Egypt's media and telecom regulators have given social media platforms until 20 October 2026 to file implementation plans for a new child-protection regime, and until 20 December 2026 to comply in full. The scheme is not obviously unreasonable. The question is what surrounds it: a country where a vaguely worded cybercrime law has been used against social media users for six years.
What the resolution does, and what we cannot confirm
The Digital Policy Alert tracker records that the Supreme Council for Media Regulation (SCMR) and the National Telecom Regulatory Authority (NTRA) adopted a joint resolution on protecting children and adolescents on social media platforms on 20 September 2026. It lists a 30-day deadline for implementation plans and a three-month deadline for full compliance. The tracker's own description is high-level, and it cites an official Ministry of Communications and Information Technology announcement that we could not retrieve.
News reports add detail. Arab Finance reports that platforms may not create or offer independent accounts to children under 13. Users aged 13 to under 15 may hold accounts only if a "Safe Mode" switches on automatically and cannot be turned off by the child. Platforms must use effective age verification and prevent circumvention, while collecting only the minimum personal data needed. They must also review existing accounts that reliably appear to belong to under-15s and offer appeals and age corrections.
We have not seen the resolution's full text. Neither source we could read mentions penalties for non-compliance, so what happens to a platform that misses 20 December is unknown. That gap matters for the analysis below.
The strongest case for the rule
Regulators have a serious argument. Children are exposed to harassment, exploitation and compulsive-use design, and parents struggle to supervise dozens of apps alone. A default-on safe mode for young teens is more targeted than a blanket ban, and the reported text includes safeguards many regimes omit: data minimisation, an appeals route and a duty to prevent circumvention. Egypt's National Council for Human Rights welcomed the move while urging a balance between child safety, privacy and the rights to knowledge and expression. We could not open that page directly, so we rely on the search summary of its content.
If the resolution does what the reports describe, it is closer to proportionate design than the blunt bans proposed elsewhere.
Why age verification is the hard part
The weak point is the instrument. Verifying that a user is over 13 or 15 without collecting identity data is difficult. The stronger the check, the more it tends to link accounts to government-issued identity or biometric data. Anonymity is what lets people in restrictive environments speak, organise and read freely, and it is lost for adults too once everyone is verified.
The data-minimisation language is therefore the most important sentence in the reported text, and it is exactly what cannot be assessed without the full resolution. A pro-innovation approach would favour privacy-preserving methods such as on-device age estimation, with no central retention. It would also give platforms room to choose methods rather than mandate one. Whether Egypt's rule permits that flexibility is unconfirmed.
The law next door
Child-safety rules do not operate in a vacuum. Egypt's Cybercrime Law No. 175 of 2018 contains Article 25, which penalises infringing a "family principle or value of the Egyptian society." Columbia's Global Freedom of Expression database records a minimum of six months' imprisonment and a fine of EGP 50,000 to 100,000 for it. Article 27 separately punishes using an online account to commit or facilitate a crime. According to the same source, the 2018 act's offences were first used in the 2020 TikTok influencer cases, and a Cairo appeals court decision of 12 January 2021 held Article 25 constitutional.
That decision shows both sides. Hanin Hossam was acquitted on appeal, while Mawada Al-Adham's conviction for violating Egyptian values was upheld and her prison term cancelled, though a fine was kept. Human Rights Watch counted at least 15 people arrested by August 2020, including a 17-year-old, and noted that morality terms in the charges are not defined. A 2026 research paper from the Association for Freedom of Thought and Expression (AFTE) notes that neither the law nor its executive regulations define "family values," and documents further sentences in December 2025 and January 2026.
None of this proves the child-safety resolution will be misused. It does mean the same state apparatus will now hold a lever over platforms: an age-compliance regime with undefined penalties, run by regulators who also oversee media content. Vague liability pushes platforms to over-remove and over-verify, because the safe course for a company facing an undefined sanction is to restrict more than the rule requires.
What proportionate implementation looks like
Three tests will show whether Egypt's approach is proportionate rather than merely protective.
- Published text and penalties. Regulators should publish the full resolution and the sanctions that attach to it. Compliance deadlines for rules that platforms cannot read in full are hard to defend.
- Method neutrality and privacy. Platforms should be allowed to meet the standard with privacy-preserving verification, and the data-minimisation duty should be enforceable against the regulators' own access requests.
- Firewall from content law. Age-verification data and child-safety enforcement should not feed prosecutions under Articles 25 or 27 of the 2018 law.
The immediate event is 20 October, when platforms' plans are due. What they commit to, and what the regulators publish in response, will say far more than the resolution's headline. Child safety is a legitimate goal, but a regime built on identity-linked verification inside a legal system with undefined morality offences deserves close scrutiny from the start, not only after the first enforcement action.