GrapheneOS, the privacy-focused Android fork, has publicly refused to comply with emerging laws in Brazil, California, and Colorado that require operating systems to collect user age data during setup. The project stated it will never require personal information or identification, even if that means its devices cannot be sold in certain regions. Brazil's Digital ECA imposes fines up to ~$9.5M per violation, while California's AB-1043 (effective 2027) mandates real-time age data sharing with app stores. GrapheneOS is a Canadian nonprofit, though jurisdictional questions remain open given recent cross-border enforcement precedents. The stance complicates a newly announced partnership with Motorola, which plans to ship GrapheneOS-powered devices in 2027. Critics of the laws, including over 400 computer scientists, argue the regulations create surveillance infrastructure without meaningfully protecting children since self-reported age is trivially bypassed.
Sort: