France's Under-15 Social Media Ban: Age Verification by 2027

France has passed a sweeping new law that bans anyone under 15 from opening social media accounts, backed by a national requirement for age verification that will eventually apply to every user in the country. The legislation, described as the first of its kind in the European Union, sets a phased rollout culminating in full enforcement by 2027. While the goal is to protect young people from the well-documented harms of unsupervised social media use, the mechanism for achieving it, mandatory age verification for an entire population, raises serious questions about privacy, data security, and how much personal information platforms and governments should be allowed to collect just to prove someone is old enough to scroll a feed.

How the Age Verification Law Will Work

Under the new French law, social media platforms will be required to block new accounts for users under 15 starting this year, with a broader enforcement deadline set for January 2027. Crucially, the law does not stop at minors. Because platforms need a reliable way to confirm that a user is not underage, everyone in France, adults included, will eventually need to verify their age to keep using social media. Officials have framed this as a temporary but universal inconvenience: for a transition period, all users may be asked to prove their age before accessing or keeping their accounts. If someone is confirmed to be under 15, the account will be closed.

The exact verification methods have not been fully locked down, but similar systems in other countries typically rely on some combination of government ID checks, facial age estimation, or third-party verification services. Each of these approaches involves handing over sensitive personal data, whether that is a photo of your face, a scan of your driver's license, or biometric estimates of your age, to a platform or a verification vendor. That data has to be stored somewhere, and wherever it is stored becomes a target.

The Privacy Tradeoff Behind Child Safety Laws

This is where the law's ambitions run into a harder reality. Age verification sounds simple in principle, but in practice it means building large-scale identity infrastructure that did not previously exist for casual social media use. France has already seen what can go wrong when government-linked identity systems are compromised. The breach at ANTS, the French agency responsible for processing passports and driving licenses, exposed 12 million accounts tied to sensitive identity documents. That incident is a useful reminder that centralizing identity data, even for legitimate government purposes, creates a single point of failure that attackers will look to exploit.

Social media platforms are not government agencies, but if they are now required to verify the age of an entire national user base, they will need to collect, process, and retain identity-related data at a scale most of them have never handled before. Every additional database of IDs, facial scans, or verification records is another potential breach waiting to happen. France's law does not exist in isolation either. Australia has already moved to restrict social media access for minors, and the UK has been developing its own age assurance rules for online platforms. Regulators across these regions are converging on the idea that platforms bear responsibility for who is on them, but none have yet demonstrated a verification model that fully avoids privacy tradeoffs.

What This Means for You

If you live in France, or if you are a parent of a young person there, expect to see verification prompts appearing on social media accounts well before the 2027 deadline. Adults should not be surprised if they are asked to confirm their age even though the law targets under-15s specifically, since platforms need a way to screen out underage users without simply taking anyone's word for it. Parents of teenagers close to the age threshold should anticipate account restrictions or closures if verification systems flag an account as belonging to someone under 15.

For everyone asked to verify their age, it is worth asking what data is being collected, how long it will be retained, and whether it is being processed by the platform directly or by a third-party verification service. Reasonable data minimization, such as age estimation methods that do not require submitting a full government ID or storing a permanent copy of your face, is generally preferable to systems that create lasting identity records tied to your social media use.

Key Takeaways

France's under-15 social media ban is a significant policy shift, and its underlying age verification law will affect far more than the teenagers it is designed to protect. Anyone using social media in France should expect identity checks to become part of the login process in the coming months. Read platform privacy notices carefully when verification requests appear, favor methods that limit how much personal data you hand over, and keep an eye on how enforcement unfolds as the 2027 deadline approaches. The law's success will depend not just on keeping young people off social media, but on whether the verification systems built to do so can be trusted to protect everyone else's data along the way.