The European Commission’s new draft law to regulate young people’s access to social media, video-sharing platforms, and AI services introduces phased age restrictions and safety-by-design rules. While intended to safeguard children, the EU Kids Act also expands intrusive age verification and could disproportionately limit digital freedoms and privacy for all users.
- Phased age restrictions limit social media access until adulthood.
- Mandatory intrusive age verification raises privacy issues.
- Small businesses face hurdles, boosting large tech dominance.
What happened
The European Commission introduced the EU Kids Act, a draft law designed to regulate and restrict minors' access to social media, video-sharing platforms, online games, and AI systems. It proposes a tiered system of access: no accounts for children under 13, restricted accounts under parental supervision for ages 13 to 15, and autonomous access with safety-by-design features from 15 to 18 years old. These measures are intended to reduce exposure to content deemed risky and to embed protections in digital services.
The Act complements the Digital Services Act (DSA) but moves from guidelines to legally binding obligations, including mandatory age verification through an EU-wide scheme. It also obliges platforms to implement safety-by-design principles and tightens parental responsibility by requiring parents to verify their status. Not-for-profit educational and open-source platforms are exempted, whereas small and medium-sized enterprises receive no relief, potentially placing them at a disadvantage.
Why it matters
While aiming to protect children online, the EU Kids Act’s approach may have unintended consequences for digital privacy, civil liberties, and equitable access. Age gates are known to create barriers for marginalized users and can stifle important rights such as freedom of expression and access to information. The reliance on intrusive age verification technologies risks undermining privacy for all users, not only minors.
The law’s broad scope covering most mainstream platforms and its reliance on age as a blunt proxy for vulnerability could entrench dominant tech companies by imposing costly compliance burdens on smaller operators. This may limit competition and innovation while expanding the infrastructure for monitoring and control across the internet.
What to watch next
Attention will focus on how the EU’s decision-makers refine the law to balance child protection with fundamental rights and to clarify vague provisions such as the ‘high degree of confidence’ standard for age verification. The approach to enforcement and the technical standards for safety-by-design features will also be critical to observe.
How platforms implement the regulations—especially around age gates and parental controls—will reveal the practical impact on privacy, user experience, and access. Observers should also monitor advocacy and legal challenges concerned with constitutional rights and digital equity, as well as lobbying efforts from tech companies and civil society.