Illinois Passed an Age-Verification Law That Forgot About Open Source

Illinois signed a law aimed at social media, but its fine print puts open-source operating systems on the hook for age verification.

Governor JB Pritzker signed HB5511, now Public Act 104-0664. The headlines focused on social platforms like TikTok and Instagram, but a quiet section creates strict rules for operating system providers. By January 1, 2028, every OS provider must build an age-declaration setup screen and an encrypted API that feeds age brackets to apps.

Why it matters: Community-run Linux distributions do not have compliance departments, corporate budgets, or age-gated installer screens. Colorado exempted open-source projects, and California is attempting to fix a similar oversight. Illinois included no such exception, legally exposing noncommercial maintainers to civil penalties capped at $7,500 per child in the bill's text—or up to $50,000 per violation, according to the governor's press release.

Know this: The law requires a self-declared birth date at setup rather than a facial scan or passport check. Linux users are already responding on Reddit by planning to set their install birth dates to the Nixon administration.

Unless state lawmakers pass a fix before 2028, open-source maintainers face a strange regulatory headache for simply shipping an operating system.