On Thursday, the European Commission formally adopted what it calls the EU Keeping Internet Digital Spaces Accountable and Trustworthy Act—colloquially known as the EU KIDS Act. The legislation establishes fresh age thresholds for social media and video-sharing platforms, while placing the onus on service providers to demonstrate they have implemented suitable age verification and child safety measures. The framework is expected to generate substantial new demand for age assurance technologies across the EU, though the extent to which this benefits age verification vendors remains unclear given the multiple pathways the Commission is endorsing.
French President Emmanuel Macron stood among the most vocal proponents of a unified EU-wide framework, partly to prevent regulatory fragmentation across member states and partly to circumvent obstacles posed by domestic constitutional law.
Age minimums and account structures
The Act establishes 13 as the minimum age for social media services and video-sharing platforms to process data belonging to minors, with 15 set as the age at which young people may independently register for such services. The legislation refers to these restrictions as a "delay."
Minors aged 13 to 15 would gain access to "mini accounts" that operate under parental supervision. Dedicated child-oriented video-sharing platforms would remain available to children between 3 and 13 through accounts managed by parents or guardians.
Age verification mechanisms
Both digital services and app stores must conduct age verification checks under the new rules. The Commission's announcement points to an EU age verification app as a preferred tool, emphasizing that by refraining from storing biometric data or identity documents, it delivers the strongest privacy protections available. The age assurance technology deployed must demonstrate high effectiveness and conform to standards and benchmarks established through the EU Age Verification Scheme.
Looking ahead, the EU intends to position EU Digital Identity Wallets as the primary mechanism for verifying age and other personal attributes online.
Safety requirements and enforcement
Beyond age controls, the Act mandates safety-by-design standards for social media, video-sharing platforms, online video games, AI companions and chatbots accessible to anyone under 18. Enforcement investigations may be expedited to 90 days to accelerate compliance action.
Industry concerns
The technology sector has voiced reservations about the proposal. The European branch of the Computer & Communications Industry Association (CCIA) contends that while the proposal articulates sound principles, it lacks concrete detail on how these concepts would function in real-world deployment. The CCIA Europe warns that verifying family relationships would prove complex, and that the framework would compel Europeans to divulge "sensitive personal information to participate in digital life."
Legislative path forward
The proposed Act remains subject to negotiations between the European Council and Parliament before final adoption. The Commission's statement underscores its desire to see the legislation "adopted swiftly."
