EU KIDS Act Would Restrict Social Media for Children. Where Does Protection Become Control?
The European Commission has proposed a new set of rules that would change when — and how — children across the EU can use social media.
The proposal is called the EU KIDS Act. It was adopted by the Commission on September 17, 2026, but it is not law yet. The European Parliament and the Council still have to negotiate and approve a final text.
Under the Commission proposal, children under 13 would not be allowed to access social media services. From 13 until 15, they could use limited “mini accounts” set up and supervised by a parent or guardian, with restricted features and a maximum of one hour per day. From 15, teenagers could open their own accounts, while platforms would still face stronger safety-by-design duties for minors.
That is the policy story.
The family story is harder: How do you protect a child from systems designed to hold their attention without teaching them that safety only exists when an adult is watching?
What does the EU KIDS Act actually propose?
The Commission’s September 17 proposal sets a staged approach to online access:
- Under 13: no access to social media services. Child-friendly video-sharing services could still be used through a parent- or guardian-managed account.
- Age 13 to under 15: social media through a parent- or guardian-managed “mini account,” with limited functionality and a daily time limit of up to one hour.
- From 15: teenagers could open and manage their own social media accounts.
The proposed law would also apply safety rules more broadly to online services used by minors, including video-sharing platforms, online games, AI companions and chatbots.
What would platforms have to change?
The Commission says services used by minors would have to be safer by default. Its examples include limiting infinite scroll and reward mechanics, restricting push notifications during sleeping hours, preventing unsolicited contact from strangers, making minors’ profiles private by default, and making blocking and muting easier.
AI companions and chatbots would also face special limits. The Commission says they should be off by default for minors and should not be designed to create emotional dependency.
The proposal also shifts more responsibility onto large platforms: instead of regulators having to prove a service is unsafe, providers would have to demonstrate that their services are age-appropriate and safe by design.
What about age verification and privacy?
This is where much of the public argument begins.
The proposal would require age checks for new social-media and video-sharing accounts. The Commission says these checks can use a privacy-preserving EU age-verification app that does not retain identity documents or biometric data.
That reassurance has not ended the debate.
Across Reddit discussions about the proposal and earlier European age-limit plans, many users support stronger restrictions for children but worry that enforcement could normalize identity checks for everyone. Others argue that parents already have tools but often lack the time, knowledge or leverage to compete with platforms built around engagement.
Those comments are public reaction, not evidence that the proposed EU system will necessarily become mass surveillance. The final legal text, technical implementation and enforcement details still matter.
Reader Mirror: I want to protect my child. I do not want to become their surveillance system.
This is the uncomfortable position many parents recognize.
You know a thirteen-year-old is not equipped to out-negotiate an algorithm engineered by adults with enormous amounts of data.
You also know that a child eventually has to develop judgment.
So where is the line?
If every mistake is prevented by monitoring, the child may be safer in the short term but learn very little about choosing well when nobody is watching.
If there are no limits at all, “learning through experience” can become an excuse for exposing a young person to systems built to exploit attention, status anxiety and social pressure.
Good parenting often lives in the difficult middle: enough protection to reduce risks that a child cannot reasonably manage yet, and enough autonomy to let judgment grow.
OliviaC: A boundary and control are not the same thing
There is a useful distinction here that appears in many kinds of relationships.
A boundary says: Here is the limit. Here is why it exists. Here is what I will do if we cross it.
Control says: I must manage your choices for you.
Those can look similar from the outside, especially when safety is involved. The difference often shows up in what the limit is trying to build.
Healthy boundaries should gradually support more self-trust and responsibility. Permanent control keeps the other person dependent on the controller.
That is why this policy debate has a surprisingly human center. The question is not simply whether children should have unrestricted social media. It is how families and institutions can provide protection without making surveillance the only model of safety.
Recovery families wrestle with a related — though not identical — problem. When someone you love has been at risk, watching everything they do can feel like care. But support that becomes total monitoring can damage trust and leave everyone exhausted. Our guide How Families Can Support Recovery Without Controlling It explores that boundary in a recovery-specific context.
The experiences are different. The principle is transferable: protection works best when it helps a person become more capable, not merely more watched.
What happens next?
The KIDS Act is a proposal, not an EU-wide rule in force today. The European Parliament and the Council will now examine and negotiate the text. Age thresholds, technical requirements and platform obligations could change before any final law takes effect.
That makes the next phase worth watching closely — especially the details of age verification, privacy safeguards and how “safe by design” will be measured.
