Leaked Documents Preview EU’s Plan to Restrict Social Media, Games, and AI Chatbots for Kids

Europe is preparing sweeping restrictions on the digital services children can use, potentially reaching far beyond Instagram and TikTok.

The European Commission is expected to unveil the “EU Kids Act” on Thursday.^[1] The legislation could establish a common minimum age for certain online services across the European Union. Platforms may also have to prove that their products are safe for younger users.

The final age cutoff remains undecided. France wants to keep children under 15 off social media, Spain has pursued a limit of 16, and a European Commission expert panel recommended tightly controlled access for children under 13.

Enforcing any of those limits would require platforms to identify younger users, making online age verification a much more routine part of life in Europe.

Thanks for subscribing!

Please check your email for your first message.

Never miss the privacy news that affects you.

Join thousands who get the latest security news, scams, and policy changes every week, right to their inbox.

Sign me up

By submitting this form you agree to receive emails from All About Cookies and to the privacy policy and terms.

The rules could reach beyond social media

The proposal reportedly covers a category European officials call “social media plus.” That definition could capture online games with chat functions and consumer AI chatbots that use the same engagement tactics as social platforms.

A joint proposal circulated by Spain and the Netherlands argues that restrictions should apply across digital services based on the risks they create. It specifically calls for the rules to cover video games and AI companions.

For gaming companies, scrutiny could fall on features that keep children playing or spending money. AI companies could face similar questions when chatbots are designed to hold a user’s attention or form an ongoing emotional connection.

Some services may be exempted if their operators can demonstrate that they are sufficiently safe. Platforms could qualify by limiting personalized recommendations or removing addictive features for younger users. The proposal may also target gambling-like mechanics such as loot boxes.

Europe still has to choose an age limit

French President Emmanuel Macron has urged the Commission to ban social media for children under 15. His government turned to Brussels after France’s Constitutional Council struck down a national ban for being too broad and disproportionate.

The Commission’s expert panel proposed a more gradual approach in its child-safety report. Under that model, children under 13 would receive tightly supervised access to age-appropriate services. Platforms could grant users more independence as they get older.

European Commission President Ursula von der Leyen called the staged model “very convincing” when the report was released in July. She also argued that companies should be responsible for making their products safe.

“We do not expect children to design their own seatbelts. We do not expect parents to fit airbags at home,” von der Leyen said.

The final proposal could adopt that model, set a blanket minimum age, or leave some flexibility to individual countries.

Age checks bring privacy risks

A legal age limit is difficult to enforce when users can enter a fake birthday. Platforms would need stronger methods to separate children from adults.

Those methods could include identity documents or facial age estimation. Discord’s returning verification system, for example, may ask some users for a face scan or government-issued ID.

Each option requires users to trust another organization with sensitive data. A breached database containing identity documents or facial scans could expose far more than a password. Behavioral age estimation may avoid collecting an ID, but it can require extensive monitoring and still misclassify users.

The European Commission has developed an age-verification system intended to confirm that a user meets an age requirement without revealing their identity or exact birthday. It was initially designed for over-18 services such as pornography and gambling.

Spain and the Netherlands want the Kids Act to build on that system. Under their proposal, a platform would receive only confirmation that the user is old enough.

A privacy-preserving design would reduce the information exposed during verification. It would still bring age checks to many services that currently require nothing more than a self-reported birthday, including for adults proving that restrictions do not apply to them.

What happens next

Thursday’s expected announcement would begin the legislative process. The European Parliament and the EU’s 27 member states must negotiate and approve the final text before it can become law.

Online services already have obligations under the Digital Services Act. The law bans targeted advertising to children and requires platforms accessible to minors to provide stronger protections. The Commission’s existing child-safety guidelines also address addictive design and age assurance.

The Kids Act could go further by creating enforceable access limits across the EU. Its reach will depend on the age Brussels chooses, the services covered, and the personal information Europeans must provide to prove they are old enough.

Take Control of Your Online Privacy

5.0

AllAboutCookies writers and editors score products based on a number of objective features as well as our expert editorial assessment. Our partners do not influence how we rate products.

Editorial Rating

Claim Deal

On Incogni's website

2026 Editors’ Choice

Best Overall Data Removal Service

Privacy Protection

Incogni

PROMOTION: Get 55% Off Annual Plans With Code COOKIE

• Top-rated data removal service that scrubs your info from 420+ data broker sites automatically
• Independently verified by Deloitte, meaning removals are actually sent, confirmed, and not just claimed
• The Unlimited plan extends coverage to 2,000+ additional sites with human-assisted custom removals

Author Details

Thomas Kent

About the Author

Thomas Kent is a multi-disciplined reporter with over a decade of experience covering online platforms, digital trends, and consumer-facing tech. Tom focuses on digital privacy, data tracking, and user behavior, with a particular interest in how cookies, online surveillance, and platform design shape the modern internet experience. His reporting takes a research-driven, news-focused approach, translating complex technical topics into clear, accessible insights.