Nine states now have youth data privacy laws on the books that go further than COPPA ever did. If your beauty or gaming creator campaigns target anyone under 18, you’re already exposed in ways your legal team probably hasn’t fully mapped. State youth privacy laws aren’t just a compliance footnote anymore. They’re rewriting how brands can target, retarget, and even measure influencer campaigns aimed at teens.
The Patchwork Problem Nobody Budgeted For
COPPA was written in 1998 for websites, not for a 16-year-old scrolling a beauty haul on TikTok Shop. It covers kids under 13 and mostly regulates data collection, not ad targeting mechanics. States got tired of waiting for federal updates, so they built their own frameworks: Connecticut, California, Virginia, Colorado, and others have layered on protections for minors up to age 18, with rules on targeted advertising, profiling, and “design features that increase engagement.”
That last phrase should stop you cold if you run gaming influencer campaigns. Loot box mechanics, streak notifications, algorithmic feed optimization — these are exactly the “addictive design” patterns several state laws now scrutinize. California’s Age-Appropriate Design Code, though tied up in litigation, set the tone that other states are now codifying with less legal pushback.
The core issue: COPPA regulates data collection from children under 13, while state laws increasingly regulate targeting and design decisions affecting anyone under 18 — a five-year gap most brand media plans don’t account for.
Why Beauty and Gaming Are Ground Zero
Beauty and gaming aren’t accidental targets for regulators. They’re the two verticals where teen engagement is highest, creator influence is strongest, and purchase behavior is most impulsive. A 14-year-old watching a skincare routine video isn’t a hypothetical edge case — it’s the core demo for half the “clean girl” beauty content on TikTok and Instagram.
Gaming has the same problem in reverse. Publishers and brands sponsoring streamers on Twitch and YouTube reach audiences skewing younger than platform terms of service technically allow, and everyone in the industry knows it.
Regulators know it too. State attorneys general have shown increasing willingness to investigate youth-targeted advertising practices, and the FTC has signaled it views influencer-driven youth marketing as a priority enforcement area, not a gray zone brands can quietly ignore.
What “Targeting” Actually Means Under These Laws
Here’s where marketers get tripped up. Most state youth privacy statutes define targeted advertising broadly enough to include:
- Lookalike audiences built from any data suggesting a user is a minor
- Interest-based retargeting following engagement with teen-coded content categories
- Influencer whitelisting/spark ads that push sponsored content into a minor’s feed based on behavioral signals
- Affiliate link tracking that profiles repeat teen purchasers for future campaign optimization
Notice that none of this requires the brand to knowingly collect birthdate data. If your targeting logic reasonably infers a minor audience — through content affinity, platform demographic skew, or creator audience composition — several state frameworks treat that as covered activity. Ignorance isn’t a defense; it’s a documentation gap.
Where Campaign Targeting Breaks the Law Without Anyone Noticing
Most brands don’t get flagged because they intentionally target 15-year-olds. They get flagged because their programmatic layer and their creator layer don’t talk to each other.
Picture this: your paid social team builds a lookalike audience off purchasers of a teen-popular lip oil. Your influencer team separately partners with a beauty creator whose audience skews 60% under 18 according to platform analytics. Neither team flags the overlap. Combined, you’ve built a youth-targeted campaign without a single person deciding to do that on purpose.
This is the operational blind spot state laws are designed to catch. It’s also exactly the kind of gap that shows up in age-verification compliance documentation audits after the fact, when it’s far more expensive to fix.
The Creator Audience Data Problem
Ask your influencer marketing platform for audience age breakdowns and you’ll usually get self-reported or modeled estimates, not verified data. TikTok, Instagram, and YouTube all provide creator-side demographic dashboards, but those numbers are directional at best. Brands relying solely on platform-provided age splits to prove compliance are building their defense on data they don’t control and can’t audit.
That’s a real problem when a state AG’s office comes asking for documentation.
Building a Reconciliation Framework, Not Just a Policy PDF
Legal teams love writing policies. Compliance happens in the workflow, not the document. Here’s what an actual reconciliation framework looks like for beauty and gaming creator programs:
- Map creator audience composition before signing, not after. Require creators to share platform analytics dashboards as part of onboarding, not just follower counts and engagement rates.
- Flag content categories with known youth skew. Skincare, cosmetics tutorials, mobile gaming, and Roblox/Minecraft-adjacent content should trigger automatic review, regardless of the creator’s stated audience.
- Separate targeting logic from creative logic. Your media buying team and influencer team need a shared checklist, not two independent sign-off processes that never cross-reference each other.
- Build a state-by-state targeting matrix. Connecticut’s threshold isn’t identical to Virginia’s. Treat this the same way you’d treat a cross-border disclosure matrix — one master document, updated quarterly, mapped by state and by platform.
- Document the decision, not just the outcome. If you decide a campaign is adult-targeted despite some youth overlap, write down why. Regulators respond better to documented reasoning than to silence.
This isn’t dramatically different from the operational discipline brands have had to build around synthetic performer disclosure rules or AI-generated ad content. State-by-state compliance work is now a permanent fixture of campaign planning, not a one-time legal review.
What This Means for Retargeting and Measurement
Retargeting is where most brands quietly violate these laws without realizing it. If a user under 18 engages with a sponsored gaming post, and your pixel fires a retargeting sequence based on that engagement, you’re now running behavioral advertising against a minor — the exact activity several state laws restrict or ban outright.
The fix isn’t abandoning retargeting. It’s building age-inference suppression rules into your ad tech stack, the same way brands already suppress certain audiences for alcohol or gambling categories.
Measurement teams need to adjust too. If you’re reporting campaign ROI based on aggregate engagement that includes minor audiences you weren’t supposed to target, your performance data is arguably evidence against you, not for you. Build reporting dashboards that segment adult-verified engagement separately, even if it makes the topline numbers less impressive to a CMO.
If your performance reporting can’t distinguish adult-targeted engagement from incidental minor engagement, you don’t have a measurement problem — you have a liability problem wearing a measurement costume.
The Compliance Calendar Nobody Wants to Build (But Should)
State legislatures aren’t slowing down. More states are expected to introduce youth privacy and design-code legislation, often modeled on whichever framework survived legal challenges most recently. Treating this as a one-and-done legal memo guarantees you’ll be behind within two quarters.
The smarter move: fold youth privacy review into the same annual compliance calendar you’re already using for disclosure and AI-generated content rules. Youth targeting review shouldn’t be a separate fire drill. It should be a recurring line item, checked every time you refresh a creator roster or launch a new campaign vertical.
This also gives your escalation process teeth. Pair it with an internal escalation protocol so that when a creator’s audience composition shifts mid-campaign, someone is actually responsible for catching it.
Industry benchmarking helps too. eMarketer and Statista both track creator audience demographics by platform and category, useful context when you’re building internal thresholds for what counts as “youth-skewing” content in your own risk matrix.
A Note on Platform Policy vs. State Law
Don’t confuse platform compliance with legal compliance. TikTok, Meta, and YouTube all have their own minimum-age policies and ad-targeting restrictions, but meeting platform terms of service doesn’t satisfy state statutory requirements. Platforms optimize for their own liability, not yours.
This is the same lesson brands learned the hard way with platform AI labels versus FTC disclosure rules — a platform badge or checkbox doesn’t automatically translate into regulatory cover. Build your compliance program around statutory text, using platform tools as a supplement, not a substitute.
FAQs
Do state youth privacy laws override COPPA?
No. COPPA remains the federal floor for children under 13. State laws layer additional protections on top, often extending coverage up to age 18 and adding targeted advertising restrictions COPPA doesn’t address.
Which states currently have the strictest youth-targeting rules for creator campaigns?
Connecticut, Virginia, and Colorado have some of the most detailed frameworks addressing targeted advertising and design features affecting minors. California’s design-code approach has been influential even amid ongoing litigation. Requirements change frequently, so brands should maintain an updated state-by-state matrix rather than relying on a single reference point.
Can brands rely on platform-provided creator audience demographics for compliance?
Not entirely. Platform dashboards offer modeled or self-reported estimates, useful for planning but not fully reliable as standalone legal documentation. Brands should supplement platform data with their own review processes and documented decision-making.
Does retargeting minors based on ad engagement violate these laws?
It can. Many state statutes restrict behavioral or targeted advertising directed at users reasonably known or inferred to be minors. Brands should build age-inference suppression logic into ad tech rather than assuming standard retargeting rules apply universally.
How often should brands review youth privacy compliance for creator programs?
At minimum, quarterly, and every time a creator roster changes or a campaign expands into a new content vertical known for youth skew, such as beauty or gaming. Folding this into an existing annual compliance calendar is more sustainable than treating it as a standalone review.
Next step: Pull your last three beauty or gaming creator campaigns and cross-reference actual audience composition against your state targeting matrix — if that matrix doesn’t exist yet, that’s the gap to close before your next campaign brief goes out.
FAQs
Do state youth privacy laws override COPPA?
No. COPPA remains the federal floor for children under 13. State laws layer additional protections on top, often extending coverage up to age 18 and adding targeted advertising restrictions COPPA doesn’t address.
Which states currently have the strictest youth-targeting rules for creator campaigns?
Connecticut, Virginia, and Colorado have some of the most detailed frameworks addressing targeted advertising and design features affecting minors. California’s design-code approach has been influential even amid ongoing litigation. Requirements change frequently, so brands should maintain an updated state-by-state matrix rather than relying on a single reference point.
Can brands rely on platform-provided creator audience demographics for compliance?
Not entirely. Platform dashboards offer modeled or self-reported estimates, useful for planning but not fully reliable as standalone legal documentation. Brands should supplement platform data with their own review processes and documented decision-making.
Does retargeting minors based on ad engagement violate these laws?
It can. Many state statutes restrict behavioral or targeted advertising directed at users reasonably known or inferred to be minors. Brands should build age-inference suppression logic into ad tech rather than assuming standard retargeting rules apply universally.
How often should brands review youth privacy compliance for creator programs?
At minimum, quarterly, and every time a creator roster changes or a campaign expands into a new content vertical known for youth skew, such as beauty or gaming. Folding this into an existing annual compliance calendar is more sustainable than treating it as a standalone review.
Top Influencer Marketing Agencies
The leading agencies shaping influencer marketing in 2026
Agencies ranked by campaign performance, client diversity, platform expertise, proven ROI, industry recognition, and client satisfaction. Assessed through verified case studies, reviews, and industry consultations.
Moburst
-
2
The Shelf
Boutique Beauty & Lifestyle Influencer AgencyA data-driven boutique agency specializing exclusively in beauty, wellness, and lifestyle influencer campaigns on Instagram and TikTok. Best for brands already focused on the beauty/personal care space that need curated, aesthetic-driven content.Clients: Pepsi, The Honest Company, Hims, Elf Cosmetics, Pure LeafVisit The Shelf → -
3
Audiencly
Niche Gaming & Esports Influencer AgencyA specialized agency focused exclusively on gaming and esports creators on YouTube, Twitch, and TikTok. Ideal if your campaign is 100% gaming-focused — from game launches to hardware and esports events.Clients: Epic Games, NordVPN, Ubisoft, Wargaming, Tencent GamesVisit Audiencly → -
4
Viral Nation
Global Influencer Marketing & Talent AgencyA dual talent management and marketing agency with proprietary brand safety tools and a global creator network spanning nano-influencers to celebrities across all major platforms.Clients: Meta, Activision Blizzard, Energizer, Aston Martin, WalmartVisit Viral Nation → -
5
The Influencer Marketing Factory
TikTok, Instagram & YouTube CampaignsA full-service agency with strong TikTok expertise, offering end-to-end campaign management from influencer discovery through performance reporting with a focus on platform-native content.Clients: Google, Snapchat, Universal Music, Bumble, YelpVisit TIMF → -
6
NeoReach
Enterprise Analytics & Influencer CampaignsAn enterprise-focused agency combining managed campaigns with a powerful self-service data platform for influencer search, audience analytics, and attribution modeling.Clients: Amazon, Airbnb, Netflix, Honda, The New York TimesVisit NeoReach → -
7
Ubiquitous
Creator-First Marketing PlatformA tech-driven platform combining self-service tools with managed campaign options, emphasizing speed and scalability for brands managing multiple influencer relationships.Clients: Lyft, Disney, Target, American Eagle, NetflixVisit Ubiquitous → -
8
Obviously
Scalable Enterprise Influencer CampaignsA tech-enabled agency built for high-volume campaigns, coordinating hundreds of creators simultaneously with end-to-end logistics, content rights management, and product seeding.Clients: Google, Ulta Beauty, Converse, AmazonVisit Obviously →