On July 21, 2026, the French National Assembly voted 279 to 81, with 66 abstentions, to definitively adopt a law prohibiting anyone under 15 from holding a social media account — hours after the Senate backed the same joint text 243 to 2. It is the first blanket, national-level ban of its kind in the European Union, and it is scheduled to bite fast: platforms must block new under-15 registrations from September 1, 2026, and close out existing underage accounts by January 1, 2027. What the law does not say, in any of its final articles, is who enforces it or how.
What Actually Passed
The bill traces back to a proposal Member of Parliament Laure Miller tabled in November 2025, which would have compelled platforms to refuse registration to under-15s, imposed a 10pm-to-8am access curfew on all under-18s, required age-verification methods aligned with technical guidelines from Arcom (France's audiovisual and digital regulator), and backed all of it with fines of up to 3% of a platform's global turnover (Tech Policy Press). France's Conseil d'État warned that scheme conflicted with EU law, so Miller shifted the legal obligation onto minors rather than platforms; the Senate later swapped the blanket ban for a blacklist-plus-parental-consent model. Neither survived contact with Brussels. After the European Commission objected, the joint committee reverted to the original blanket prohibition — while deleting Arcom's enforcement and age-verification role and the 3% penalty entirely (Assemblée nationale, dossier législatif; proposition de loi n°2107). What remains is a categorical rule — no one under 15 may hold an account on platforms including TikTok, Instagram and Facebook — with no named regulator, no specified procedure, and no stated sanction for a platform that simply ignores it.
The Case the Ban's Backers Have a Right to Make
The strongest argument for this law isn't hypothetical. French health authorities have linked heavy adolescent social media use to rising rates of anxiety, sleep disruption and body-image harm, particularly among girls, and Digital Minister Anne Le Henanff framed the bill as a direct response: "If someone is under 15, the account will be closed" (Al Jazeera). Waiting for Brussels has costs too — the EU has spent years debating a harmonized minimum age and design-code standard under the Digital Services Act (DSA) without landing one, while national legislatures that move first, as Australia did with its under-16 platform ban, have at least forced platforms and parents to reckon with the question. A parliament facing constituents worried about their children is not obligated to wait for consensus among 27 member states.
Why Brussels Objected — and Why It's Right
But the European Commission's opinion, issued as France notified the bill under the EU's technical-standards procedure, raises a structural problem the French text never resolved: it would "create a parallel national supervision and cooperation regime" that overlaps the DSA's harmonized enforcement architecture, and any age-verification or parental-consent screening it implies could itself collide with DSA obligations platforms already carry (Tech Policy Press). This is not Brussels reflexively defending turf. The DSA exists precisely so that a platform serving 450 million EU users faces one enforcement authority and one risk-assessment framework, not 27 divergent national verification regimes each with its own technical standard and appeals process. France tried to build that regime for one age bracket, got told no, and rather than fix the conflict, deleted the entire enforcement chapter and kept the prohibition. A legal expert quoted by Monaco Life called the result "a general prohibition without a specified procedure to apply it" (Monaco Life) — and that gap is not a drafting oversight; it is what survives when the enforcement mechanism itself was the part found unlawful.
A Ban Is Not a Policy
Evidence from Australia's comparable under-16 ban suggests what happens next: Tech Policy Press cites data showing roughly 85% of underage users there found ways around similar restrictions, typically by lying about their birth year or migrating to apps and encrypted channels a ban doesn't cover — platforms with none of the moderation, reporting or design safeguards that DSA-regulated services carry (Tech Policy Press). A ban that cannot verify age cannot enforce itself, and a ban that cannot enforce itself pushes children toward less accountable corners of the internet rather than out of harm's way. The Commission's own forthcoming proposal, expected in September 2026, is reportedly weighing platform-design obligations — recommendation-algorithm limits, default privacy settings, addictive-design curbs — over blanket age gates, which is the more defensible route: it regulates what platforms build rather than issuing prohibitions that only a robust identity-verification infrastructure, not yet built, could ever enforce.
France's law is now before the Conseil constitutionnel, which could still narrow or strike parts of it before promulgation. Lawmakers elsewhere in the EU watching Paris as a model should notice what actually happened here: not that a ban failed, but that removing the machinery to enforce it was the price of avoiding an unlawful one. A rule without an enforcer isn't a compromise — it's a headline.