attentionmachine.org

The Attention Machine

← Laws & Regulation

Age Restrictions

A global wave is now moving. Here is how long it took, what is changing, and what remains contested.

How to read this page. Tap any underlined word to see the precise term and a short definition. Expand any "Deeper" box for the evidence and contested points. The main text works on its own — you can skip both and still get the whole argument.

The gap

Facebook opened to anyone claiming to be 13 or older in 2006. The age limit was self-reported — a birthday entered at signup. No verification mechanism was required. In 2023, nearly 40% of US children aged 8–12 used social media, and 63% of UK children aged 8–11. A Canadian study found 86% of children under 13 held accounts on platforms that prohibit users below that age. The existing minimums were unenforceable because no verification was required.

The global wave

2023: Utah becomes the first US state to require age verification for under-18s. France passes parental consent requirements for users under 15. 2024: Australia passes legislation banning children under 16 from social media — the most comprehensive national age restriction law in the world. The OECD documented a more than five-fold increase in countries implementing or considering age restrictions over a 16-month period. Over 25 countries have now implemented or are implementing social media age restrictions.

×

Age verification / age assurance

The set of methods for establishing how old a user is — from self-declaration (a typed birthday, trivially defeated) through to document checks, facial age-estimation, or third-party verification. The central dilemma: the methods strong enough to actually work tend to require collecting identity data from everyone, including adults, creating a new surveillance risk in the act of protecting children. "Age assurance" is the broader term for approaches that aim to estimate age without full identification.

Sources

What remains contested

The age restriction wave has critics beyond the platforms. Civil liberties organisations including the ACLU warn that age verification requirements risk creating mass surveillance of adult users — requiring government ID to access social media creates a privacy problem of its own. The technical question — how to verify age without creating surveillance infrastructure — remains genuinely unsolved. The evidence on whether age restrictions improve outcomes is also thin: Australia's law is the only one in force long enough to study.

The honest position

Age restrictions address one vector — access — without addressing the design features that cause harm or the advertising business model that produces them. A 16-year-old with unrestricted access to an engagement-optimised feed is not protected by an age law. But delayed access, combined with design reform, represents a meaningful policy lever. The direction is correct; the mechanism needs refinement.

How we know — the verification-versus-surveillance trade-off, and the thin evidence base

Two honest difficulties sit under the age-restriction wave. First, the trade-off: an age check robust enough to stop a determined 14-year-old generally has to verify everyone, which means building identity-verification infrastructure across the whole adult population — exactly the kind of mass data collection the rest of this site warns about. Privacy-preserving age-estimation exists but is imperfect and itself involves processing sensitive data (e.g. facial scans). Second, the evidence: because almost all of these laws are very new, there is little hard data on whether they actually improve children's outcomes. Australia's under-16 ban is the only one in force long enough to begin studying.

Where we land. Delaying access is a plausible lever and the policy momentum is real, but on its own it leaves the harmful design and the advertising model untouched. We treat it as a partial, promising, and still-unproven measure — not a solution.

Sources

Courts & Liability →