Section 4 of KOSA establishes mandatory default safeguards for known or reasonably inferred minor users. (1) Section 4(a) Mandatory Default Safeguards: All covered platforms must establish the following safeguards as DEFAULT for known minors and provide ability for parents to control: (a) Strong privacy settings - private account default + limit access to minor profile + no public discoverability; (b) Time management tools - default limits + notifications + parent controls; (c) Content filtering controls - inappropriate content blocking + reporting; (d) Restricted contact from unknown adults - default blocking + parent override; (e) Opt-out of personalized recommendations - non-personalized default + opt-in for personalization; (f) Geographic location default OFF - no precise location tracking + parent override; (g) Direct messaging restrictions - default disabled from non-followers + non-friends; (h) Live streaming restrictions - default disabled for minors; (i) Search restrictions - inappropriate query blocking; (j) Marketing/advertising default minimization. (2) Section 4(b) Configuration Defaults: (a) Strongest privacy at signup; (b) Cannot be weakened without parental or older-minor (16-17) action; (c) Re-default annually + on material policy change; (d) Account migration considerations for ageing-up. (3) Section 4(c) Personalization Opt-Out Right: (a) Right to opt-out of personalized recommendations + targeted advertising + profile-based content; (b) Opt-out persistent + applies across device; (c) Chronological feed alternative + non-personalized; (d) Aligns with Colorado CPA + California CCPA opt-out principles. (4) Section 4(d) Restricted Contact: (a) Default block of contact from unknown adults; (b) Allow contact only from confirmed friends/followers + parental approval; (c) Reporting mechanism for unwanted contact; (d) Block of mass contact + spam; (e) Stranger danger considerations. (5) Section 4(e) Time Management: (a) Default time limits - configurable; (b) Reminder notifications; (c) Break prompts; (d) Cumulative usage tracking; (e) Parent control of time limits; (f) Sleep mode default + bedtime restrictions; (g) School hours restrictions. (6) Section 4(f) Content Filtering: (a) Default filtering of mature content + violence + sexual content + drugs + alcohol + gambling + self-harm + eating disorders content; (b) Age-appropriate content levels; (c) Parental customization; (d) Reporting mechanism for inappropriate content; (e) Community Guidelines integration. (7) Section 4(g) Geographic Location: (a) Precise geolocation default OFF; (b) Coarse location only with consent; (c) Location sharing limited; (d) Location-based features restricted; (e) Stalking + predator protection. (8) Section 4(h) Dark Patterns Prohibition: (a) NO design + UI manipulation; (b) NO confirmshaming; (c) NO forced continuity; (d) NO obstruction of cancellation; (e) NO misdirection + pre-checked boxes; (f) Coordinated with FTC dark patterns enforcement; (g) Children Code UK guidance + EU DSA Article 25. (9) Section 4(i) Implementation Defaults: (a) At signup for new minors; (b) For existing minors during transition period; (c) Re-default annually + on material policy change; (d) Account creation flow + age verification; (e) Privacy by Design integration. (10) Multi-State + International Coordination: (a) UK Age Appropriate Design Code (Children Code) - 15 Standards; (b) California AB 2273 Age-Appropriate Design Code Act; (c) EU DSA Article 28 Minors; (d) Texas SCOPE Act; (e) Maryland Kids Code; (f) New York SAFE for Kids Act; (g) State coordination + harmonization. (11) Enforcement of Section 4: (a) FTC Section 5 enforcement; (b) State AG enforcement; (c) Civil penalty up to USD 43,792 per violation; (d) NO Private Right of Action. (12) Industry Practical Implementation: (a) Account flag - minor vs adult; (b) Default settings cascade; (c) Parent dashboard + minor account linkage; (d) Age verification - knowledge based + cohort estimation + facial age estimation + ID-based + parental confirmation; (e) Privacy-preserving age inference. Coordinates with COPPA + UK Age Appropriate Design Code + California AB 2273 + EU DSA + Texas SCOPE Act + Maryland Kids Code + New York SAFE for Kids Act + FTC Section 5 + Dark Patterns enforcement + Privacy by Design + Section 9 Kids Online Safety Council + State AG coordination. KOSA Default Safeguards + Section 4 applies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.