Hello everyone,
I wanted to share some context on a recent development that might affect privacy advocates across Europe.
Today, July 21st, 2026, French lawmakers approved a bill banning social media for children under 15. The text passed both chambers of Parliament and is the flagship initiative of President Macron's second term. The government has indicated the measure should take effect at the start of the school year in September 2026.
France becomes the first EU country to pass such a blanket ban, following Australia which enacted similar measures for under-16s in December 2025.
Here's where it gets complicated for privacy. The law doesn't just restrict minors, every platform considered as a social will need to verify the age of EVERY user registering in France. If they can't confirm someone is over 15, access gets blocked.
But to verify ages at scale, platforms will likely need to collect ID documents from adults too. This means that potentially millions of new ID submissions flowing to private companies, questions about storage duration, data access, and who audits the databases, risk of function creep, could this infrastructure be repurposed later?
The European Commission has already flagged compatibility concerns with EU law during the legislative process.
Why this matters beyond France :
Given how GDPR works, this could set a precedent for other member states. Once one major economy establishes age verification infrastructure, others may follow citing "similar protection needs." We've seen this pattern with data retention and content moderation laws.
There are technical alternatives worth exploring : zero-knowledge proofs, on-device age estimation, parental consent frameworks that don't require central databases. But none seem to be getting serious consideration right now.
The law has passed Parliament but implementation details remain unclear. Platform operators are still figuring out how to comply without violating GDPR principles. Legal challenges are expected.
If you're following this issue or want to raise awareness about the privacy implications, I've started collecting signatures here: https://www.change.org/Verifagefr