The Digital Rights Every Teen Already Has (and Doesn't Know About)

On August 26, 2026, Meta agreed to pay roughly 18 billion dollars, cap teen accounts at two hours a day across Facebook and Instagram, block access from midnight to 6 a.m., shut off most push notifications during school hours, hide like counts by default, and disable the filters that change how a face looks. Forty-seven states, Washington D.C., and several territories signed on. It is the largest agreement a technology company has ever made over how it treats young people, and not one teenager was a party to it.

Every protection in that document is a default setting a parent can loosen. This is the pattern in nearly every law and settlement written about teenagers and the internet: we are the subject of the rule and never a party to it. Digital rights literacy is the missing piece — knowing what a company is legally required to do for you, what you can demand, and how you demand it. That skill is not the same as knowing screens are bad for you, and it's not media literacy. Almost nobody teaches it.

The cliff at thirteen

COPPA, written in 1998, covers children under thirteen. On your thirteenth birthday, that federal floor disappears. What replaces it is a market: advertising identifiers follow your device across apps, and data brokers assemble profiles from your activity, location, and even your parents' behavior to sell to advertisers. When California forced brokers to register, two dozen disclosed selling data belonging to minors.

Congress has circled the gap for years. COPPA 2.0 would extend protection to teens 13–16 and let them consent, access, delete, and correct their own data instead of routing everything through a parent. It passed the Senate unanimously in March 2026; the House passed a weaker version in June. Nothing is law yet.

Rights that already exist

Some rights already exist and have for years. Since 2015, California's "eraser law" has given every California resident under eighteen the right to remove content they posted — a right that belongs to the minor, not the parent. The California Consumer Privacy Act goes further: a business cannot sell or share the personal information of a Californian under sixteen without opt-in consent, and for a teen aged thirteen to fifteen, that consent comes from the teen.

The gap is between having a right and using one. Roughly a third of 18–24 year-olds have exercised a deletion or correction request, compared to four percent of older consumers — yet a California survey found forty-two percent of people who never opted out simply didn't know they could. A right nobody exercises isn't protection. It's paperwork.

What school actually is

The place where a student's digital life is most heavily monitored is also the place they understand least. Monitoring software used across thousands of districts scans searches, documents, and chats on school devices, and records requests have shown false positives far outweighing accurate flags — alongside real breaches exposing thousands of unredacted student documents, some outing students as gay or transgender to school staff. Students keep Fourth Amendment rights at school, but courts require only "reasonable suspicion," and evidence gathered improperly can still lead to discipline.

The right most teens have and don't know about

An estimated six million high school students have been exposed to nonconsensual intimate imagery, including deepfakes, connected to their school. The TAKE IT DOWN Act, signed in May 2025, makes publishing such images — real or generated — a federal crime and requires platforms to remove them within forty-eight hours of a valid request. That is a right a seventeen-year-old can exercise personally, in an afternoon, without a parent, a lawyer, or a police report. Almost none of them know it's there.

What's actually missing

Twenty-five states now have media literacy laws on the books, and thirty-four have issued AI guidance for schools. Those laws teach students to evaluate a source and spot a manipulated video — worth doing, but a completely different skill. Nothing in a media literacy standard tells a student that a California minor can require a platform to take down a post, or that a forty-eight hour removal clock exists for the worst thing that can happen to you online.

Every settlement and law about teenagers is negotiated by people who aged out of the category decades earlier. The gap that keeps opening is that we show up to the conversation knowing what we're afraid of and not knowing what we're owed. Digital rights literacy is the difference. It's how you stop being the subject of the sentence.