EU ditches blanket ban in favour of phased social media access for under-13s

The EU has rejected a blanket social media ban, choosing instead to introduce supervised, age-appropriate restrictions for children under 13 after its own expert panel found Australia's ban faced difficulties as children found ways around the limits.

European Commission President Ursula von der Leyen confirmed the Commission will review the panel's recommendations before presenting legislative proposals after the summer, a timetable that puts platforms and brands targeting young audiences squarely in the regulatory crosshairs by early autumn.

The decision marks a clear divergence from the under-16 bans passed in Australia, the UK, and several EU member states. Rather than a blanket age gate, the EU is building a tiered system: children under 13 should only have "time-limited" access under the supervision of parents, teachers or other caregivers, and teenagers should be given gradual access to platforms that can prove they are "age appropriate" and safe for them.

What changes for platforms and brands

The immediate pressure is on platforms to prove their services are safe before children can access them, not after. The expert panel's report said that when it comes to safety, "the burden of proof needs to be on providers, not regulators, parents and children".

That shifts liability onto Meta, TikTok, Snapchat and others in a way existing age policies do not. The report said "until they demonstrate that their services are safe by design, social media and other digital services providers should have restricted access to children under the age of 13 in the EU".

For brands, the impact may not simply be fewer young people on social media. The marketing impact may not simply be fewer young people on social media. It may be fewer usable signals. Age verification, stronger privacy defaults, feature gating, and platform-controlled youth environments could reduce the behavioral data that marketers rely on for targeting, personalization, measurement, and attribution.

Brands that rely heavily on youth audiences should expect restricted targeting signals, less direct audience visibility, and greater dependence on platform-approved environments. Think of GDPR: a privacy law that became a marketing constraint by reshaping consent, audience access, and first-party data strategies. Youth safety regulation is following the same path.

Why the EU rejected Australia's model

Early results from Australia's social media ban for under-16s have been mixed. Just six months after Australian communications minister Anika Wells told 10 platforms to restrict access to under-16s, there have been mixed reports about how well it is working in practice. Some teenagers have managed to use workarounds, or decamped to social media platforms not covered by the ban, or exploited weaknesses in age verification systems.

The EU wants platforms to remove or limit features like autoplay content, infinite scroll and push notifications rather than simply locking children out entirely. The approach is addictive design as the problem, not access alone.

Von der Leyen's framing underscored the point. She said "we do not expect children to design their own seatbelts. We do not expect parents to fit airbags at home", positioning platform safety as a product responsibility, not a parenting failure.

Enforcement is already live

The EU is not waiting for new legislation to act. In April 2026, the EU told Meta it broke digital content rules, and told the US firm to "strengthen" its measures to prevent, detect and remove under-13s on Facebook and Instagram.

In its preliminary view, the EU found Meta had ineffective measures to enforce its own age restrictions. When creating an account, minors can input a false birth date, with no controls in place to verify it. Additionally, the tool for reporting a minor's account is "difficult to use" and requires up to seven clicks to access the form. Even when a minor's account is reported, there are often no adequate follow ups or measures to get them off the platform.

If the regulator's views on Meta are confirmed, the EU can impose a fine of up to six percent of the company's total worldwide annual turnover.

In February, the Commission accused TikTok of exposing teenagers to risks linked to addictive design features, signalling that design, not just access, is under active enforcement.

The age verification layer

The Commission made available a blueprint for an age verification solution on 14 July 2025. It became a feature-ready age verification solution on 15 April 2026 and can now be customised by Member States and market players.

The age verification solution allows users to prove they are over 18 without sharing any other personal information. Apart from being privacy-preserving, it is user-friendly and fully interoperable with future EU Digital Identity Wallets.

Platforms will not be required to use the app, but must show that they have alternate age checks that are just as effective. If they fail to do so, the platforms could face sanctions under the E.U.'s Digital Services Act.

The Commission has urged member states to make the solution available by 31 December 2026, a deadline that puts every platform on notice now.

The member state complication

The EU may be aiming for harmonisation, but member states are not waiting. France has settled on 15 as its cutoff, Austria on 14, Greece and Spain on 16. Spain wants to ban under-16s accessing social networks, while France proposes prohibiting children aged 15 and under. And then there are EU nations such as Estonia that oppose a ban.

The EU's Digital Services Act already governs how platforms must protect minors, and under EU law it takes precedence over conflicting national rules. "The DSA actually blocks national rules from member states," and most member states haven't accounted for that in their plans so far.

That sets up a compliance nightmare for platforms operating across Europe. As of 11 May 2026, 23 of 27 EU member states were at least considering national legislation, but their approaches differed significantly in age thresholds, enforcement models, and covered services. This creates a fragmented regulatory environment where platforms may be treated differently depending on the country, increasing legal uncertainty for companies and uneven protections for children across the EU.

What social media marketers should do now

The timeline is tight. Legislation is expected in early autumn 2026. Enforcement on age verification and addictive design is already underway. Platforms will adapt, and those adaptations will reshape what brands can do.

Audit your current audience. If under-13s or even under-16s represent meaningful reach or revenue, model what your access and targeting look like when that segment is gated or supervised. Factor in reduced signal: age verification may not just remove children from your funnel, it may reduce the behavioral data you rely on to target the cohort immediately above them.

Examine your creative and product positioning. Does your content or merchandising skew young in a way that could become a liability signal under the new enforcement regime? The Commission watches "design cues that appear to target under-13" as a signal of structural under-13 audience.

And watch what happens in September. The legislative proposal will define what "supervised access" actually means in practice, which features count as addictive, and how the burden of proof works when platforms claim they are safe by design. If you are marketing to families, teens, or Gen Z on social platforms in Europe, that proposal rewrites the rules of the game.

Von der Leyen's framing was unambiguous. "This is not about whether children can access social media. It is about whether and when social media can access our children". The EU has decided the answer is: only when platforms can prove it is safe, and only under supervision until they turn 13. That is a fundamentally different regulatory environment from the one brands have been operating in, and it arrives in a matter of weeks.