On 6 November 2026 the Electronic Frontier Foundation published its submission to the UN human rights office (OHCHR) on child rights and safety in the digital environment. The input feeds a report due at the Human Rights Council's 64th session in the first quarter of 2027. EFF's thesis is that rules limiting young people's access "make their lives, in total, less safe," and that governments should instead "focus on the systems that create these risks in the first place." It also warns that forcing everyone to hand over sensitive personal information to enter online spaces creates privacy risks for all users.
That is an easy claim to make from a peacetime vantage point. Ukraine is a harder test.
The strongest case for restriction
The case for acting is not hypothetical. Ukraine's Security Service (SBU) spokesman said in April 2025 that 22% of detected offenders recruited by Russian special services were minors. He added that in the first months of 2025 alone the SBU and National Police had exposed more than 50 minors who took part in terrorist attacks and arsons. The youngest relay-cabinet arsonists were 13.
In February 2026 the stakes rose. After an overnight attack in Lviv on 22 February that killed a 23-year-old police officer and injured 25 others, President Zelensky said the perpetrators had been recruited through Telegram. Interior Minister Ihor Klymenko said Russian intelligence increasingly uses the app to recruit saboteurs. Yaroslav Yurchyshyn, who chairs the parliamentary committee on freedom of speech, called Telegram a "Russian weapon" and suggested Ukraine either ban it or force it to follow European regulatory standards.
A regulator could fairly say that a teenager offered easy money by an anonymous handler at midnight is not exercising a free-expression right. It is being groomed for a war crime. The argument for a hard backstop is serious.
What Ukraine is actually proposing
The proposals are less uniform than the "restrict youth access" label suggests, and they split into three tracks.
Age limits. In April 2026 Servant of the People MP Yulia Grishina told the Rada that children's access to social networks needs a legal framework. Her working group was studying European models, such as barring registration of children under 14–16 without parental permission. Ukraine would build its own model accounting for martial law, Russian information operations and children living abroad. It would also have to settle how to verify ages technically, and she said the draft would be finalised only "after a balance is found between security and the right to access information." I found no registered bill text, so this is a proposal, not a statute.
Bill No. 11115. This is the Telegram bill, registered on 25 March 2024 and titled as amendments on regulating information-sharing platforms through which mass information is disseminated. The Rada's own record lists it as awaiting consideration, placed on the agenda by resolution 4958-IX on 1 September 2026. It had earlier been pulled from the plenary agenda on 12 March 2026 because the humanitarian policy committee had not yet issued its conclusion. On 25 March 2026 that committee recommended first-reading adoption. I could not confirm any floor vote since.
Anti-recruitment enforcement. Police and the SBU are already working on this track, and it mostly involves prosecuting handlers rather than restricting children's access.
Where EFF's argument holds, and where it strains
Bill 11115 is, in its own terms, closer to EFF's preferred model than to an access ban. According to the committee summary, it would define information-sharing platforms and require them to publish terms of service, complaint contacts and a right-of-reply procedure. It would also require disclosure of ownership and funding on request, and a Ukrainian legal representative unless the platform has an EU presence. The sanction is notable. A platform with non-transparent ownership could not be used by state bodies or financial service providers, and could not be installed on official devices. That is an obligation on platforms and a limit on state use. It does not stop a 15-year-old from opening an app.
This is the better design, and we think it should be the template. Accountability for what a platform's operators can see, and who answers when something goes wrong, targets the supply side of recruitment. It also avoids a system that identifies every Ukrainian teenager.
EFF's argument strains in two places. First, the submission as summarised by EFF's own blog treats the problem as business models and data practices. Wartime recruitment is different: it is adversarial and state-run, and it exploits any open channel. Better design rules on an ad-driven feed do little against a Russian handler in a private chat, so some platform duties must include responsiveness to law-enforcement requests. Second, a Ukrainian age-verification regime would require a verification layer in a country whose citizens are scattered across borders and under cyber-attack. A central database of minors' identities would be a high-value target for the same adversary.
The night-time access limits floated by some MPs also deserve scepticism on evidence. I found no data showing that time-of-day limits reduce recruitment, and a determined handler simply adjusts the schedule.
A proportionate path
Ukraine should sequence its measures by evidence:
- Pass platform-side duties first, and revise 11115 so ownership transparency and law-enforcement responsiveness are clearly separated from any speech controls.
- Invest in prosecuting recruiters and in school-level digital literacy, including how to report a handler without facing liability.
- Treat age limits as a later step, with privacy-preserving verification and a published sunset review, rather than a wartime default.
- Involve young Ukrainians in the design, a gap EFF says is common in this field.
The lesson for the OHCHR is that EFF's principle survives contact with a war, but it needs one amendment. Targeting systems rather than users works only if the targeted systems can be compelled to respond to a real threat. Ukraine's best option is to regulate the platform, not the child.