Forgot your password?
typodupeerror
Android Operating Systems

GrapheneOS Refuses to Comply with Age-Verification Laws (tomshardware.com) 69

An anonymous reader shared this report from Tom's Hardware: GrapheneOS, the privacy-focused Android fork, said in a post on X on Friday that it will not comply with emerging laws requiring operating systems to collect user age data at setup. "GrapheneOS will remain usable by anyone around the world without requiring personal information, identification or an account," the project stated. "If GrapheneOS devices can't be sold in a region due to their regulations, so be it."

The statement came after Brazil's Digital ECA (Law 15.211) took effect on March 17, imposing fines of up to R$50 million (roughly $9.5 million) per violation on operating system providers that fail to implement age verification...

Motorola and GrapheneOS announced a long-term partnership at MWC on March 2, to bring to bring the hardened OS to future Motorola hardware, ending GrapheneOS's long-standing exclusivity to Google Pixel devices. A GrapheneOS-powered Motorola phone is expected in 2027. If Motorola sells devices with GrapheneOS pre-installed, those devices would need to comply with local regulations in every market where they ship, or Motorola may need to restrict sales geographically.

Or, "People can buy the devices without GrapheneOS and install it themselves in any region where that's an issue," according to a post on the GrapheneOS BlueSky account. "Motorola devices with GrapheneOS preinstalled is something we want but it doesn't have to happen right away and doesn't need to happen everywhere for the partnership to be highly successful. Pixels are sold in 33 countries which doesn't include many countries outside North America and Europe."

Tom's Hardware also notes that GrapheneOS "isn't the first and won't be the last company to outright refuse compliance with incoming age verification laws."

"The developers of open-source calculator firmware DB48X issued a legal notice recently, stating that their software 'does not, cannot and will not implement age verification,' while MidnightBSD updated its license to ban users in Brazil."
This discussion has been archived. No new comments can be posted.

GrapheneOS Refuses to Comply with Age-Verification Laws

Comments Filter:
  • If someone downloads it from Afghanistan and Taliban outlaws it, who cares? Why care about Brazil? Maybe just write, which juristiction does apply to the project, and ignore every other stupid law out there.
    • Re: Why ban Brazil? (Score:5, Informative)

      by kenh ( 9056 ) on Monday March 23, 2026 @08:59AM (#66055914) Homepage Journal

      They, GrapheneOS, didn't 'ban Brazil' they took a stand against a law in Brazil that has the effect of Brazil itself banning GrapheneOS.

      GrapheneOS will happily sell their product anywhere it's legal, they simply choose not to comply with laws they find objectionable, which limits their market.

    • It's to cover their asses if someone is found using it in Brazil (after presumably getting a device with the OS from elsewhere / from a 3rd party) and they get fined.

    • No company can violate the laws of a country in which they want to operate. It's Brazil that passed this law, and since GrapheneOS has no intention of abiding by it, they do need to let their Brazilian users know that the latter would be violating Brazilian law if they used them, and that Graphene wouldn't be held responsible. That's the least they need to do

    • by Opyros ( 1153335 )
      According to this [distrowatch.com], MidnightBSD is only temporarily banning use in those jurisdictions while preparing some sort of daemon to comply with the new laws.
  • WTF Laws (Score:5, Insightful)

    by TheMiddleRoad ( 1153113 ) on Monday March 23, 2026 @04:19AM (#66055562)
    These laws make essentially zero sense. Unenforceable. Pain in the ass. Circumventable. Just insane.
    • Re:WTF Laws (Score:5, Funny)

      by Gravis Zero ( 934156 ) on Monday March 23, 2026 @07:56AM (#66055784)

      "make essentially zero sense"
      "Pain in the ass."
      "Just insane."

      We know about the politicians but what were you saying about the laws? ;)

    • by higuita ( 129722 )

      Hey, blame Meta/facebook! https://www.yahoo.com/news/art... [yahoo.com]

      They are the ones pushing this, so they can track the age of each user... but sold as a way to protect kids
      Just like Bush sold all the the tracking and invasive scans and listenings in the name of fight against terrorism

      People accept stupid things if there is a danger implied that will be solved by that... this was exactly the same argument Nazi used to slowly strip Jews from rigths until they had none left

    • Absolutely. It's thought that Meta is behind these laws in California and Colorado, since they have been under pressure to verify the ages of their users. Instead of trying to push this on to OS users, they should have pushed back at government busybodies who're imposing this in the first place. It's up to parents to prevent their kids from using social media until a certain age. From the POV of social media platforms, they have no business knowing anything about their users. I should be able to create

  • by Viol8 ( 599362 ) on Monday March 23, 2026 @04:21AM (#66055566) Homepage

    Especially the ones created by teams scattered around the world and have zero commercial or legal presence in Brazil?

    More stupid laws made by technologically pig ignorant politicians.

    • by BladeMelbourne ( 518866 ) on Monday March 23, 2026 @04:31AM (#66055582)

      technologically pig ignorant politicians

      Much redundancy in these words, there is.

    • How are they gonna fine someone for something that is free?

    • by alexgieg ( 948359 ) <alexgieg@gmail.com> on Monday March 23, 2026 @10:30AM (#66056138)

      I'm Brazilian. The law has an article that allows regulatory bodies to define something as not being affected by the law if that's in the public interest, so it's likely the government will use that to classify everything they have no means to actually police as being fine. Which means this law can be actively enabled or disable to affect anyone the government wants affected, meaning mostly companies with deep pockets who can be fined for lack of compliance. Going after those without any money would be a waste of time for enforcers.

      Also, Brazil has something first world countries lack: a population used to disregarding laws we dislike. People here have already developed plenty of workarounds for age verification in websites, and once it starts popping up on phones and PCs, will do the same. Since most already use a pirated Windows, they'll simply have that pirated Windows come without age verification.

      • Interesting post, thanks.

        But if i may, if you think us "first world" countries lack people who skirt the law, you idealise us. :D

        And i am not sure i want to call Brazil some sort of third world country. :D

        • by alexgieg ( 948359 ) <alexgieg@gmail.com> on Monday March 23, 2026 @11:25AM (#66056298)

          if you think us "first world" countries lack people who skirt the law, you idealise us. :D

          No, that's not it. It's a cultural difference. In first world countries skirting the law is something people do exceptionally. In countries such as mine, it's a way of life and survival, everyone skirting the laws because the laws aren't really meant to be followed in full, they're mean to be tool the government uses when it deems useful. If someone were to try, they'd be crippled to such an extent they'd be barely able to do anything, at all.

          First world countries are so, in great part, because most laws are sane, mean to be followed by everyone, and most everyone does so. Although, granted, there's nowadays a level of "third-world-ization" going on there, what with more and more laws being approved that are similar to our more than they are to your old laws. I hope this process may stop and reverse at some point, but if not, well, once your legal system is fully corrupted, we'll be able to provide you with plenty of suggestions, tips, and tricks, on how to evade unjust laws, as we have literal centuries of experience doing so.

      • While it's one thing for Brazilian citizens to decide to disregard whatever laws they don't like, it's another thing for non-Brazilian companies whose products/services are being used by Brazilians to pretend that those laws don't exist. They can't, and shouldn't. What they can do is state that their product/service is not meant for use in Brazil, and then, if Brazilians figure out a way to get them and use them anyway, that's b/w the Brazilian people and their government

        • Certainly. But then, those non-Brazilian companies can mock-comply. Then Brazilians will continue using them all the same, in standard Brazilian fashion, with companies and people pretending to obey the law, the government pretending to enforce it, and everyone knowing everyone else is pretending but having no way to prove it.

          Case in point, those external companies seem to be using Cloudflare's georestriction rules, which is fine with us, as everyone is quickly learning to use VPNs.

    • They apparently think they are Ofcom, and that their laws apply all over the world. When in fact, the most they can do is impound the computers of citizens who use systems that refuse to do age verification

  • Finally a rational response to this nonsense.
    • Re: Good (Score:4, Interesting)

      by kenh ( 9056 ) on Monday March 23, 2026 @08:42AM (#66055866) Homepage Journal

      Tom's Hardware also notes that GrapheneOS "isn't the first and won't be the last company to outright refuse compliance with incoming age verification laws."

      The article goes on to say the GrapheneOS folks understand this position may cost them sales, "so be it."

      Exactly the right response. Imagine if Windows or macOS took a similar position, what would these countries do? Seriously, while it may impact software/system sales in the very beginning, it will hurt the gov't and all other users of the systems as they are suddenly found in violation of these age restriction laws.

      • by ukoda ( 537183 )

        Imagine if Windows or macOS took a similar position, what would these countries do?

        In first world countries it would result in the role back of the law. If Microsoft was to block the sale of Windows in California and PC makers block sales of their PC in California too, it would drive home the point real quick.

        However Microsoft and PC makers would never do that as they couldn't care less about the rights of consumers and would not want to loose a single sale by taking the moral high ground.

  • In some remote cavern, the OS spits out these error messages, after the age was mistyped

    Why are you not with husband yet?

  • by Anonymous Coward

    Does anyone seriously think the powers that be care about toy operating systems with a handful of hobbyist users?

    All that matters is that Windows, MacOS, Android, iOS, and probably some of the bigger more professional Linux distros are all going to comply and that's enough to catch 99% of the population.

    • How many Brazilian computer users are running Windows 11, compared to running earlier editions no longer sold (Win10 and earlier?)

      I wonder if the law is only on products offered for sale after March 17, or if it applies to any operating system in use after March 17 - the latter would be very, very difficult to enforce.

    • Does anyone seriously think the powers that be care about toy operating systems with a handful of hobbyist users?

      All that matters is that Windows, MacOS, Android, iOS, and probably some of the bigger more professional Linux distros are all going to comply and that's enough to catch 99% of the population.

      OTOH, maybe the remaining 1% are more likely to cause grief for the powermongers. Also, that 1% keeps the possibility of non-compliance alive, allowing for the possibility of the 99% to decrease and the 1% to increase.

  • Or, Motorola can just provide a different launcher that does the age verification. Which would be absolutely trivial for them to do.

    Talk about a manufactured clickbait article.

    • Why appease stupidity? Saying "no" isn't clickbait, unless you define clickbait as being enraged that someone finally provides a rational response to this.

    • I believe the law is applied to the OS, not the product as a whole - the OS needs to supply user age info it collects from the user to the applications running on it, and GrapheneOS is refusing to provide that response.

      The requirement is not just the collection of age info, it is also the ability of the OS to provide that captured age info on demand by any running application - at least that's how I understand this situation.

  • by schwit1 ( 797399 ) on Monday March 23, 2026 @08:18AM (#66055816)

    THEY want 100% attribution of all online content. It starts with the little chips at the ice of anonymity. First it's the age, then the location, then full digital ID plus biometric verification.

  • They got a lot of RTOS devices out there in the wild...running things.

    Would be a shame if all those illegal operating systems were turned off by vendors by legal force.

    • That may be a fun time. I am all for it!

    • by habig ( 12787 )
      heh. So the ATM will have to ask the age along with your PIN to comply. And, who is using the router, or smart plug, etc? These day's it's OS's all the way down to the turtles.
  • Heck, with an older Android phone laying around, this may just be the kind of thing that gives me an incentive to install Graphene OS.

    Tech nerds may be a minority, but this absolutely feels like a defining moment when a group of people takes a principled stand against the utter stupidity and ignorance lawmakers everywhere insist on supporting.

    Wherever they are on the planet, here's hoping it inspires others to join the resistance.
  • Simple put in your terms of use not valid anyplace age verification is required. No need to not sell/ship or block access. Let users decide if they want to break a law/rule. If this CA/CO law go into effect its going to be fun when someone needs to age verify when they plug there android power toster into the wall. OS is so broadly defined basic anything that has a computer has an OS.. Can drive your car because the OS hasnt validated you.
  • If and when you find yourself in a jurisdiction where some sort of age verification law is in effect, just remember that it's very unlikely that the law will require the date to be given in the Gregorian Calendar. There are many other possibilities, and as an example, here's a website that can convert your birth date into the Hebrew Calendar [hebcal.com]. This has many advantages: first, the date is written from right to left, not left to right, which should have interesting effects on any software trying to use it.

The nice thing about standards is that there are so many of them to choose from. -- Andrew S. Tanenbaum

Working...