Virginia Tried to Punch a Time Clock Into the Internet. A Judge Hit Pause.
United States – February 27, 2026 – Virginia tried to fix teen social media with an ID gate and a timer; a federal judge said not so fast today.
I have seen this civic script play out in enough town-hall folding chairs to predict the beats: a real problem, a fast bill, and a promise that the new power is narrow and temporary. Then a court walks in like a librarian with a red pen and asks the questions nobody put on the flyer.
Judge blocks Virginia’s age-check and one-hour limit (for now)
On Friday, a federal judge blocked Virginia from enforcing its new rule aimed at minors on social media, granting a preliminary injunction in a case brought by NetChoice. The judge found NetChoice was likely to show the law unconstitutionally infringes the free speech rights of adults, children, and the group’s member companies. That is the First Amendment doing its unglamorous job: slowing down sweeping fixes that can sweep up speech along the way.
This is not a love letter to Big Tech. It is a reminder that when government gets nervous, it reaches for levers. The levers rarely stop at the intended floor.
What Virginia passed (plain English)
- Age determination: Social media platforms must use “commercially reasonable methods” to determine whether a user is under 16.
- Time cap: If a user is a minor, the platform must limit use to one hour per day per service or application.
- Parental override: A mechanism must allow a parent, via verifiable parental consent, to raise or lower that limit.
- Use limits on age data: Information collected for age determination cannot be used beyond age determination and “age-appropriate experiences.”
- No retaliation pricing/quality: Platforms cannot withhold, degrade, lower quality, or increase price because they are not permitted to provide more than the one-hour daily limit.
- Enforcement rules: The Virginia Attorney General has exclusive enforcement authority, there is a 30-day notice-and-cure window, penalties can run up to $7,500 per violation, and there is no private right of action.
The Orwell check: “commercially reasonable” is a permission slip
“Commercially reasonable” is not a method. It is a euphemism that invites methods, and methods at scale tend to mean more collection, more vendors, more retention, and more breach risk. Statutes can limit use on paper, but they do not encrypt databases or stop creep in how phrases like “age-appropriate experiences” get interpreted.
The liberty ledger, plus the Paine test
Liberty ledger: minors may gain less compulsive use by default; parents get a lever; the state gains enforcement power over platform design. But the costs are uneven: compliance is architecture, and smaller platforms can get squeezed hardest. And to identify who is under 16, pressure builds to identify everyone, turning speech into something you do after clearing a gate.
The Paine test: does this expand liberty, or concentrate power? Virginia aims to protect kids, but it leans on an identity-and-access mechanism that can outlive the moment.
Accountability, not theatrics
Virginia will keep fighting, and the platforms will keep fighting back. Good. Courts exist to force daylight on the tradeoff. Legislators should rewrite with constitutional limits and real privacy engineering in mind. Watchdogs should demand disclosure about any age-screening vendors and data flows that would have been used. And voters should keep asking: are we solving a child-safety crisis, or installing an ID checkpoint in front of speech and calling it “consumer protection”?