The laws, and links to the actual text

Governs any site or service directed to children under 13. The amended Rule took effect 23 June 2025 and full compliance has been required since 22 April 2026. Personal information now expressly includes biometric identifiers, and operators owe a written information-security policy and data-retention limits.

Makes it a federal crime to publish sexually explicit images of a person without consent — AI-generated images count exactly the same as real photographs. Sharing or threatening to share intimate images of a minor carries fines and up to three years. Since 19 May 2026 covered platforms must run a notice-and-removal process and take content down within 48 hours of a valid notice.

Bars any law enforcement agency from imposing a waiting period before accepting a missing child report, and requires the child to be entered into the state system and NCIC within two hours. This is the law behind "you do not have to wait 24 hours."

Requires electronic service providers to report apparent child sexual abuse material to NCMEC's CyberTipline. It is why platform reports exist at all, and why a CyberTipline report is the right first channel for online exploitation.

Defines child maltreatment as abuse, sexual abuse, neglect, sexual exploitation, or abandonment, and defines "child" as birth to 18. This is the definition every Arkansas report is measured against.

Sets the standard at reasonable cause to suspect — not proof — and requires an immediate report. Grants good-faith reporters immunity from civil and criminal liability, and bars a school, Head Start program, or day care from requiring permission before an employee reports.