On 27 October 2026, according to Meduza's English-language report, which draws on Vedomosti, Roskomnadzor sent a bill to the State Duma's information policy committee. It would require children to be identified on social networks and would limit how long children under 14 can spend online. A regulator representative said the aim is to restrict children's access to banned content. That is a short list of reported facts, and the analysis below stays within it.
The strongest case for the bill
The concern behind the proposal is real. Meduza reports that the Interior Ministry has flagged children and teenagers being drawn into offences through social networks, messengers, forums and gaming chats. The most common are acting as "droppers" and handing third parties access to their own accounts. A regulator that cannot tell who is a child cannot enforce any child-specific rule. Identification is therefore a precondition for nearly every child-safety measure, and Russia is not alone in moving toward it. Australia's Online Safety Amendment (Social Media Minimum Age) Act 2024, registered on 10 December 2024, amends the Online Safety Act 2021 to impose a minimum age for social media accounts. A democratic government can legitimately conclude that platforms should not treat a ten-year-old like an adult.
What is actually known, and what is not
The public reporting leaves out the details that would decide whether this is child protection or something broader. It does not say how identification would work: which document, which database, or who would hold the result. It gives no hours, time windows or platform list for the under-14 limit. It reports no direct quotation from the bill or from the regulator, only paraphrase. It does not say what "banned content" means in this context, though in Russian law the term is set by the regulator and the courts, not by an independent standard.
That last point matters. Russia already has a statutory framework for child-directed information: Federal Law No. 436-FZ of 29 December 2010, "On Protecting Children from Information Harmful to Their Health and Development," which classifies information products and sets distribution requirements. The new bill is not filling a vacuum. It adds an identity layer to an existing content-classification regime, and the identity layer is what changes the picture.
Why the identity layer is the real policy
An age gate and a child-identification registry are different things. An age gate can be designed to answer one question, such as "is this user over the threshold?", and to discard everything else. Identification of children attaches a verified person to an account. Once accounts are tied to verified identities, every later rule, from time caps to content restrictions, can be enforced against a named individual instead of an anonymous one.
The design space is already visible in the Russian debate. In June 2026 the Digital Development Ministry said it was considering age verification for online platform users. Anti-Malware.ru's account of Minister Maksut Shadaev's remarks at SPIEF-2026 says he called age verification one of the nearest tasks on the digital agenda. It describes the options as linking accounts to the Gosuslugi state services portal, which raises data-sharing concerns, or having a platform receive only a yes/no answer about adulthood with no passport data. Those two designs have very different consequences for privacy and for speech. A bill that mandates identification without choosing between them leaves the choice to the implementing regulator.
This is also not a new idea in Russia. According to The Moscow Times, lawmaker Vitaly Milonov submitted a bill on 10 April 2017 that would have barred under-14s from social networks, required passport details to register and banned pseudonyms. The 2026 draft is more modest in wording, but the direction of travel, from anonymous accounts toward verified ones, is consistent.
The cost and feasibility problem
The feasibility concerns are specific. Anti-Malware.ru, citing Vedomosti, reports that experts estimate a full runet age-identification system would take one to three years and tens of billions of rubles. The same experts say foreign game stores and social networks are unlikely to adapt to Russian requirements. That is the practical risk: a mandate that foreign platforms will not meet pushes children toward services that comply with nothing, or toward domestic platforms with weaker privacy protections and closer state access.
The benchmark platform cited in the Russian discussion shows the scale. Anti-Malware.ru notes that Roblox has offered age confirmation by selfie or photo ID since the start of 2026, has about 150 million daily users, and that roughly a third of them are under 13. Verification at that scale is possible, but it is a major engineering and data-protection undertaking even for a private company with commercial incentives to get it right.
A proportionate alternative
A pro-innovation approach to child safety would start from the narrowest tool that works. That means age assurance that returns a bare threshold answer, no retention of identity documents, an independent audit of whatever is stored, and a hard prohibition on using child-identification data for anything other than the stated purpose. It would also define the time-limit mechanism in the statute, not leave it to ministerial order, because a cap on children's online time is only as defensible as the evidence that it improves outcomes. None of that has been published for the Russian draft.
The Duma committee stage is the point at which these questions can still be asked. Until the text is public, the right reading is cautious: a legitimate problem, a plausible tool, and a design that has so far been described only by its goal. Whether the bill protects children or simply extends identification across the Russian internet will be decided by the choices it has not yet disclosed.