The KIDS Act Could End Anonymous Whistleblowing

A bill sold as protecting children online just cleared the House with rare bipartisan margins, and buried inside it is a provision that press freedom advocates say would make anonymous tipping to journalists functionally impossible. The KIDS Act combines several existing child safety proposals into one package, and its age verification requirements are what has digital rights groups sounding the alarm.

Key Takeaways

• The House passed H.R. 7757, the KIDS Act, 267 to 117 on June 29, 2026, under a fast track process requiring a two thirds majority.
• The bill bundles the Kids Online Safety Act, COPPA 2.0, the Safe Messaging for Kids Act, the SPY Kids Act, the Safer GAMING Act, the SAFE Bots Act, and new data broker disclosure rules into a single package.
• Platforms hosting certain volumes of content deemed harmful to minors would face age verification requirements, which in practice means collecting government ID or comparable identity data from all users, not just minors.
• Freedom of the Press Foundation and the Center for Democracy and Technology warn there is "no way to reliably verify someone's age without verifying who they are," creating a new identity data pool the government can subpoena when investigating leaks.
• The bill now moves to the Senate, where it must be reconciled with separate Senate youth privacy and platform design proposals.

What Does the KIDS Act Actually Require?

H.R. 7757 folds together six separate child safety bills: the Kids Online Safety Act, COPPA 2.0, the Safe Messaging for Kids Act, the SPY Kids Act, the Safer GAMING Act, and the SAFE Bots Act, alongside new data broker disclosure and online safety education provisions, according to IAPP's summary of the package. Among its provisions, platforms that host content deemed sexual material harmful to minors above a certain threshold would be required to verify the age of users accessing it, alongside new parental control and targeted advertising restrictions for minors' data.

The bill's text does not mandate government ID collection outright. But as Freedom of the Press Foundation's Caitlin Vogus and the Center for Democracy and Technology's Aliya Bhatia wrote in The Intercept, companies are likely to fall back on ID based verification anyway "as a fallback approach when other methods inevitably fail," since no other method reliably confirms age without confirming identity.

Why Would This Affect Whistleblowers and Sources?

The core argument from Vogus and Bhatia is structural: "There's no way to reliably verify someone's age without verifying who they are." Even privacy preserving age estimation methods, they write, "risk exposing users' identities and undermine anonymity," and every method requires platforms to "collect, process, and retain more data on all users" than they do today.

That expanded data retention is the threat, not the age check itself. A whistleblower or a source communicating with a journalist through a platform now subject to age verification would have their identity tied to that account in a way it was not before. If a government agency later wants to identify who leaked information to a reporter, that retained identity data becomes a new target for a subpoena — one that did not exist before the verification requirement created it.

Is This Concern Theoretical or Does It Have Precedent?

Vogus and Bhatia point to recent history rather than hypotheticals. They cite the first Trump administration's use of subpoenas to identify reporters' sources, and the second administration's repeated efforts to unmask online critics, including a raid on a journalist's home. Age verification providers themselves have also been breached in the past, leaking the sensitive identity data users were required to hand over — meaning the risk is not limited to government subpoenas; it extends to whoever manages to steal the database in the first place.

The authors also note a narrower but real impact on working journalists: reporters who use anonymous or pseudonymous accounts to investigate extremist groups, or who publish from countries where a byline invites retaliation, could lose access to platforms that begin requiring identity verified accounts. The bill's child safety goals and its press freedom side effects both come from the same mechanism, which is what makes the tradeoff difficult to legislate around.

What Happens Next?

The KIDS Act passed the House under suspension of the rules, a fast track process that requires a two thirds majority and typically signals bipartisan appetite to move a bill forward quickly. It now heads to the Senate, which is working from its own set of youth privacy and platform design proposals that will need to be reconciled with the House package before anything reaches the President's desk. That reconciliation process is where the age verification provisions are most likely to be narrowed, expanded, or left untouched, depending on which chamber's version wins out. The federal bill is also not the only front: states are advancing their own mandates, including Illinois HB 5511, which would push age verification down to the device level.

For anyone whose work depends on source anonymity — journalists, whistleblowers, and the people who tip them off — the practical takeaway is to treat any platform newly subject to age verification as a weaker anonymity guarantee going forward, and to move sensitive conversations to channels that were built for source protection from the start rather than retrofitted onto a mainstream platform after the fact.