EU Unveils Kids Act Built on Its Own Age Verification Tool

The European Commission formally proposed the EU Kids Act on 17 September 2026, a regulation that would bar children under 13 from holding social media accounts outright, permit parent-supervised “mini accounts” with a one-hour daily limit for those aged 13 and 14, and allow independent accounts only from age 15 onward, according to the Commission’s own announcement (commission.europa.eu). President Ursula von der Leyen said Brussels had “looked at Australia,” which banned social media for under-16s the previous year, as the Commission drafted the proposal, according to Reuters (reuters.com).

The mechanism the Commission intends to use for enforcement is a free, open-source age verification app that Brussels built itself, which is meant to tell a platform whether a user meets an age threshold without revealing the user’s underlying identity documents or biometric data, according to the Commission’s own explainer of the KIDS Act (digital-strategy.ec.europa.eu). Reuters reported that the regulation would also require platforms to check, within six months of the rules taking effect, whether existing teenage account holders need to disable their accounts under the new age tiers (reuters.com). Social media platforms and video-sharing services would be obliged to verify age at the point a new account is opened, and the burden of proving that a service is safe for children would shift from regulators onto the platforms themselves, according to the Commission’s own release (commission.europa.eu).

A regulator building its own tools

The proposal sets up an arrangement in which the same institution writing the rules is also the one that designed the software platforms are expected to rely on to comply with those rules. The Commission describes the app as privacy-preserving because it does not retain identity documents or biometric data, but the practical effect is that roughly 450 million people across the bloc would be routed through a state-built verification layer before minors, and in practice many adults verifying a child’s status, can access ordinary social media services. The Irish Times reported that the plan represents a broader “control shift” in how governments intend to manage platform access, framing von der Leyen’s initiative as a structural change in the relationship between the state and online speech rather than a narrow child-safety fix (irishtimes.com).

Politico reported that parents’ groups and privacy advocates are already lining up on opposite sides of the coming legislative fight, with some warning that mandatory verification at account creation could normalise routine identity checks for all users, not merely those near the age thresholds, while the Parliament and member states begin negotiating amendments to the text (politico.eu). The Commission itself acknowledges the proposal still requires approval from the European Parliament and the Council and could be revised before enactment, according to Reuters (reuters.com).

Questions the rollout leaves open

Nothing in the public materials from the Commission specifies how platforms will distinguish a verified adult from a verified teenager once the app confirms someone clears an age threshold, nor does it explain what happens to the verification data generated at the moment of account creation once a check is complete. The BBC reported the headline framing that the plan would restrict social media access for under-16s in a bid to improve wellbeing and tackle online safety, a framing that emphasises outcomes rather than mechanics (bbc.co.uk). Whether an age-verification layer built and controlled by the Commission itself becomes, in practice, a template for broader identity-adjacent gatekeeping of online speech is a question the current proposal does not resolve.