← Laws & Regulation

Age Restrictions

A global wave is now moving. Here is how long it took, what is changing, and what remains contested.

How to read this page. Tap any underlined word to see the precise term and a short definition. Expand any "Deeper" box for the evidence and contested points. The main text works on its own — you can skip both and still get the whole argument.

The gap

Facebook opened to anyone claiming to be 13 or older in 2006. The age limit was self-reported — a birthday entered at signup. No verification mechanism was required. By 2021, 38% of US children aged 8–12 had used social media, and a Canadian survey the same year found 86% of 9-to-11-year-olds had an account on at least one platform that requires users to be 13. The existing minimums were unenforceable because no verification was required.

The global wave

2023: Utah passes the first US state law requiring age verification for anyone opening a social media account, and a parent's consent for under-18s. In 2024 Utah repealed it and partly replaced it with a new act, which a federal court blocked in September 2024, before it took effect; Utah has appealed. France passes a law requiring parental consent for users under 15; it never takes effect, after the European Commission finds that it conflicts with the EU's Digital Services Act. 2024: Australia passes the Social Media Minimum Age law, which requires platforms to take reasonable steps to keep under-16s from holding accounts — the first national law of its kind. It does not stop a child seeing content without an account. The OECD documented a more than five-fold increase in countries implementing or considering age restrictions over a 16-month period. By April 2026 the OECD counted 25 member and accession countries with age restrictions in force or under consideration — but only three (Australia, Brazil and Indonesia) had a law in force; the rest were proposals or consultations. In August 2026 France's Constitutional Council struck down a stricter measure, a ban on social media for under-15s, as a limit on freedom of expression that was not appropriate, necessary and proportionate to its aim.

×

Age verification / age assurance

The set of methods for establishing how old a user is — from self-declaration (a typed birthday, trivially defeated) through to document checks, facial age-estimation, or third-party verification. The central dilemma: the methods strong enough to actually work tend to require collecting identity data from everyone, including adults, creating a new surveillance risk in the act of protecting children. "Age assurance" is the broader term for approaches that aim to estimate age without full identification.

What remains contested

The age restriction wave has critics beyond the platforms. Civil liberties organisations including the ACLU warn that age verification requirements risk creating mass surveillance of adult users — requiring government ID to access social media creates a privacy problem of its own. The technical question — how to verify age without creating surveillance infrastructure — remains genuinely unsolved. The evidence on whether age restrictions improve outcomes is also thin: no country's rule has been in force long enough to evaluate.

The honest position

Age restrictions address one vector — access — without touching the design features the harms are attributed to, or the advertising business model that produces them. A 16-year-old with unrestricted access to an engagement-optimised feed is not protected by an age law. But delayed access, combined with design reform, is a lever worth testing — and the evidence on whether it moves anything will take years to arrive.

How we know — the verification-versus-surveillance trade-off, and the thin evidence base

Two honest difficulties sit under the age-restriction wave. First, the trade-off: an age check robust enough to stop a determined 14-year-old generally has to verify everyone, which means building identity-verification infrastructure across the whole adult population — exactly the kind of mass data collection the rest of this site describes. Privacy-preserving age-estimation exists but is imperfect and itself involves processing sensitive data (e.g. facial scans). Second, the evidence: because almost all of these laws are very new, there is little hard data on whether they actually improve children's outcomes. Australia's under-16 account rule, in force since December 2025, is the first of its kind; Brazil and Indonesia followed, and none has been in force long enough to evaluate.

Where we land. Delaying access is a plausible lever and the policy momentum is real, but on its own it leaves the harmful design and the advertising model untouched. We treat it as a partial, promising, and still-unproven measure — not a solution.

Sources

Did this page help?