What the KIDS Act Actually Proposes
The European Union has unveiled a sweeping new proposal aimed at reshaping how children experience the internet. Known as the KIDS Act, the draft regulation would ban standalone social media accounts for anyone under 13 and introduce parent-supervised "mini accounts" for teens aged 13 and older. Rather than creating separate rules for each type of platform, the Act is designed as a single rulebook that applies uniformly to social media, video-sharing sites, online games, and even AI chatbots across all EU member states.
The goal, according to EU officials, is to address growing concern about addictive app design and the mental health effects of algorithm-driven content on young users. Instead of relying on platforms to self-police, the KIDS Act would require age verification systems, stricter default privacy settings for minors, and new obligations for how companies design their services when children are likely to be present.
For parents, the headline news is straightforward: a firmer line between adult and child online spaces, with more oversight built in for teenagers who are permitted to use these platforms under supervision. But the practical mechanics of how age gets verified, and what data that process requires, are where things get more complicated.
Age Verification: The Privacy Trade-Off
Any law that bans access based on age has to answer one uncomfortable question: how do you prove how old someone is online? Age verification typically involves one of a few approaches: uploading government identification, submitting to facial age-estimation scans, or relying on third-party verification services that vouch for a user's age without the platform seeing the underlying document.
Each of these methods carries its own privacy trade-off. Document uploads create a record tying a real identity to an account. Facial scanning, even when used only to estimate age rather than identify a specific person, still requires processing biometric data, a category of information regulators have flagged as sensitive elsewhere in Europe. Italy's move to let authorities store facial biometric data collected in public spaces, detailed in Italy's 7-day facial recognition rule, shows how quickly biometric collection can expand beyond its original narrow purpose once the infrastructure exists.
The KIDS Act does not operate in isolation. It arrives alongside other EU efforts to regulate online content and safety, including the bloc's ongoing "chat control" scanning framework. That interim system, recently extended, requires certain services to scan private communications for child sexual abuse material, a policy explored in our coverage of the EU's chat control extension to 2028. Together, these initiatives signal a broader EU pattern: expanding verification and monitoring obligations in the name of child safety, often at the cost of collecting more data on everyone, not just minors.
A Broader Pattern of Regulatory Pressure
The KIDS Act is part of a wider trend of European regulators asserting more control over digital platforms, from content moderation to data retention to age gates. This mirrors pressure seen in other corners of the EU's regulatory landscape, including disputes over blocking mandates and compliance costs for infrastructure providers, as seen in Italy's fight with Cloudflare over the Piracy Shield system. Compliance-driven verification and blocking systems tend to expand in scope over time, and families should expect the KIDS Act's requirements to evolve as implementation details are finalized.
What This Means For You
If you are a parent in the EU, the KIDS Act is worth watching closely, but it is not yet law. It remains a proposal that will go through negotiation, amendment, and formal adoption before any platform is required to implement it. That said, the direction is clear: platforms will likely be asked to verify age in some form, and that means more identity or biometric data flowing through third parties, even for accounts belonging to teenagers using "mini accounts" under supervision.
For privacy-conscious families, this raises a genuine tension. Age verification is meant to protect children, but the systems built to enforce it can also create new data collection points that outlast their original purpose. Understanding what documentation or biometric data a platform requests, and why, will become an increasingly important part of managing a family's digital footprint.
Actionable Takeaways
Parents and privacy-conscious users should keep a few things in mind as the KIDS Act moves through the EU legislative process. Review privacy settings on any platform your teen uses under a supervised account, and ask what data verification actually requires before agreeing to it. Watch for updates on which age verification method platforms adopt, since document-based, facial-scan, and third-party verification systems carry different privacy implications. Stay informed as the proposal is finalized, since amendments could change how data is collected, stored, or shared. The EU KIDS Act aims to make the internet safer for children, but achieving that safely for families will depend on how carefully the verification systems behind it are built.
