The UK Just Banned Social Media for Under-16s and Millions of Adults Will Have to Prove Their Age

The U.K. officially banned social media for under-16s starting Spring 2027. To enforce it, platforms could require adults to verify their age, raising real questions about data privacy.
We receive compensation from the products and services mentioned in this story, but the opinions are the author's own. Compensation may impact where offers appear. We have not included all available products or offers. Learn more about how we make money and our editorial policies.

On June 15, 2026, the U.K. government officially announced a ban on social media for anyone under 16, with protections expected to take effect in spring 2027. The move follows one of the largest public consultations run by this government, drawing more than 116,000 responses from parents, children, and experts.

To enforce the new rules, social media platforms will need ways to determine whether U.K. users meet the minimum age requirement — not just those who appear to be minors. Methods could include facial age estimation, credit card checks, or government-issued IDs. The government's own fact sheet notes that many adults with long-standing accounts or connected payment methods may not need new checks. But others could be asked to provide additional information to continue using affected platforms.

That raises questions about how sensitive information, including facial images, financial details, and identity documents, will be handled by platforms and third-party verification services.

How do you protect your data if age verification becomes the norm?

According to an All About Cookies survey, 74% of Americans support age verification for social media platforms, but only 20% believe age verification laws are the best way to protect children online.

For adults concerned about privacy, VPNs are one option for limiting exposure of their IP address, although they can't override every type of age check. Here's what's confirmed about the U.K.'s new restrictions, who may be affected, and what the changes mean for your personal information.

Editor's note (October 20, 2026): This article was updated to clarify the timeline for the U.K.'s proposed under-16 social media restrictions, which are expected to take effect in spring 2027. We also clarified who may need to verify their age, the methods platforms may use, and the limitations of VPNs for bypassing age checks.

In this article
U.K. social media age restrictions confirmed
Why a U.K. social media ban is a problem for everyone (not just kids)
Can a VPN help with U.K. age verification?
Bottom line
FAQs

U.K. social media age restrictions confirmed

On June 15, 2026, Starmer announced the ban at a press conference, saying: "I want this message to be heard loud and clear. I am not prepared to compromise on the safety and happiness of our children, and that is why this ban must happen, and why this ban will happen."

The first set of regulations is expected before the end of 2026, with changes planned for spring 2027.

The government's announced protections include:

  • A ban on social media access for users under 16
  • Restrictions on livestreaming and contact from strangers, including on gaming platforms
  • Restrictions on AI romantic companion chatbots, with a proposed minimum age of 18
  • Potential curfews and limits on infinite scrolling for under-18s
  • Additional safety settings and functionality restrictions for 16- and 17-year-olds

These measures are not all in force yet, and their precise scope will depend on the final regulations. The government has indicated that private messaging services such as WhatsApp and Signal will be treated differently from social media platforms. Ofcom, the U.K.'s online safety regulator, will provide further guidance on effective age-assurance methods.

While the policy is aimed at protecting younger users, its impacts won't stop there. Major platforms that could be affected include Facebook, Instagram, TikTok, X (formerly Twitter), YouTube, Snapchat, and Reddit. Gaming and communication services may also face additional requirements, depending on the final rules.

Will you need to verify your age?

Not necessarily. According to the U.K. government, some adults may be able to establish their age through information already associated with their accounts, including:

  • An account that has been open for more than 16 years
  • A connected credit card
  • An email address that's already age-verified

Some adults who completed verification under the existing Online Safety Act may not need to repeat the process either. These are examples of possible age-assurance signals, not guaranteed exemptions for every platform. Read the full government fact sheet for more details.

Why a U.K. social media ban is a problem for everyone (not just kids)

In practice, restricting social media access could reshape how identity works online for everyone. To enforce age limits, platforms need reliable ways to distinguish younger users from adults. That may mean asking some adults to verify their age even when they've used the same account for years.

Depending on the service, verification methods could involve:

  • Uploading a government-issued ID
  • Submitting a selfie or facial scan
  • Open banking, credit card checks, or digital identity services
  • Other methods that use existing account information to establish age

That creates new questions about how sensitive personal information is collected, processed, and protected. And unlike a password, you can't reset your face. Or your ID.

Additionally, the changes could fundamentally alter how people use the internet. Anonymous or pseudonymous accounts may become harder to maintain if a platform requires users to establish their age through personal information.

Even if you're well over 16, you could be asked to share information just to access content. How much the platform actually receives, how long the verification provider retains the data, and whether alternatives are available will depend on the system being used.

While a U.K. government consultation found 9 in 10 parents back a social media ban for under-16s, that only paints part of the story. The risks children face online are real, but questions remain about how effectively these restrictions will work and what privacy trade-offs they'll create.

According to an All About Cookies survey, 79% of respondents said data privacy was their top concern regarding age verification laws. Those fears aren't unfounded: more than 1 billion identity records have been exposed globally in recent data breaches.

And while our survey results show that most people agree something needs to be done, only 20% of respondents named age verification laws as the best method for protecting children. Instead, more respondents preferred parental control and monitoring tools.

Reddit users across Europe are reporting prompts to verify their age with a selfie or government ID — despite the CEO once saying the platform didn't want your identity. Here's what we know about Reddit's age verification.

Can a VPN help with U.K. age verification?

Sometimes a VPN can help bypass age verification in the U.K. A VPN changes the IP address websites see by routing your connection through a server in another country. That may help with age checks triggered by a U.K. IP address, but it won't necessarily bypass verification tied to your account, birthdate, or other information a platform already has.

For a step-by-step walkthrough, including VPN limitations and troubleshooting, see our guide on how to get around U.K. age verification.

Bottom line: The U.K. age verification law

The U.K. government has announced a social media ban for under-16s, with protections expected to take effect in spring 2027. While the rules are designed to protect children, enforcing them could mean more adults being asked to establish their age, too.

Some people may be able to rely on existing account information or previous verification. Others could face additional checks involving identity documents, facial age estimation, or financial information.

For now, the most important questions are how the final regulations will work, which services will be covered, and what personal information users will actually need to share. A VPN may help with some location-based restrictions, but it won't resolve every verification requirement.

Staying informed about the rules and understanding the privacy implications of different verification methods will help you make better decisions as the changes take effect.

FAQs

Is it legal to use a VPN to bypass age verification in the U.K.?

Yes, VPNs are legal to use in the U.K. The government has examined their role in bypassing age checks, but it has not introduced a general VPN ban or a blanket prohibition on VPN use by minors. Websites may still enforce their own access rules, and using a VPN doesn't override legal age requirements.

Learn more about the government's position in our coverage of the U.K. VPN debate.

When does the U.K. age verification law take effect?

The U.K. government announced the social media ban on June 15, 2026. Regulations are expected to be laid before Parliament before the end of 2026, with protections coming into force in Spring 2027.

Which social media platforms are affected by U.K. age verification?

The ban covers major social media platforms, including Facebook, Instagram, TikTok, X, YouTube, and Snapchat. Messaging services like WhatsApp and Signal are not included. Gaming and other online platforms may also face restrictions on specific features, such as livestreaming and strangers contacting children, but are not subject to the full social media ban.

Will VPNs work to bypass U.K. age verification?

A VPN may help with age checks based on your IP address, but it won't reliably bypass restrictions tied to your account, birthdate, or verification status. Our guide to how to get around U.K. age verification explains when VPNs work and what to try if you're still blocked.

What information does age verification collect?

Age verification systems may collect government-issued ID, facial scans, or other biometric data. They sometimes also collect banking data and email correspondence. Third-party services often process this information and may store it for verification purposes.

All-in-One Digital Security App with Servers in All 50 U.S. States
5.0
Editorial Rating
Claim Deal
On NordVPN's website
2026 Editors’ Choice
Best Features
VPN
NordVPN
PROMOTION: Get 78% Off + Get 3 Extra Months
  • VPN that earned the only Platinum rating in a five-way independent speed and security test by Artifact Security
  • Historically unlocks Netflix libraries in the US, Canada, UK, and Australia with no errors
  • Bundles with ad blocker, data removal, and encrypted storage for a more complete privacy setup

Author Details
Thomas Kent is a multi-disciplined reporter with over a decade of experience covering online platforms, digital trends, and consumer-facing tech. Tom focuses on digital privacy, data tracking, and user behavior, with a particular interest in how cookies, online surveillance, and platform design shape the modern internet experience. His reporting takes a research-driven, news-focused approach, translating complex technical topics into clear, accessible insights.
Kate Quinlan is a Senior Editor at All About Cookies, where she has tested dozens of digital security tools and contributed to 500+ articles on data security, web building & hosting, VPNs, ad blockers, parental controls, and more. Before joining AAC, she managed a team of more than 150 writers at SuperSummary, where she developed editorial standards at scale. She holds a B.A. in Professional Writing from Kutztown University.