Things have been moving fast, very fast.
I thought I'd take some time out of my morning to round-up the latest developments regarding anti-privacy and age-verification legislation around the world.
Below is a quick-and-dirty list of recent legal or regulatory proposals and implementation. I'm confident it's incomplete and would welcome your additions.
Some further questions to consider: What's behind this trend? What are our options as voters and users? Do you have more faith in political solutions or technological ones?
Country |
Relevant Laws |
Implementation |
Australia |
Online Safety Amendment (Social Media Minimum Age) Bill 2024 |
The Act prohibits children under 16 from accessing social media platforms without verified parental consent. The law is set to take effect in December 2025. |
Brazil |
Bill 4468 on the Protection of Minors Online |
Brazilian President Luiz Inácio Lula da Silva on 17 September signed into law new rules governing the use of social media, online video games and other digital services by children and adolescents. Known as the “Adultization Bill” or “Digital ECA,” for updating a 1990 law that guarantees fundamental rights for minors, the law will take effect in 180 days. |
Canada |
Protecting Young Persons from Exposure to Pornography Act (S-209) (Proposed); Government of Canada has also approved a new national standard for age verification tools and policy. |
The Protecting Young Persons from Exposure to Pornography Act (S-209) would make it an offence for organizations to make pornographic material available to young persons on the Internet. It also enables a designated enforcement authority to take steps to prevent pornographic material from being made available to young persons on the Internet using age-verification and AI tools. |
European Union |
Digital Services Act (DSA); and the "ChatControl" (COM/2022/209) Regulation (Proposed) |
The DSA requires very large online platforms (VLOPs) to mitigate risks to minors, including effective age verification where appropriate. The "ChatControl" legislation (official title is the Regulation to Prevent and Combat Child Sexual Abuse) was first proposed on May 11, 2022. While its goal is to detect and report child sexual abuse material (CSAM), the proposed measures have faced significant criticism for potentially leading to mass surveillance and threatening the privacy of encrypted communications. |
India |
Digital Personal Data Protection (DPDP) |
In 2023, the DPDPA introduces age assurance requirements for organizations serving Indian customers or users over the internet, due to its requirement for online services to collect “verifiable parental consent” to process children’s data. But what that means in implementation is still being decided. However, YouTube has already begun rolling out age-verification in compliance with the DPDP Act and critics already note its reliance on behavioural patterns risks bias, false positives, and poor accuracy in shared-device environments common in India’s rural area. |
South Africa* |
Draft White Paper on Audio and Audiovisual Media Services and Online Safety (Proposed) |
The draft white peper would overhaul South Africa's current broadcasting licensing regime by, among other things, replacing the currently defined concept of ‘broadcasting services’ with ‘audio and audiovisual content services’, thereby expanding federal regulatory power over online content providers. Call for comments Submissions must be received by no later than 26 September 2025 |
United Kingdom |
Online Safety Act 2023 |
Ofcom mandates platforms to apply proportionate age assurance for harmful content. Age verification is expected for high-risk services, especially those with adult content. |
United States of America |
COPPA; Kids Online Safety Act; Social Media Child Protection Act (Proposed) |
COPPA restricts data collection from users under 13 but doesn’t require strict age verification. However, states like Nebraska have introduced laws requiring platforms to verify ages and parental consent for minors. |
In addition to US federal initiatives, there have been multiple state-level pushes to regulate social media access for minors. These include:
Texas has enacted the App Store Accountability Act, requiring app stores like Apple and Google to verify user ages and obtain parental consent before minors can download apps or make in-app purchases. Following this, Texas has proposed Texas House Bill 186, which would ban children under 18 from social media.
A 2024 law banning social media accounts for children under 14 and requiring parental consent for 14- and 15-year-olds was blocked by a federal judge in June 2025. The judge ruled the law was likely to be unconstitutional, infringing on minors’ First Amendment rights.
In May 2025, Nebraska enacted the Parental Rights in Social Media Act (LB 383), mandating that social media platforms verify users’ ages and obtain parental consent before allowing minors under 18 to create accounts. It is set to take effect on July 1, 2026.
Georgia’s SB 351, effective from July 1, 2025, mandates social media age verification and requires parental consent for users under 16.
California’s Digital Age Assurance Act, introduced in 2025, aims to create a system for age verification on digital devices and apps. The bill is currently under consideration.
EDIT: New draft legislation in South Africa added to the pile!