The European Commission is reportedly preparing an EU Kids Act that would curb unsupervised access by children under 15 to social-media and video-sharing platforms, AI chatbots or companion services, and online games. The draft would require age verification during account creation and before online-game downloads, restrict addictive design patterns and harmful recommendation feeds, and extend obligations to app stores; noncompliant organizations could face fines of up to 6% of worldwide annual revenue.
The proposal reportedly includes stricter protections for under-13s and limited service functionality for users below 15, with an age-verification “Mini-Wallet” envisioned to validate age using identity documents and facial-biometric comparison before sharing an age signal with services. Critics warn that identity-based checks could burden parents, expose sensitive identity and custody data, weaken anonymity and access to information, and create surveillance-enabling infrastructure. The measure remains a draft and must be approved by EU member states and the European Parliament, leaving its final thresholds, enforcement approach, and implementation date unresolved.

See the reporting duties and controls this puts on the clock.
3 events from the most recent confirmed update back to the earliest known activity.
The European Commission is reported to be proposing the EU Kids Act, establishing age-based restrictions and supervised accounts for covered online services, including social media, video platforms, chatbots, and games. The draft also includes measures against addictive platform designs and harmful feeds, with potential fines of up to 6% of annual global sales for violations.
The Commission presented a proposed age-verification application called Mini-Wallet, intended to provide services with a data-minimized age signal. The design described would use identity documents and biometric facial comparison against the document photograph.
Brussels identified infinite scrolling, autoplay, and push notifications as concerning platform features and questioned whether Meta was adequately preventing younger children from accessing its platforms.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.