What the Commission Actually Adopted
On September 17, 2026, the European Commission formally adopted the proposed EU KIDS Act, a regulation that would bar social media platforms from serving children under 13 outright, set an EU-wide minimum age of 15 for independent accounts, and require 13-to-15-year-olds to use guardian-created "mini accounts" limited to one hour of screen time a day (European Commission press release). The proposal also reverses the burden of proof: rather than regulators having to demonstrate a platform is unsafe, providers must show their services are "age-appropriate and safe by design" before they can operate. Non-compliance carries fines of up to 6% of worldwide annual turnover, plus an annual supervisory fee of up to 0.03% of global net income to fund enforcement (ppc.land).
The design-feature provisions are the most consequential part of the text. The Commission wants to ban "addictive features and profiling-based recommender feeds dragging minors into 'rabbit holes,'" along with infinite scroll, reward mechanisms, sleep-hour notifications, and unsolicited contact from strangers — and to make private profiles, disabled location tracking, and off-by-default AI chatbots the norm for minors (The Record). Existing accounts get no grandfathering: platforms have six months from the regulation's application date to determine which account holders are under 15 and disable those they cannot verify.
The Case For It, Stated Fairly
The strongest argument for the KIDS Act isn't moral panic — it's regulatory coherence. Ten member states, including France, Germany, Spain, and Italy, are already drafting their own national age-verification and social-media rules (Euronews), and a patchwork of incompatible national age gates would be worse for both children and platforms than a single EU standard. There is also a real design problem the Act is responding to: infinite scroll, autoplay, and engagement-optimized recommender systems were built for attention capture, not for the cognitive development of a 12-year-old, and design-level fixes — capping notifications, disabling autoplay, enforcing private-by-default profiles — are more durable than relying on parents to police an app one setting at a time. Commission President Ursula von der Leyen framed the reversal of the burden of proof as putting "parents back in the driving seat" rather than leaving families to police algorithms designed by trillion-dollar companies. That's a legitimate policy goal, and the safety-by-design elements of the Act — turning off addictive mechanics rather than trying to verify every user's age perfectly — are the more defensible half of the proposal.
Where the Proportionality Breaks Down
The age-verification and account-ban machinery is a different matter. The Act leans on an EU-built age verification tool using zero-knowledge cryptographic proofs, designed so platforms can confirm a user clears an age threshold without learning their identity — a genuinely privacy-conscious technical choice. But cryptography doesn't solve the underlying enforcement problem: a one-time age check does nothing to stop a 12-year-old from logging in with an older sibling's or friend's verified credentials, and the Act's own international comparators prove this. Australia's under-16 social media ban, cited in the Commission's own briefing materials, has seen roughly 61% of 12-to-15-year-olds continue accessing major platforms despite the law (The Record). Brussels is proposing the same enforcement model — hard age floors backed by verification checkpoints — while already possessing evidence that the model leaks.
The burden-of-proof reversal, meanwhile, is the kind of rule that reads as accountability but functions as a moat. A platform with in-house legal and compliance teams can absorb the cost of proving safety-by-design to a regulator's satisfaction; a smaller EU competitor or new entrant trying to build a teen-safe alternative cannot. Reversing the presumption of legality for an entire product category — rather than for specific harmful features — raises the fixed cost of operating in the EU market precisely at the moment the bloc says it wants more homegrown platform competition to Meta, TikTok, and Google.
The mini-account regime, meanwhile, hard-codes a one-hour daily screen cap into EU law for every 13-to-15-year-old, regardless of what they're doing on the platform — a blunt instrument for a nuanced problem of content and design, not raw minutes.
What Should Happen Instead
The fine ceiling — 6% of global turnover, not EU revenue — means the penalty for a single compliance failure with a French teenager's account could exceed the fines the same company faces for far more serious Digital Services Act violations. A proportionate version of this Act would keep the safety-by-design bans (recommender rabbit-holes, sleep-hour notifications, stranger contact) as the core enforceable layer, since those are auditable and don't depend on verifying every user's real age. It would drop or narrow the blanket screen-time cap, and it would size penalties to the EU market actually affected rather than global turnover. The Parliament, which in a November 2025 report favored an even higher minimum age of 16 against the Commission's 15, will spend the next negotiation round arguing about the number on the age gate. The more important argument — whether an age gate can be enforced at all without either mass surveillance or mass circumvention — is the one the trilogue should actually have.