despite its comprehensive approach to digital media regulation, was effectively withdrawn from consideration. Its provisions, however, highlight the state's legislative intent to address critical areas of online safety, data privacy, and the ethical implications of emerging technologies like AI, setting a precedent for future legislative discussions in Missouri on these complex issues.

Definitions

The HCS HBs 3393 & 2392, had it been enacted, would have introduced several key definitions crucial for its enforcement and scope. Central to the bill was the definition of a "social media platform," which encompassed online services that allow users to create profiles, upload and share content, and interact with other users, particularly those with features designed for broad public engagement. The legislation specifically targeted platforms that could pose risks to minors due to their design or content. A "minor" was generally defined as an individual under the age of 18, with specific age thresholds (e.g., under 14, between 14 and 16) triggering different levels of regulation regarding account creation and parental consent. This tiered approach aimed to tailor protections based on developmental stages and vulnerabilities.

Another critical term addressed was "deepfake," referring to synthetic media generated or manipulated using artificial intelligence, often to create realistic but fabricated images, audio, or video. The bill specifically focused on deepfakes involving children, aiming to criminalize their distribution. The legislation also mandated that social media platforms employ "commercially reasonable methods" for age verification and parental consent. While the bill aimed for these methods to protect user privacy and minimize data collection, the practical implementation of such requirements, as seen in other states, often involves methods like government-issued IDs, Social Security numbers, or biometric facial scans, which themselves raise significant data privacy concerns. The intent was to ensure effective age gating without creating new vulnerabilities, a balance that proved challenging in similar legislative efforts elsewhere.

Governance and Institutional Framework

Had the HCS HBs 3393 & 2392 been enacted, its governance and institutional framework would have primarily centered on the Missouri Attorney General's office. The Attorney General would have been vested with the authority to enforce the provisions of the "Missouri Social Media Safety for Minors Act" and other related sections concerning digital media. This enforcement power would have included investigating alleged violations by social media platforms and content creators, bringing civil actions against non-compliant entities, and seeking appropriate penalties. The designation of the Attorney General as the primary enforcement body is a common approach in state-level legislation addressing consumer protection and online safety, leveraging an existing state agency with broad investigative and prosecutorial powers.

The bill also envisioned a framework where parents of harmed minors could initiate civil actions for damages, creating a private right of action alongside state enforcement. This dual enforcement mechanism aimed to provide multiple avenues for redress and ensure accountability. While the bill did not explicitly establish new regulatory bodies or commissions, it placed significant compliance burdens on social media platforms, requiring them to develop and implement internal policies and technologies for age verification, content moderation, and data protection. The implicit institutional framework would have involved a collaborative, albeit regulated, relationship between state enforcement agencies and the technology industry, with the Attorney General acting as the primary arbiter of compliance and legal recourse.

Key Focus Areas

The HCS HBs 3393 & 2392 encompassed several key focus areas designed to protect minors and address emerging digital media challenges. A primary concern was age verification and parental consent for social media accounts. The bill proposed a ban on social media accounts for children under 14 and required verified parental consent for minors between 14 and 16 years old. Platforms would have been mandated to implement secure age verification processes, ideally without requiring sensitive government identification, and provide parents with options to monitor account activity, request deletion, and limit messaging features. This was a direct response to concerns about children's exposure to harmful content and online predators.

Another significant focus was on deepfakes, particularly those involving minors. The legislation aimed to make it a felony to distribute deepfakes of a child, introducing severe penalties for such offenses. This provision sought to combat the malicious use of AI to create and disseminate non-consensual synthetic media, protecting children from exploitation and reputational harm. Furthermore, the bill targeted addictive design features in social media, prohibiting elements like infinite scrolling or auto-playing content that could be detrimental to minors' mental health and development. It also mandated restrictions on direct messaging from unverified adults to minors and banned targeted advertisements to minors based on personal data or behavioral profiling, aiming to create a safer and less exploitative online environment for young users. These multifaceted provisions underscored a comprehensive approach to digital safety.

Implementation Framework

The proposed implementation framework for HCS HBs 3393 & 2392, had it been enacted, would have placed significant responsibilities on social media platforms operating within Missouri. These platforms would have been required to develop and deploy "commercially reasonable methods" for age verification to ensure compliance with the age restrictions for account creation. This would involve technological solutions capable of accurately determining a user's age while adhering to data minimization and security standards, a complex technical and privacy challenge. Furthermore, platforms would have needed to establish robust systems for obtaining and verifying parental consent for minors aged 14 to 16, including mechanisms for parents to manage their children's accounts, review activity, and request account deletion.

Beyond age verification, the implementation framework would have necessitated platforms to redesign certain aspects of their services to comply with prohibitions on addictive design features, such as infinite scrolling and auto-play functions, when accessed by minors. They would also have been required to implement technical safeguards to prevent direct messaging between unverified adults and minors and to cease targeted advertising based on personal data for users identified as minors. The Attorney General's office would have been responsible for issuing guidance, conducting investigations, and enforcing these provisions, likely through a combination of proactive monitoring and reactive responses to complaints. The bill's broad scope would have required substantial operational and policy adjustments from affected companies, with potential legal challenges regarding the feasibility and constitutionality of such mandates.

Monitoring and Evaluation

Monitoring and evaluation of compliance under the HCS HBs 3393 & 2392 would have primarily fallen under the purview of the Missouri Attorney General’s office. The Attorney General would have been empowered to conduct investigations into social media platforms to ensure adherence to the bill’s mandates, including age verification protocols, parental consent mechanisms, restrictions on addictive design features, and prohibitions on targeted advertising to minors. This oversight would likely involve reviewing platform policies, auditing their technical implementations, and responding to complaints filed by parents, advocacy groups, or concerned citizens. The bill's classification of violations as "unlawful merchandising practices" would have provided a clear legal basis for the Attorney General to initiate enforcement actions and seek penalties.

In addition to state-led enforcement, the bill's provision allowing parents of harmed minors to bring civil actions would have introduced a decentralized, citizen-driven monitoring mechanism. Individual lawsuits could have served as a form of accountability, prompting platforms to address non-compliance to avoid legal liabilities. The effectiveness of these monitoring and evaluation efforts would have depended on several factors, including the Attorney General’s resources, the clarity of the regulatory guidelines, and the technological capabilities of platforms to implement and demonstrate compliance. The experience of other states with similar legislation suggests that the ambiguity of terms like "commercially reasonable methods" could lead to ongoing debates and legal challenges regarding the adequacy of compliance measures, requiring continuous evaluation and potential refinement of the regulatory approach.

Penalties, Liability, and Appeals

The HCS HBs 3393 & 2392 outlined significant penalties for non-compliance, aiming to deter violations and ensure the protection of minors. For social media platforms, violations of the provisions related to age verification, parental consent, addictive design features, direct messaging restrictions, and targeted advertising bans would have been considered "unlawful merchandising practices." This classification would have subjected platforms to civil penalties of up to $50,000 per violation, enforceable by the Missouri Attorney General. The substantial financial penalties were intended to provide a strong incentive for platforms to invest in the necessary technological and policy changes to comply with the law. Each instance of non-compliance, such as an unverified minor creating an account or a targeted ad being served to a child, could potentially trigger a separate penalty, leading to significant cumulative fines.

Beyond civil penalties, the bill also established specific criminal liability for the distribution of deepfakes involving a child, making it a felony offense. This provision underscored the severe nature of such acts and the state's intent to prosecute individuals who exploit AI technology to harm minors. Furthermore, the legislation explicitly granted parents of harmed minors the right to bring civil actions for damages against non-compliant platforms. This private right of action would have allowed affected families to seek compensation for injuries or harms resulting from a platform's failure to adhere to the law. While the bill did not detail the specific appeals process for these penalties or civil judgments, it would generally follow existing Missouri civil and criminal procedural rules, allowing for judicial review and appellate challenges to ensure due process.

Relationship to Other Instruments

The HCS HBs 3393 & 2392 was part of a broader national trend of state-level legislation attempting to regulate social media and protect minors online, often in the absence of comprehensive federal action. In crafting this bill, Missouri lawmakers likely considered and were influenced by similar legislative efforts in other states. However, the experience of these other states has been fraught with legal challenges, primarily on First Amendment grounds, as well as concerns regarding data privacy and the practicalities of age verification. For instance, Utah's Senate Bill 152 and its successor, Senate Bill 194, faced immediate legal challenges and injunctions for violating the First Amendment, demonstrating the constitutional hurdles such laws encounter.

Similar bills in Arkansas, Georgia, Louisiana, Tennessee, California (SB 976), Mississippi (HB 1126), Texas, Ohio, and Maryland have also either been enjoined, delayed, or struck down by courts. These cases often highlight the tension between protecting minors and upholding constitutional rights, particularly free speech and privacy. The Missouri bill's mandate for "commercially reasonable methods" for age verification, while aiming for data minimization, mirrors provisions in other states that have led to requirements for government IDs or biometric scans, raising privacy risks and concerns about data breaches. The legislative history of these other instruments provided a critical, albeit cautionary, context for the Missouri bill, illustrating the complex legal and technical landscape surrounding digital media regulation.

National/Federal Alignment

The HCS HBs 3393 & 2392 represented a state-level initiative in Missouri to address issues that, to date, lack comprehensive federal regulation in the United States. While there have been ongoing discussions and proposals at the federal level regarding children's online safety, data privacy, and AI governance, no overarching federal law comparable to the Missouri bill has been enacted. This legislative vacuum has prompted individual states like Missouri to take action, leading to a patchwork of varying regulations across the country. The federal government has primarily focused on sector-specific regulations, such as the Children's Online Privacy Protection Act (COPPA), which governs the online collection of personal information from children under 13, but does not address broader issues like age verification for older minors, addictive design, or deepfakes in the same comprehensive manner.

The Missouri bill's approach to age verification and content restrictions for minors on social media platforms aligns with the general federal interest in protecting children online, but its specific mandates could potentially conflict with federal laws or constitutional interpretations, particularly concerning the First Amendment. The legal challenges faced by similar state laws in other jurisdictions underscore the lack of a clear national consensus or framework for balancing online safety with constitutional rights. Therefore, had the Missouri bill passed, it would have existed as a distinct state-level instrument, potentially contributing to the ongoing legal and policy debate, and possibly influencing future federal legislative efforts, but without direct federal alignment or preemption in many of its key provisions.

Implementation Timeline

Compliance Checklist

Note: this bill DIED in the House and never became law, so none of the following is a legal obligation in Missouri. The checklist records what the bill would have required had it been enacted (its proposed effective date was 28 August 2026, and section 573.570.5(1) would have required information content providers to establish a notice-and-removal process no later than 31 December 2026). Neither ever took effect.

Sources and References