曼昆普法 | 从Meta 170亿美元儿童安全和解案, 看清产品合规红线

致:开发面向或可能触及未成年人的App、游戏、社交及AI陪伴/聊天机器人产品的企业(美国 / 中国 / 全球)律师提醒与合规建议 | 2026年8月 | 仅供参考,不构成针对具体事务的法律意见

如果贵司的产品面向未成年人,或虽未刻意面向、但实际上有大量未成年人在使用,则下面这起案子值得相关企业认真研读。

2026年8月26日,社交平台巨头 Meta(Facebook 与 Instagram 的母公司)同意在十年内支付最高约170亿美元,以了结美国数十个州(2023年起共42位总检察长提起、其中33州联邦联合诉讼)对其“把产品设计成让孩子上瘾”的指控——这是美国科技行业史上最大的单案和解。本案发生在美国、适用美国法律,但它对全球同类产品企业都有直接的借鉴意义。本文向企业解释:案子为什么发生、法律追的是什么、这条红线是否全球一致,并分别为美国企业、中国企业与其他全球企业给出合规建议。

                    

一、Meta儿童安全案件的核心: 告的不是“内容”,而是平台的“设计”

各州起诉 Meta,靠的不是“平台上有坏内容”,而是“平台被刻意设计成让未成年人上瘾”。这是本案与以往平台责任案最根本的区别。2023年,共有42位州与特区总检察长对 Meta 提起诉讼——其中33个州于当年10月在加州北区联邦法院提起联合(合并)诉讼,哥伦比亚特区及其余数州则在各自法院另行起诉——共同主张 Meta 明知其设计会损害青少年身心健康却仍为之,并向公众隐瞒(庭审阶段约有29个州参与)。相关联邦案件在加州北区联邦法院合并审理, 2026年8月18日开庭,一周后即达成拟议和解。

本案件的意义在于:平台企业过去习惯依赖的“内容并非本司发布、平台免责”的这类抗辩, 在其平台“设计缺陷”这一路径下, 基本无从援用。

                  

二、为什么“产品设计”本身会使企业被追责?

监管者的逻辑是:若企业的产品以一整套机制,系统性地利用未成年人尚不成熟的自控能力延长其停留时间,则由此造成的伤害,企业须承担责任。被反复点名的“成瘾性设计”包括:

•无限下滑——取消自然的停止点;

•不确定节奏的推送通知——像间歇性奖励一样反复“召回”用户;

•以“黏性/参与度”为唯一优化目标的推荐算法——优先推送最能延长停留、而非对用户最有益的内容;

•点赞、已读、连续打卡等社交激励——放大青少年对同伴认可的敏感与焦虑。

这些机制被指造成:未成年人强迫性使用、睡眠剥夺、注意力与情绪问题、身体形象焦虑,乃至与抑郁、焦虑相关的心理损害。与此同时,在明知有大量不满13岁儿童使用的情况下,未取得家长同意即收集其个人信息,已被指违反美国《儿童在线隐私保护法》(COPPA)。请注意:这里的每一项“设计”,很多产品都有——这正是本案示范意义的来源。

                

三、Meta 被要求做的整改,即企业未来可能被要求做的

这次和解最值得企业警惕之处,是它把一系列产品改造变成了“可强制执行的义务”。以下清单,可直接读作监管者眼中的“合规基线”:

关于生效:该和解目前仍为“拟议”,须经审理法官 Yvonne Gonzalez Rogers 最终批准方为终局;据报道法官已表示倾向批准,但截至本文尚未正式核准。Meta 已表示将在“数月内”着手落实。对企业而言,不必等它终局——上面这份清单,现在就应视为参照标准。

                 

四、法律逻辑:监管者用的是“老法律”, 门槛并不高

很多企业误以为“没有专门的算法/AI 法,就没人管得了我”。本案恰恰相反:各州没有依赖任何新立法,而是用三部现成的法律打出组合拳——(1)州消费者保护法,针对就产品安全性作出的虚假或误导陈述与隐瞒;(2)公共妨害,针对对公众(尤其青少年)健康造成的持续性危害;(3)联邦 COPPA,针对未经家长同意收集儿童数据。这意味着:即便在没有专门立法的领域,监管者依然可以运用传统法律,直接审查企业的产品设计与默认设置。“无专门法即无风险”是危险的错觉。

                  

五、律师合规建议:风险正在向哪些企业蔓延

                     

六、这起案子只管美国吗?——红线是否全球一致

这是企业最关心的问题。答案分两层:

第一层(法律适用):本案适用美国法律,但决定企业是否“被管”的,不是公司国籍,而是其所服务的市场。 只要企业向美国用户(尤其是相关州的未成年人)提供产品,或事实上收集了美国儿童的数据,即可能落入美国州消费者保护法与联邦 COPPA 的管辖——即便其总部位于中国、欧洲或其他任何地方。反之,若企业完全不进入美国市场,则本案的美国法律责任原则上不直接适用。换言之:进入美国市场=直接受约束;不进入=不受该美国法律直接约束。

第二层(监管趋势):但“不进入美国就高枕无忧”是错的。 “成瘾性设计 + 薄弱年龄门槛 + 未成年人数据”这条红线,正在全球范围内趋同立法——各主要法域都在朝同一方向收紧。因此,即使不在美国市场,全球企业也应把本案当作“领先指标”来借鉴,而非隔岸观火。

结论:进入美国市场的企业,必须直接对标本案的合规基线;不进入美国市场的企业,虽不受美国法律直接约束,但由于本国/本地区正在立同样的规矩,同样需要认真借鉴。对“出海”企业而言,更是要同时满足目标市场与母国的双重要求。

                    

七、分类合规建议

以下按企业类型给出可操作的重点(交叉适用时,以更严格者为准):

                     

结语

这起案子给全行业的信号非常直接:让未成年人上瘾的“设计”本身,正在成为被诉的理由,而且这条红线在美国、中国、欧盟、英国等地正同步收紧。无论企业身处哪个市场,与其等待法院或监管者下令后再花巨资被动整改,不如在产品设计之初就把未成年人保护“内建”进架构,并保留每一项合规决策的书面记录。“先上线、以后再补合规”,如今是代价最高的一条路。如需就贵司具体产品与目标市场开展合规评估,请与我们的律师联系。

免责声明:本文基于截至2026年8月的公开报道整理,旨在向相关产品企业作一般性解释与风险提醒,不构成针对具体事务的法律意见。各法域规则复杂且不断更新,部分事实(如和解是否已获法院终局批准、参与州的确切数目)各来源略有出入;和解在获法院正式批准前仍属拟议。采取行动前请就具体情形咨询我所AI相关执业律师。

 

English Version

Reading the Product-Compliance Red Line from Meta's US$17 Billion Child-Safety Settlement

To: Companies developing Apps, games, social platforms, and AI companion / chatbot products that are aimed at — or likely to reach — minors (United States / China / Global)

Counsel's Alert & Compliance Guidance | August 2026 | For general information only; not legal advice on any specific matter

If your company's product is aimed at minors — or, though not intentionally aimed at them, is in fact used by large numbers of minors — the following case warrants close study. On August 26, 2026, social-media giant Meta (the parent of Facebook and Instagram) agreed to pay up to approximately US$17 billion over ten years to resolve claims by dozens of U.S. states (brought since 2023 by a total of 42 attorneys general, 33 of them in a consolidated federal action) that it had “designed its products to addict children” — the largest single-case settlement in the history of the U.S. technology industry. The case arose in the United States and is governed by U.S. law, yet it carries direct lessons for comparable product companies worldwide. This memorandum explains why the case arose, what the law is targeting, whether this red line is consistent across jurisdictions, and offers compliance recommendations separately for U.S., Chinese, and other global companies.

                     

I. The heart of the Meta child-safety case: the claim targets the platform's “design,” not its “content”

The states sued Meta not on the theory that “there is bad content on the platform,” but that “the platform was deliberately designed to addict minors.” That is the fundamental distinction between this case and earlier platform-liability cases. In 2023, a total of 42 state and territorial attorneys general sued Meta — 33 states brought a consolidated (joint) action in the U.S. District Court for the Northern District of California that October, while the District of Columbia and several other states filed separately in their own courts — jointly alleging that Meta knew its design would harm the physical and mental health of adolescents yet proceeded anyway, and concealed this from the public (roughly 29 states participated at the trial stage). The related federal actions were consolidated before the Northern District of California; trial opened on August 18, 2026, and a proposed settlement was reached about a week later.

The significance of the case is this: the defenses that platform companies have traditionally relied on — “the content was not published by us; the platform is not liable” — are essentially unavailable under this “design-defect” theory.

                     

II. Why can “product design” itself expose a company to liability?

The regulators' logic runs as follows: if a company's product uses an integrated set of mechanisms to systematically exploit minors' still-immature self-control in order to prolong their time on the platform, the company must answer for the resulting harm. The “addictive design” features repeatedly singled out include:

•Infinite scroll — removing the natural stopping point;

•Push notifications with unpredictable timing — repeatedly “recalling” the user, much like an intermittent reward;

•Recommendation algorithms optimized solely for “stickiness / engagement” — prioritizing content that maximizes time-on-app rather than content that best serves the user;

•Social-validation mechanics such as likes, read receipts, and streaks — amplifying adolescents' sensitivity to peer approval and their anxiety.

These mechanisms are alleged to cause compulsive use, sleep deprivation, attention and mood problems, body-image anxiety, and even depression- and anxiety-related psychological harm among minors. At the same time, knowingly collecting the personal information of large numbers of children under 13 without parental consent has been alleged to violate the U.S. Children's Online Privacy Protection Act (COPPA). Note that many products incorporate every one of these “design” features — which is precisely what gives this case its precedential force.

                   

III. What Meta was required to change is what companies may be required to do next

The most cautionary feature of this settlement is that it converts a series of product changes into “enforceable obligations.” The following list can be read directly as the “compliance baseline” in the eyes of regulators:

On the effective date: the settlement remains “proposed” and will not become final until approved by the presiding judge, Yvonne Gonzalez Rogers; she is reported to have indicated that she is inclined to approve it, though she had not formally done so as of this writing. Meta has said it will begin implementation “within months.” For companies, there is no need to wait for finality — the list above should already be treated as a reference standard.

                   

IV. The legal mechanics: regulators are using “old laws,” and the threshold is not high

Many companies mistakenly assume that “with no dedicated algorithm / AI statute, no one can regulate me.” This case shows the opposite. The states relied on no new legislation; instead, they combined three existing bodies of law — (1) state consumer-protection statutes, aimed at false or misleading statements and concealment regarding product safety; (2) public nuisance, aimed at ongoing harm to public (and particularly adolescent) health; and (3) the federal COPPA, aimed at the collection of children's data without parental consent. The lesson is that, even in areas without dedicated legislation, regulators can still use traditional law to scrutinize a company's product design and default settings directly. “No dedicated statute means no risk” is a dangerous misconception.

                      

V. Compliance guidance: which companies the risk is spreading to

            

VI. Does this case concern only the United States? — Is the red line globally consistent?

This is the question companies care about most. The answer has two layers.

Layer one (application of law): the case is governed by U.S. law, but what determines whether a company is “regulated” is not its nationality but the market it serves. So long as a company offers products to U.S. users (particularly minors in the relevant states), or in fact collects U.S. children's data, it may fall within the reach of U.S. state consumer-protection laws and the federal COPPA — even if it is headquartered in China, Europe, or anywhere else. Conversely, if a company does not enter the U.S. market at all, the U.S. liability at issue here does not, in principle, apply directly. In short: entering the U.S. market = directly bound; staying out = not directly bound by this U.S. law.

Layer two (regulatory trend): but “no U.S. presence means nothing to worry about” is mistaken. The red line of “addictive design + weak age gates + minors' data” is converging in legislation worldwide, with the major jurisdictions all tightening in the same direction. Accordingly, even without a U.S.-market presence, global companies should treat this case as a leading indicator to learn from, rather than a distant spectacle.

Bottom line: companies entering the U.S. market must benchmark directly against this case's compliance baseline; companies that stay out of the U.S. market, though not directly bound by U.S. law, must still take it seriously, because their home country or region is enacting the very same rules. For companies expanding abroad, the imperative is to satisfy the dual requirements of both the target market and the home jurisdiction.

                       

VII. Compliance recommendations by company type

The following sets out actionable priorities by company type (where more than one applies, the stricter standard governs):

                 

Closing

The signal this case sends to the entire industry is unmistakable: “design” that addicts minors is itself becoming a ground for suit, and this red line is tightening in parallel across the United States, China, the EU, and the UK. Whatever market a company operates in, rather than remediating reactively — and at great expense — only after a court or regulator so orders, the wiser course is to build minor protection into the product architecture from the outset and to keep a written record of every compliance decision. “Launch first, fix compliance later” is now the most expensive path of all. For a compliance assessment tailored to your specific product and target markets, please contact our attorneys.

Disclaimer: This memorandum is compiled from public reporting available as of August 2026 and is intended to provide general explanation and risk alerts to relevant product companies; it does not constitute legal advice on any specific matter. The rules across jurisdictions are complex and continually evolving, and certain facts (such as whether the settlement has received final court approval and the exact number of participating states) vary among sources; the settlement remains proposed until formally approved by the court. Before taking action on any specific matter, please consult our firm's AI-practice attorneys.

            

本文作者：范川理 Joanna Fan