Video Game Laws and Regulations in the United States

The legal landscape surrounding video games in the United States is more layered than it appears from the outside — shaped by landmark Supreme Court decisions, a self-regulatory rating system built under congressional pressure, and ongoing debates about loot boxes, gambling mechanics, and minors' data privacy. This page covers the major federal and state frameworks that govern how games are sold, rated, marketed, and played, along with the constitutional limits that have repeatedly defined what government can and cannot do in this space.


Definition and Scope

Video game regulation in the United States is not a single statute or agency — it is a patchwork of constitutional rulings, voluntary industry standards, federal consumer protection law, and state-level experimentation. The core question regulators have wrestled with since the early 1990s is whether interactive entertainment occupies the same constitutional ground as film, literature, and music — and for the most part, courts have answered yes.

The Entertainment Software Rating Board (ESRB), established in 1994 under pressure from Congress following Senate hearings led by Senators Joe Lieberman and Herb Kohl, functions as the primary classification body. The ESRB is a private, nonprofit organization — not a government agency — which matters enormously in First Amendment analysis. Its ratings, ranging from EC (Early Childhood) through AO (Adults Only), appear on virtually every retail game sold in the United States.

Federal law does not impose age-based sales restrictions on video games the way the Alcohol and Tobacco Tax and Trade Bureau restricts alcohol. That gap — and it is a genuinely significant one — is filled partly by ESRB voluntary retailer agreements and partly by ongoing state and federal legislative efforts that have met mixed success in court. For a broader orientation to the medium itself, the Video Game Authority index places regulation within the wider context of gaming culture, business, and platform ecosystems.


Core Mechanics or Structure

The regulatory architecture rests on three interlocking layers.

The ESRB Rating System assigns content descriptors and age-category ratings after reviewing game submissions from publishers. Retailers like Walmart and GameStop have voluntarily committed to refusing M-rated (Mature 17+) and AO-rated game sales to minors — a policy enforced through point-of-sale training and periodic audits. The Federal Trade Commission (FTC) has conducted mystery-shopper surveys since 2000 to measure compliance; its 2018 undercover shopper survey found that only 13% of underage shoppers were able to purchase M-rated games, a compliance rate the FTC characterized as strong.

Federal Consumer Protection Law enters the picture primarily through the FTC Act's prohibition on unfair or deceptive practices (15 U.S.C. § 45) and, more recently, through the Children's Online Privacy Protection Act (COPPA, 15 U.S.C. §§ 6501–6506). COPPA requires verifiable parental consent before collecting personal data from children under 13 — a rule that affects online games, in-game accounts, and connected platforms. The FTC has levied fines under COPPA in gaming-adjacent contexts; its 2019 settlement with TikTok — $5.7 million at the time — signaled enforcement appetite in connected media (FTC Press Release, 2019).

State-Level Legislation has repeatedly attempted to impose criminal penalties on retailers who sell violent games to minors. California's attempt — which reached the Supreme Court — became the defining case in this area.


Causal Relationships or Drivers

The regulatory pressure on video games has historically spiked after high-profile acts of violence, with legislators drawing causal links between game content and real-world behavior — links that social science research has consistently failed to establish with statistical reliability. The American Psychological Association reviewed evidence in its 2020 resolution on violence in video games and cautioned against attributing complex violent behavior to media exposure alone.

Congressional hearings in 1993 and 1994 — triggered by public reaction to Mortal Kombat and Night Trap — produced the political conditions that created the ESRB. The implicit bargain: the industry self-regulates meaningfully, or Congress acts. That bargain has more or less held for 30 years, though it is periodically renegotiated as new mechanics (loot boxes, social features, always-online requirements) emerge.

Data privacy concerns have become the dominant regulatory driver of the 2010s and 2020s. The expansion of online multiplayer, in-game purchase histories, behavioral tracking, and account-linked play has brought video games squarely within the scope of COPPA enforcement and state privacy statutes like the California Consumer Privacy Act (CCPA, Cal. Civ. Code § 1798.100 et seq.).


Classification Boundaries

The Supreme Court's 2011 decision in Brown v. Entertainment Merchants Association, 564 U.S. 786, is the constitutional anchor for this entire area. The Court struck down California's law — which would have imposed $1,000 fines on retailers who sold violent games to minors — on First Amendment grounds, holding 7–2 that video games qualify as protected speech. Justice Antonin Scalia's majority opinion explicitly analogized violent game content to fairy tales and classic literature containing violence.

That ruling effectively foreclosed state criminal sales restrictions based on violent content. What remains constitutionally permissible: voluntary rating systems, contractual retailer enforcement, parental control requirements for hardware and platforms, and data privacy mandates tied to minors' online activity. Sexual content occupies a different legal space — obscenity laws apply, and AO-rated games with explicit sexual content face broader retailer restrictions.

The ESRB's rating categories — EC, E, E10+, T, M, AO — function as classification tools within this framework, not legal thresholds.


Tradeoffs and Tensions

Loot boxes sit at the sharpest edge of current regulatory tension. The mechanic — paying real money for randomized in-game items — has been classified as gambling in Belgium (resulting in a 2018 prohibition) and the Netherlands, while the United States has taken no definitive federal position. The FTC held a public workshop on loot boxes in August 2019 (FTC Workshop, 2019), and Senator Josh Hawley introduced the Protecting Children from Abusive Games Act in 2019, targeting loot boxes in games marketed to minors — the bill did not advance out of committee.

The tension is genuine: gambling law in the United States requires an element of prize, chance, and consideration. Loot boxes involve chance and consideration; whether in-game items constitute a "prize" with real-world value is the contested legal hinge. Games that allow trading or selling of items for real currency face stronger gambling-law scrutiny than those with closed economies.

Esports betting creates a parallel friction between entertainment, sport, and gambling regulation — an area covered in more depth at esports betting and fantasy leagues.


Common Misconceptions

Misconception: The ESRB is a government agency with legal enforcement power.
The ESRB is a private, industry-funded nonprofit. Its ratings carry no legal force at the federal level. Retailers enforce M-rated sales policies voluntarily, and the FTC monitors compliance under its general consumer protection authority — not under any statute that mandates ESRB adherence.

Misconception: Brown v. EMA legalized violent games for minors.
The ruling struck down criminal sales restrictions on violent games. It said nothing about retailers' voluntary policies, parental controls, or online platform age-gating. Retailers still decline to sell M-rated titles to customers under 17.

Misconception: Loot boxes are illegal gambling in the US.
No federal statute or court ruling has established that loot boxes constitute illegal gambling under US law. The legal question remains open, with enforcement actions to date limited to other countries.

Misconception: COPPA applies only to websites.
COPPA's scope explicitly covers mobile apps, connected toys, and online games — any "online service" directed at children under 13 (FTC COPPA Rule, 16 CFR Part 312). A game with an online component, leaderboards, or an account system is likely covered if it targets or knowingly serves children.


Checklist or Steps

Key regulatory touchpoints in the US video game legal framework:


Reference Table or Matrix

Legal Framework Governing Body Scope Enforcement Mechanism
ESRB Rating System ESRB (private nonprofit) Retail games, digital storefronts Voluntary retailer agreements; FTC monitoring
COPPA (15 U.S.C. §§ 6501–6506) Federal Trade Commission Online services used by children under 13 FTC civil penalties (up to $51,744 per violation as of 2023)
FTC Act § 5 (15 U.S.C. § 45) Federal Trade Commission Unfair/deceptive trade practices FTC enforcement actions, consent decrees
First Amendment (Brown v. EMA, 2011) U.S. Supreme Court Content-based sales restrictions Constitutional bar on state criminal statutes
California CCPA (Cal. Civ. Code § 1798.100) California AG / CPPA Consumer data, CA residents Civil penalties up to $7,500 per intentional violation
State Gambling Laws State AGs / gaming commissions Loot boxes, real-money mechanics Varies by state; no definitive US ruling to date
FTC Endorsement Guidelines Federal Trade Commission Influencer/streamer promotions FTC enforcement letters, civil penalties

 ·   · 

References