EU gives platforms until autumn to prove they can police under-13s themselves

The European Union will impose age-based restrictions for minors across social media platforms, European Commission President Ursula von der Leyen announced on 13 July. But this isn't an outright ban, and it isn't legislation yet. What it is, effectively, is a countdown clock for every platform running ads or monetisation in Europe.

The announcement follows a special panel report recommending that platforms should face restricted access for children under 13 in the EU until they can demonstrate their services are "safe by design". Von der Leyen said the EU intends to have a draft law prepared by early autumn, meaning platforms have until then to prove they can enforce age limits themselves.

Under-13s should only have time-limited access to social media with parental supervision, the panel recommended. Teenagers should be given gradual access to platforms that can prove they are age-appropriate and safe.

The real pressure isn't the policy itself. It's what happens if platforms fail to act before von der Leyen returns with binding rules.

The burden has shifted

The panel's report stated that when it comes to safety, the burden of proof needs to be on providers, not regulators, parents and children. That principle matters. Until now, platforms have argued age verification is technically hard, privacy-invasive, or someone else's job. That defence no longer flies.

The Commission is already investigating TikTok for addictive design features such as endless scrolling, autoplay, and push notifications, and accused Meta of failing to enforce its own minimum age of 13 on Instagram and Facebook. In April, preliminary findings concluded that Meta violated the Digital Services Act because minors can input a false birth date when creating an account, with no controls in place to verify it.

The timing of von der Leyen's announcement is deliberate. As of 11 May 2026, 23 of 27 EU member states were at least considering national legislation on age restrictions, each with different thresholds and enforcement models. France has pledged a ban for under-15s, Spain wants restrictions for under-16s, and Greek curbs for under-15s take effect on 1 January 2027. A bloc-wide framework now would head off a fragmented compliance nightmare.

The technology exists, so excuses don't

In April, the European Union unveiled an app to confirm users' age online, with von der Leyen stating that online platforms can easily rely on the EU age verification app so there are no more excuses. Users can upload a passport or national identity card to the app, or have their age verified by a trusted provider such as banks or schools, and the user's personal information, including their actual date of birth, won't be shared with platforms.

The Commission is urging Member States to implement age verification solutions by 31 December 2026. Platforms are expected to integrate with national systems or build their own verifiable methods before that deadline.

TikTok announced it will roll out new age-detection technology across Europe in the coming weeks, analysing profile information, posted videos and behavioural signals to predict whether an account may be underage, with flagged accounts reviewed by specialist moderators. For appeals against bans, the company will use facial age estimation from verification provider Yoti, along with credit card checks and government-issued identification; Meta also uses Yoti to verify users' ages on Facebook.

Those moves signal that platforms know legislation is coming and are building compliance infrastructure now rather than waiting to be forced.

What this means for anyone running a social monetisation model in Europe

If you're operating a platform, a creator tool, or any service with user-generated content and a European audience, three things matter between now and autumn:

One: demonstrable age assurance becomes table stakes. Platforms including Instagram and TikTok already prohibit anyone under the age of 13 from signing up for an account, but those restrictions have been criticised for being too easy to get around, and EU regulators accused Meta earlier this year of failing to keep underage users off the site. Self-declaration is no longer defensible. Platforms need verifiable methods, whether estimation, third-party verification, or integration with national ID systems.

Two: "safe by design" will be defined by the Commission, not by you. The Commission is investigating platforms that allow children to go down rabbit holes of harmful content, such as videos that promote eating disorders or self-harm. Expect guidance (or requirements) on feed algorithms, notifications, autoplay, and other engagement mechanics deemed harmful to minors. Platforms that can't show they've redesigned for safety will face restricted access.

Three: fragmentation risk is real if the EU doesn't legislate first. With nearly every member state pursuing its own path, a company could be compliant in France and non-compliant in Germany. The autumn proposal is likely to harmonise requirements, but until it passes, expect continued divergence and enforcement unpredictability.

The broader pattern

This is part of a global wave. Australia, the UK, Turkey, and Indonesia have passed bans on kids under 16 or 15 from using platforms like TikTok, YouTube and Instagram. The EU is accelerating efforts to introduce bloc-wide age verification systems following similar measures in Australia and the UK, though critics warn they may expand surveillance, weaken anonymity, and disproportionately affect vulnerable groups.

At the heart of the issue is there is fundamentally no tool that can verify a user's age without inherently violating a user's privacy. The EU's privacy-first app is one attempt to square that circle. Whether it works at scale, and whether platforms adopt it voluntarily or under legal obligation, will define compliance infrastructure across the bloc for years.

Von der Leyen framed the move as a design problem, not a parenting one. She said that we do not expect children to design their own seatbelts, and we do not expect parents to fit airbags at home. The implication: platforms built the cars, so platforms must build the safety features.

The autumn deadline isn't just political theatre. It's the last window for self-regulation before Brussels writes the rules itself.