The European Commission’s proposed EU Kids Act would impose age-based access controls and child-safety duties on social media, video-sharing platforms, games, AI companions, chatbots, and app stores. Covered social-media and video-sharing services would be barred from offering accounts to children under 13; users aged 13–15 would require closely parent-supervised accounts, while users aged 15–18 would receive more autonomous accounts designed with safety protections by default. The proposal also targets addictive design features, harmful interactions, and emotional dependency risks.
Critics warn that broad age-verification and age-gating mandates can require platforms to collect or validate sensitive identity data, creating privacy, security, and free-expression risks while limiting access to lawful information. They also argue that compliance costs could disproportionately affect smaller providers and consolidate the position of dominant technology firms. The Electronic Frontier Foundation identifies age verification as a wider digital-rights concern, and opposition to the EU proposal has focused on whether its restrictions are necessary, proportionate, and adequately supported by an impact assessment.

See the reporting duties and controls this puts on the clock.
1 event from the most recent confirmed update back to the earliest known activity.
The European Commission presented a draft EU Kids Act proposing age-based access rules and child-safety-by-design requirements for covered online services, including social media, video-sharing platforms, games, AI companions, chatbots, and app stores.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.