EU’s Proposed ‘Kids Act’ to Restrict Young People’s Internet Access: A Threat to Civil Liberties and Online Freedom

Mandatory Age Gates and the Erosion of Digital Privacy

Under the proposed framework, platforms utilizing personalized recommender systems or uninterrupted content consumption face a phased access model. Children under 13 are barred from holding service accounts, while users aged 13 to 15 require restricted accounts under strict parental supervision. Autonomous accounts with safety-by-design defaults are reserved for teens between 15 and 18, leaving full, unrestricted internet access exclusively to adults.

This tiered architecture relies heavily on the official EU age verification scheme. Users of all demographics must present verifiable proof of identity or age, creating centralized honeypots of sensitive personal data. While a French court recently struck down undifferentiated blanket social media bans as unconstitutional, the EU Kids Act attempts a more granular approach, exempting services from age verification if they can establish user age with a vaguely defined “high degree of confidence.”

Despite these proportionality considerations, the broad scope of the law impacts virtually all mainstream video-sharing and social networking sites. Privacy advocates note that age thresholds serve as blunt proxies for actual user maturity. In doing so, these measures undermine fundamental civil liberties, increase friction for marginalized groups seeking information, and further entrench the market dominance of resource-heavy tech conglomerates capable of absorbing complex compliance overhead.

Safety by Design and the Architectural Conflict

Beyond entry barriers, the legislative proposal enforces a “safety by design” mandate spanning social media platforms, video-sharing services, online games, app stores, and AI chatbots. Providers must establish child-safe defaults regarding infinite scrolling and recommender systems unless they deploy intrusive age assurance mechanisms to verify adult status. For generative AI systems and conversational agents, the rules attempt to mitigate emotional dependencies and unsafe interactions.

These requirements introduce significant technical friction, particularly for decentralized systems such as the Fediverse. Imposing product-safety conformity doctrines onto dynamic software ecosystems risks transforming compliance into content censorship. Deciding what constitutes a “safe” interaction frequently bleeds into controlling what information users can access or distribute.

Furthermore, the Commission bypassed a full impact assessment process for the draft law, skipping systemic evaluations of alternative policy options and comprehensive stakeholder consultations. Small and medium-sized enterprises face the brunt of these unmitigated regulatory costs, as the proposal provides no specific exemptions for smaller firms—unlike its carve-outs for non-profit encyclopedias, scientific repositories, open-source software projects, and educational services.

The 30-Second Verdict on Regulatory Overreach

The EU Kids Act attempts a noble objective: shielding minors from predatory platform design and manipulative algorithmic feeds.