Costs
Part of Gen Z social media campaigns: cohort, platforms, cost, law
How to improve Gen Z social media compliance: a checklist
How to improve Gen Z social media compliance: the review-integrity, age-scope, research-method and logging checks to run before you scale a campaign.
What to take away
- Buy reviews, hide a paid relationship or rank providers on a pay-to-play list and the FTC's Endorsement Guides, 16 CFR Part 255, and its Rule on the Use of Consumer Reviews and Testimonials, 16 CFR Part 465, are the documents that apply, not your agency deck.
- Age scope is a decision, not a demographic label, and it is the first lever in how to improve Gen Z social media: cohort, platform access, privacy and purchasing power each change what you can run.
- Under-13 audiences in the United States sit under COPPA, 16 CFR Part 312, which requires verifiable parental consent before you collect their data.
- Keep event records for access, changes, failures and corrections, and never present a log as proof that a campaign worked.
- Match your research method to the question. A descriptive read of what happened is not the same as a controlled estimate of what caused it.
- Name the authority that sets the rulethe FTC, a state attorney general, the Children's Advertising Review Unit at BBB National Programs or the Digital Advertising Alliance — then get counsel in that jurisdiction to confirm it.
Gen Z spans a wide age range, and the marketing that fits a 24-year-old does not fit a 14-year-old. Before any campaign, write down who you are reaching, where they are, and what you are allowed to do there.
This page covers the compliance checks — review integrity, logging, age scope and test method — that decide whether a Gen Z social media plan holds up. Start with the Gen Z social media overview if you need the platform-by-platform picture first.
The compliance checklist
Run these checks in order, and record the owner, the evidence and the gate that clears each one before the next begins.
- Age scopewrite the birth-year band you are buying, and brief 13 to 17 separately from 18 to 24.
- Consent basisconfirm verifiable parental consent under COPPA, 16 CFR Part 312, for under-13 users, and the lawful basis for 13 to 17 in every state you buy in.
- Review integrityread the FTC's Endorsement Guides, 16 CFR Part 255, and its Rule on the Use of Consumer Reviews and Testimonials, 16 CFR Part 465, before you brief a creator or shortlist an agency.
- Disclosureput #ad at the front of the caption rather than burying it in hashtags, turn on the platform's paid-partnership label (Instagram's Paid partnership tag, TikTok's branded-content toggle, YouTube's paid promotion checkbox), and follow the FTC's .com Disclosures guidance on clear placement. Read each platform's ad policy — TikTok's Branded Content Policy and Meta's Branded Content Policies — before you post.
- State and self-regulatory rulescheck California's Age-Appropriate Design Code Act (AB 2273), New York's Child Data Protection Act and SAFE for Kids Act, and Utah's Social Media Regulation Act and the Minor Protection in Social Media Act that replaced it, plus the Children's Advertising Review Unit (CARU) guidelines at BBB National Programs and the Digital Advertising Alliance (DAA) principles.
- Research methoddecide descriptive or controlled before launch, using the design guidance in the NIST/SEMATECH e-Handbook of Statistical Methods.
- Loggingrecord access, edits, consent entries, approvals and corrections with a timestamp, the actor, the system and the value before and after, following CISA's logging guidance.
- Retentionset the retention period in the policy from your consent terms and the limitation period in your state, and date the entry.
- Gaterun one campaign end to end inside the defined age scope and record what breaks before you scale.
Review integrity comes before provider selection
The FTC's Endorsement Guides, 16 CFR Part 255, and its Rule on the Use of Consumer Reviews and Testimonials, 16 CFR Part 465, cover fake feedback, selective review requests, incentives conditioned on a positive review, hidden relationships and paid ranking. Read them before you name or compare any agency or creator.
Review integrity checks
- Do not buy or seed reviews
- Disclose paid creator relationships plainly
- Never rank own vendors without saying so
- Keep the document's stated scope visible
Keep the document's stated scope visible. It addresses reviews and endorsements, not every advertising claim you will make.
Age scope is a set of decisions, not a label
"Gen Z" hides a decade of difference. A 13-year-old and a 26-year-old share a cohort name and almost nothing else about platform access, privacy or spending.
Work through each variable before you brief a creator:
- Cohortwrite the birth-year band the media buy targets, and brief 13 to 17 separately from 18 to 24.
- Platform accesscheck the minimum age the platform states for an account in each market, and record the source and the date. TikTok, Instagram, Snapchat and YouTube all list 13 as the floor in the United States, with different settings for 13 to 17 accounts.
- Privacy and consentconfirm the consent basis for each band. COPPA, 16 CFR Part 312, requires verifiable parental consent before you collect personal information from a child under 13 in the United States, and state youth laws add their own bases for teens.
- Purchasing powercheck who holds the payment method, and whether the person you are targeting can redeem the offer.
Age scope decisions
- Age cohort, including anyone under 18
- Platform access rules per age group
- Privacy and consent requirements by location
- Purchasing power, not influence
- Measured behavior, not assumed behavior
Where under-18 audiences are involved, the institution and its published policies govern participation, supervision and safeguarding. Confirm with qualified counsel in the relevant jurisdiction.
One concrete state requirement: California's Age-Appropriate Design Code Act (AB 2273) requires a Data Protection Impact Assessment for an online service children are likely to use, and high-privacy settings by default for child users. Enforcement has been contested in court, so check its current status.
Youth advertising and data rules differ by state. New York's Child Data Protection Act and SAFE for Kids Act limit data use and feeds for minors, and Utah's Social Media Regulation Act, replaced by the Utah Minor Protection in Social Media Act, covers account and advertising limits. Cross-border Canadian campaigns add another layer, and several state youth laws have been challenged in court, so check the current status of each before you buy.
Match the research method to the question
The experimental-design guidance in the NIST/SEMATECH e-Handbook of Statistical Methods starts design choice with the objective and the practical constraints, which is also where a campaign test should start. That single point separates two things teams routinely blur.
Descriptive reporting tells you what happened. A controlled estimate tells you what caused it. If your question is "did the campaign move anything," you need the second, and most social dashboards give you the first.
Example: a dashboard showing saves rising in the week a creator posted is a descriptive read. Saves moved, and so did the season, a paid push and the post itself. A controlled estimate holds out a matched group across the same weeks and compares saves between the two groups.
Record the source date and the limits beside every decision. A benchmark from an unnamed study is not evidence.
Test one case before you scale
Run a single case end to end and record what breaks.
| Field | Test | Record |
|---|---|---|
| Case | Pick one campaign within the defined age scope | Population, date, reviewer |
| Method | Time one normal run from brief to accepted output, then repeat it with a missing input | Inputs, observations, unresolved limit |
| Outcome | Compare the result with the participation you wanted | Effect on quality interactions and downstream cost |
| Escalation | Stop if a missing input or an unverified consent record reaches a live post | Correction owner, next review date |
The NIST AI RMF Playbook offers voluntary actions organized around govern, map, measure and manage. Use them when a tool changes a workflow, because those four functions cover campaign approvals, audience data and post-launch checks. The playbook is not a certification and not a product ranking. Your team still owns the facts, the test and the decision.
Keep records, and do not overclaim them
CISA, the federal Cybersecurity and Infrastructure Security Agency, publishes logging guidance that explains why organizations keep and review event records for security work. The same reasoning covers a marketing workflow, where the trail shows who approved a post, and the same discipline applies to a youth campaign: log access, changes, failures and corrections.
Log these events: account and asset access, edits to live posts, consent records for each under-18 participant, approval of each published item, and every correction to a public output. Each entry needs a timestamp, the actor, the system and the value before and after.
Retention follows your consent terms and the limitation period in the state you operate in, so put the number in the policy rather than keeping records forever. The campaign owner reviews the log weekly, and counsel reviews the consent entries before launch and after any incident.
A log shows what happened on a system. It does not prove a campaign worked, and presenting it that way is the most common error in this area. Keep the record narrow and let the outcome data carry the result.
If you are still working through the basics, the common questions at the end of this page answer the ones that come up first.
Common questions
What is the first decision in improving Gen Z social media?
Define the owner, the age scope, the outcome you want and the evidence that would stop the work. Age scope comes first because it decides which platforms, consent rules and creators are even available to you.
How should a youth campaign be reviewed?
Review quality interactions and downstream outcomes against cost, with exclusions, source limits and failures recorded. Date the decision record so the next team knows what was true when you decided.
What should a team avoid?
Avoid treating platform presence as proof of audience fit, and avoid buying or seeding reviews. When an error reaches a public output, preserve the record and correct it where it appeared.
Which rules apply to under-18 audiences?
COPPA, 16 CFR Part 312, the FTC endorsement guides at 16 CFR Part 255, the FTC's reviews and testimonials rule at 16 CFR Part 465, and state youth advertising and data laws including California's AB 2273, New York's Child Data Protection Act and SAFE for Kids Act, and Utah's Minor Protection in Social Media Act all may apply, and the requirements vary. Confirm with qualified counsel in the relevant jurisdiction before you run the campaign.
