A CLA Framework Analysis | Julie Barrett, Conservative Ladies of America
Senator Jim Banks (R-IN) introduced the Safety and Age Filtering Enforcement for Kids Act, the SAFE for Kids Act, on June 10, 2026. The bill requires commercial pornography websites to implement age verification measures to prevent minors from accessing sexually explicit content online.
The goal is right: children should not be exposed to pornography. The harm is real, well-documented, and accelerating. Research cited in the bill’s press release indicates the average first exposure to pornography now occurs around age 12, with the majority of those exposures happening unintentionally.
But protecting children from pornography is the job of parents, not the federal government. And even where government intervention is constitutionally appropriate, the mechanism matters as much as the intention. When CLA runs the SAFE for Kids Act through its legislative evaluation framework, what emerges is a bill with genuine legal footing, real enforcement teeth, and a verification architecture that we cannot support.
How CLA Evaluates Technology Legislation
CLA applies a three-part test to every technology bill:
- Does it protect children?
- Does it empower parents?
- Does it include strong data privacy protections?
We also apply a Digital ID lens, because we have documented, across dozens of state and federal bills, that legislation framed around child safety consistently functions as an on-ramp to digital identity infrastructure. The infrastructure is the constant, the justification is the variable.
What the Bill Actually Does
The SAFE for Kids Act targets commercial entities that knowingly and intentionally publish internet content where more than one-third qualifies as “sexual material harmful to minors”. This is a standard derived from the Supreme Court’s three-part Miller obscenity test, modified for minors. Covered entities must either collect digital identification from users or route them through a commercial age verification system before granting access.
Enforcement is substantial. The FTC handles civil enforcement. The Department of Justice may initiate criminal investigations and prosecutions. Knowing violations carry up to five years imprisonment and fines reaching $1.5 million for organizations. Parents and individuals have a private right of action.
What the Bill Gets Right
We want to credit what works in this bill before explaining why it still fails the framework.
The legal foundation is the strongest of any bill CLA has analyzed. In Free Speech Coalition v. Paxton (2025), the Supreme Court upheld Texas’s age verification law for pornography websites, recognizing a compelling government interest in protecting minors from obscene material online. The SAFE for Kids Act is built directly on that constitutional validation. This is not contested legal terrain. For a bill in this space, that matters.
The scope is genuinely narrow. Unlike social media age verification bills that sweep in every platform, every app, and every account holder regardless of age, the SAFE for Kids Act applies only to commercial entities that knowingly publish content where more than a third is legally obscene. That is a meaningful definitional constraint.
The data prohibition is the right language. Section 3(c) explicitly prohibits covered entities and their third-party contractors from retaining or selling any information collected during the verification process. That is the provision every age verification bill should include and most do not.
The enforcement structure is real. FTC authority, DOJ criminal jurisdiction, and a private right of action for parents give this bill more enforcement teeth than most state-level equivalents.
Where the Framework Produces an Oppose
The Verification Architecture
Section 3(a)(2) gives covered entities two compliance paths: collect “digital identification” from users, or contract with a “commercial age verification system.” The definition of digital identification in Section 2(5) includes government-issued identification as its primary example. The definition of a commercial age verification system permits any method that “reliably and accurately” indicates whether a user is a minor, with no vendor standards, no accreditation requirements, and no restrictions on which companies may provide that service.
This is the open door. The bill does not mandate a specific system, but it expressly names government-issued identification as a compliance method and leaves the commercial vendor market entirely unregulated. That combination of government ID authorized and third-party vendors unrestricted is the same infrastructure architecture CLA has identified in bill after bill, in state after state. The label on the door changes, but the door does not.
The FTC Rulemaking Grant
Section 5(a)(2)(E) authorizes the FTC to “promulgate such rules as may be necessary to carry out this Act.” There are no scope limitations on that authority, no guardrails, no deadline constraints.
CLA has seen this provision before…in Alabama HB 161, which was signed into law and immediately created a rulemaking vector through which the Attorney General could specify government-issued credentials as the required verification standard without another legislative vote. The SAFE for Kids Act hands the same authority to the FTC. What the bill’s text leaves open, the FTC’s rulemaking process can close in whichever direction a future administration chooses. Remember, the FTC members are appointed, not elected.
The Third-Party Aggregation Problem
Section 3(b) explicitly permits covered entities to contract with third parties for compliance. Section 3(c) prohibits those third parties from retaining or selling collected data. That no-retention language is the right provision, but it does not solve the aggregation problem.
A single commercial vendor handling age verification for hundreds of covered websites, even without retaining individual records, accumulates transactional metadata, behavioral patterns, and technical infrastructure at scale. The no-retention clause governs what they keep. It does not govern what they build, what they know, or what a future policy environment could require them to produce.
The Mission Creep Architecture
The SAFE for Kids Act applies only to pornography websites today.
However, once age verification at the point of access is legally normalized, technically built, commercially deployed, constitutionally validated, the expansion argument requires no new engineering. It requires a policy decision. “We already verify age for pornography. Why not for social media? For violent content? For political speech that might be harmful to minors?” Each step references the last. The first step is always chosen for maximum political resistance to opposition. Nobody wants to be the person arguing against protecting children from pornography.
CLA is not arguing against protecting children from pornography. We are arguing that the mechanism being used to accomplish that goal builds infrastructure that does not stay in its lane, and that history, across every technology bill we have analyzed, confirms it never does.
What CLA’s Framework Produces
Running the SAFE for Kids Act through CLA’s full 26-question evaluation framework, the bill scores 28% overall. One auto-oppose trigger fires: the bill expressly authorizes government-issued identification as a verification method. Two additional auto-oppose questions require judgment calls: the third-party aggregation concern and the conditioned-access question, both of which point toward oppose under CLA’s infrastructure thesis.
CLA’s position: Oppose.
The bill is constitutionally sound, and the enforcement structure is serious. The no-retention clause is the right language. But none of that changes what the verification architecture builds or what the FTC rulemaking grant makes possible. Congress can protect children from pornography without authorizing government ID as a compliance mechanism and without delegating unconstrained rulemaking authority to a federal agency to define what verification means in practice.
Protecting children from pornography is a parental responsibility first. Where government acts, it should act in ways that empower parents, not in ways that build the infrastructure of a digital identity system and call it child safety.
Julie Barrett is the founder and president of Conservative Ladies of America, a 501(c)(4) constitutional conservative policy advocacy organization. CLA tracks technology legislation — including age verification, digital ID infrastructure, app store accountability, and AI policy — through a constitutional and parental rights lens. Learn more at conservativeladiesofamerica.com. Contact: [email protected]