EU urges rapid rollout of privacy-preserving age-verification app for minors

The European Commission pressed member states to move fast on a new age-verification app it said could let users prove they are old enough for restricted content without handing over their name, exact age or identity. Brussels said the tool should be available across the bloc by the end of 2026, turning child safety into a test of whether Europe can build a privacy-preserving system that does not become a de facto digital ID for everyone.

The Commission said the blueprint was now finalized and could be deployed either as a standalone app or inside the European Digital Identity Wallet. It described the design as free, secure, easy to use, interoperable and harmonised across Europe. The technical flow relies on proof of age drawn from national eIDs, passports and identity cards, pre-installed apps with age information such as banking apps, or offline third-party activation at places such as post offices. Once the proof is issued, the link between the user and the proof provider is cut, and no further data is exchanged.

Henna Virkkunen, the EU commissioner driving the file, said the system would let people browse in full privacy while keeping children away from adult content. The political logic is straightforward: Europe wants tougher age checks after years of complaints that platform self-declaration is meaningless, but it does not want to normalize universal identity disclosure just to log in to an app.

The push landed alongside fresh enforcement against the largest platforms. On 29 April, the Commission preliminarily found Meta’s Facebook and Instagram in breach of the Digital Services Act for failing to stop children under 13 from accessing their services. Officials said the platforms’ self-declared age checks were ineffective because children could simply enter a false birth date with no meaningful verification. The same day, Brussels reiterated earlier findings that TikTok’s design, including infinite scroll, autoplay, push notifications and a highly personalized recommender system, posed risks to minors.

The age-verification plan sits inside a broader child-safety framework the Commission set out in July 2025. Those DSA guidelines call for minors’ accounts to be private by default, recommender systems to be adjusted to reduce rabbit-hole effects and features such as streaks, autoplay, read receipts and push notifications to be disabled by default when they fuel excessive use. They also call for effective age assurance around adult content such as pornography and gambling, and in some cases social media itself.

Denmark, France, Greece, Italy and Spain are already taking up the technical solution to build customized national apps. For regulators, the app is a potential model. For tech companies, it signals more friction, more compliance costs and far less tolerance for age gates that are easy to fake.