On 11 September 2026 the Dutch government, through Digital Economy and Sovereignty Minister Willemijn Aerdts, submitted proposals to the European Commission for an EU-wide minimum age for social media and, where relevant, similar digital services. Spain is co-submitting. Two features set the paper apart from the national age bans now fashionable in several capitals. The age floor is explicitly temporary, and age checks must confirm only that a threshold has been met.
The strongest case for the proposal
The Dutch argument deserves a fair hearing. Aerdts framed it this way: "In the physical world we do not accept that products are unsafe for children", and the same standard should apply online. The cabinet cites addictive algorithms and harmful content as the harms. It also notes that 27 national rules would fragment the single market and let platforms play member states against each other. A single rule in an EU regulation, with few national derogations and enforcement at European level, is a coherent answer to that fragmentation. Parents cannot be expected to out-engineer product design built by teams of behavioural scientists.
What the paper does well
The cabinet's own statement says the minimum age applies "until these services are sufficiently safe". It proposes a European framework for independently assessing whether platforms are safe enough for children. Platforms that can prove their services are safe may be exempted. The Dutch Children's Rights Impact Assessment and the Digital Services Act could serve as the foundation.
This is the most defensible part of the plan, because it attacks the cause rather than the symptom. A blanket age ban treats every service the same, whether it is an infinite-scroll video feed or a moderated hobby forum. An exemption for demonstrably safe services gives companies a reason to change their design. That is the proportionate, innovation-friendly route: regulate outcomes and let products compete on safety.
The verification language is also restrained. The cabinet calls age verification currently the most suitable approach, and says it should "only confirm whether a user has reached the age threshold, without processing any additional personal data". The Dutch-language Rijksoverheid release adds that the Commission should first test whether the measure is necessary and proportionate. It also acknowledges that the measure could affect fundamental rights such as freedom of expression and privacy. Few governments put that on the page.
Where the plan is exposed
First, the paper names no age. The joint paper with Spain does not name an age, though Aerdts told NOS that 15 remains the Dutch position. The Dutch coalition parties D66, VVD and CDA have already agreed to push for an enforceable European minimum of 15. The number is the most contested part of any such rule, and it is being left for the Commission to fill in. A 15-year-old is old enough to follow politics, join a school society or find community online. Locking them out is a speech question as well as a safety question.
Second, the tooling is not mature. The Commission's July 2025 guidelines on protecting minors under the DSA recommend age verification when national rules set a minimum age for certain social media services. They point to the EU age verification blueprint as a reference standard for device-based checks, and describe compliance as voluntary. Yet DutchNews reports that Brussels' age-check app, unveiled in April, was bypassed by a security researcher within hours and had to be patched. A minimum age that teenagers can defeat in an afternoon will burden compliant adults and push determined minors toward less-moderated corners of the internet.
Third, the privacy promise is easier to state than to deliver. The Electronic Frontier Foundation opposes age-verification mandates outright. It argues they cut young people off from essential information and compromise the privacy of all users. The Dutch design, which proves only that a threshold is met, is the best available answer to that critique. But it holds only if every service accepts the same minimal credential and none layers on extra data collection. The proposal asks for this. It does not yet show how it would be enforced.
Fourth, the legal route is untested. Writing a social media age floor into an EU regulation raises questions about the legal basis and about how it fits with the DSA. The Commission will have to answer those before any text is tabled, and the Dutch paper leaves them to it.
What a proportionate version looks like
Three design choices would keep the Dutch idea intact while limiting the damage:
- Make the safety exemption real. Publish assessment criteria and timelines up front, so a service that fixes its design can leave the age gate quickly. If the exemption exists only on paper, the floor becomes permanent.
- Mandate the narrow credential. Require platforms to accept a privacy-preserving, device-based age proof, and prohibit using it for profiling or any other purpose.
- Sunset and measure. Tie the rule to evidence on harms and on circumvention, and require review, rather than assuming the measure works.
The Netherlands and Spain have put a more thoughtful proposal on the table than most. A temporary, outcome-linked age floor beats a permanent ban. But the credibility of the whole structure rests on age checks that are both private and hard to bypass, and that technology has not yet been shown to work at EU scale. Brussels should prove it first and legislate the age second.