Apple tightens 18+ app controls as age verification rules expand across multiple markets

Apple is introducing expanded age-assurance measures for developers as new child protection and age-verification laws take effect in Brazil, Australia, Singapore and parts of the United States.

Beginning February 24, users in Australia, Brazil and Singapore will be prevented from downloading apps rated 18+ unless they have been confirmed as adults through an App Store age-verification process. Apple said the confirmation will be handled automatically at the platform level using what it describes as “reasonable methods,” though developers may still face separate legal obligations to independently verify users’ ages.

To support compliance, Apple has released updates to its Declared Age Range API, now available in beta. The API allows developers to request a user’s age category — such as child, teen or adult — without accessing sensitive personal data like date of birth.

In Brazil, developers can obtain a user’s age group if the individual, or a parent or guardian where applicable, agrees to share that information. The API will also return a signal indicating the method of age assurance used on the device.

Brazil-specific rules will also affect games that include loot boxes. Developers who indicate the presence of loot boxes in Apple’s age rating questionnaire will see their apps automatically assigned an 18+ rating in the Brazilian storefront, reflecting local restrictions on gambling-like mechanics for minors.

In the United States, new Apple Accounts created in Utah starting May 6, 2026, and in Louisiana starting July 1, 2026, will trigger additional age-sharing requirements. When developers request it through the Declared Age Range API, age categories will be provided to help enforce state-level regulations.

Apple said it has expanded several developer tools to align with those laws, including updates to PermissionKit’s Significant Change API, a new age rating property in StoreKit, and additional App Store Server Notifications. The API now includes signals indicating whether age-related regulatory requirements apply to a specific user and whether parental consent is required for significant app updates.

In certain cases, developers must notify parents when a child’s app introduces substantial new functionality and obtain renewed consent, even if permission had been granted previously.

The rollout reflects a broader wave of legislation targeting app stores and digital platforms over child safety and age-restricted content. In Utah, parents may seek statutory damages of up to $1,000 per violation. Louisiana law allows for fines of up to $10,000 per violation after a grace period. Platform operators may also face financial penalties in Brazil, Australia and Singapore for failing to comply with local rules.

Apple has previously raised privacy concerns about some age-verification proposals, particularly those requiring ID submission or broad data sharing with developers. The updated API is designed to provide age-category signals without disclosing detailed personal information.

The company has gradually revised its global age-rating framework over the past year, introducing more granular rating categories and additional review questions for developers. The latest changes mark a further shift toward embedding regulatory compliance mechanisms directly into the App Store’s infrastructure as governments expand oversight of digital services.