OpenX builds specialized marketplace to combat shifting children's privacy standards

The shift from passive ignorance to active certification signals a major re-platforming of high-risk inventory. By silos-ing youth traffic into a vetted channel, OpenX aims to solve the chronic under-monetization of COPPA-compliant apps that many DSPs currently block by default. For the ecosystem, this creates a blueprint for handling increasingly complex state age-verification laws while mitigating the legal liabilities of misidentified traffic. If successful, this marketplace model could become the industry standard for maintaining high-quality children’s content in a fragmented regulatory environment. Watch for adoption rates of the IAB's Global Privacy Platform signals to determine if automated granular consent can compete with these private certified marketplaces.

The regulatory landscape for youth privacy reached a critical juncture in the first half of 2026. Per Pillsbury Law and IAPP, the U.S. House of Representatives passed the Kids Internet and Digital Safety (KIDS) Act on June 29, 2026, by a significant 267-117 vote. This omnibus package consolidated 14 legislative proposals, including 'COPPA 2.0,' which expands federal protections to include teenagers up to age 17 and introduces a 'should have known' knowledge standard for platform liability. While the House version omitted the controversial 'duty of care' provision found in the Senate's version of the Kids Online Safety Act (KOSA), it mandates strict default privacy settings and restricts targeted advertising for all minors.

Concurrent with federal moves, state-level enforcement has accelerated. According to Freshfields and Wilson Sonsini reporting from April 2026, the Maryland Age-Appropriate Design Code Act reached a major milestone on April 1, 2026, requiring companies to complete formal Data Protection Impact Assessments (DPIAs) for any products likely to be accessed by children. This law is part of a broader 'AADC 2.0' movement that includes states like California, Texas, and Florida, which utilize a 'likely to be accessed' standard rather than intent, placing the burden of proof on platforms to identify young users.

To address this technical complexity, the IAB Tech Lab has been pushing for the adoption of the Global Privacy Protocol (formerly the Global Privacy Platform). Per IAB Tech Lab updates in late 2025 and February 2026, the protocol was updated to include specific strings for Maryland and other states to allow the transmission of granular consent signals through the programmatic bid stream. However, as noted by OpenX leadership, adoption remains limited as many demand-side platforms (DSPs) still struggle to parse these complex signals, often resulting in the wholesale rejection of compliant child-directed traffic.