Protecting Minors Online: An Observatory
A wide range of regulatory, policy, and technological developments affecting minors online are currently emerging at both the EU and global levels, raising complex questions related to fundamental rights, child protection, data protection, and platform governance. The Protecting Minors Online: An Observatory is a monitoring platform that systematically documents and tracks legal, policy, and regulatory developments concerning children’s online environments, including legislation, case law, regulatory guidance, and initiatives by public authorities and international organisations.
The Observatory systematically collects and documents developments from 2025 onwards. Earlier materials may be included selectively where relevant for contextual or comparative purposes.
EU institutional developments
– On 14 July 2025, the Commission released the first version of an EU white-label age-verification blueprint. Click here.
– On 14 July 2025, the Commission published its guidelines on the protection of minors under the DSA to ensure a safe online experience for children and young people. Click here.
– The European Commission published its Family-Friendly Age Assurance Tool Kit. Click here.
– On 26 November 2025, EU member states’ representatives agreed on the Council position on a Proposal for a Regulation laying down rules to prevent and combat child sexual abuse. Click here.
– On 11 May 2022, the Commission adopted a new European strategy for a Better Internet for Kids (BIK+). Click here.
EU Member States developments
– France enacted the SREN Law (Law No. 2024-449) on May 21, 2024, that aims to secure and regulate the digital space. It enables age-verification obligations and grants Arcom enforcement powers. Click here (FR).
– In January 2025, the French regulator Arcom enforced new technical standards requiring adult websites to implement “double anonymity” age verification. Click here. (FR)
– On 4 June 2024, the Spanish Council of Ministers approved the “Anteproyecto de la Ley Orgánica de Protección de los Menores en los Entornos Digitales”. The amendment deadline ended in November 2025, and the bill will move to the Senate. Click here and here (SPA).
– Italy’s communications regulator, AGCOM, has published a list of online platforms that must implement age-verification systems to prevent minors from accessing pornographic material. Click here. (ITA)
EU DPAs and national resources
– The Belgian DPA released its 2026-2028 strategy, which includes the protection of minors’ data. Click here (FR).
– CNIL launches an application called “FantomApp” to help 10-15-year-olds in a safer and more informed use of social networks. Click here.
EU and Member States’ case law
– Ireland’s High Court Upheld Coimisiún na Meán’s Content-Restriction Code, clarifying that national regulators can impose content restrictions, even bans, under existing laws like the Audiovisual Media Services Directive (AVMSD) alongside the DSA’s harmonized framework. Click here.
EU&International institutional developments
– European Commission, Australia’s eSafety Commissioner, and the UK’s Ofcom today issued a joint communication pledging to work together to advance child safety on digital platforms. Click here.
International developments
– The Cyberspace Administration of China (CAC) has issued a directive requiring companies to submit their audit reports on protecting children’s personal data from the previous year to CAC authorities by 31 January 2026. Click here.
– Brazil’s DPA presented its 2026-2027 strategic plan, reinforcing its commitment to managing children’s personal data in accordance with LGPD and ECA Digital. Click here.
– UNICEF launches a statement as countries move to introduce social media bans for children, mentioning that age restrictions alone won’t keep children safe online. Click here.
– Malaysia’s Cabinet has approved raising the minimum age for social media accounts to 16, aiming to implement it in 2026. Click here.
– Ofcom (UK communications regulator) launched a call for evidence on how online services and app stores use age checks to protect children under the Online Safety Act. The findings will inform upcoming reports to the Government on age assurance (due by July 2026) and on children’s use of app stores (due by January 2027). Click here.
– The UK’s Online Safety Act (OSA) moved into its final enforcement phase in 2025. In July 2025, Deadline: All “user-to-user” services (social media, forums) were required to complete their first mandatory Children’s Risk Assessment. As of March 2025, platforms must proactively remove illegal content before users even report it. Ofcom began issuing its first “Transparency Notices” in late 2025, forcing companies to reveal how their algorithms specifically impact child mental health. Click here.
– On October 13, 2025, California Governor Gavin Newsom signed into law SB243, the Companion Chatbot law, which is intended to protect children from the potential harmful effects of companion chatbots. Click here.
– Brazil adopted its first law, “ECA Digital,” dedicated to protecting children’s rights online in September 2025. It will take effect in March 2026. Click (PTBR) (ENG).
– On November 27, 2024, the Australian Parliament passed the Online Safety Amendment (Social Media Minimum Age) Act 2024. The Act amends the Online Safety Act 2021 and introduces a minimum age requirement of 16 years for social media account holders in Australia. Click here.
– The Office of the Privacy Commissioner of Canada (OPC) launched in October 2025 the Youth Council, a space for young people to share their insights, experiences, and ideas on privacy challenges. Click here.
– In March 2025, Singapore adopted a Code requiring designated app distribution services to implement system-level measures to reduce exposure to harmful online content, with particular protection for children. The Code takes effect on 31 March 2025. Click here.
– Effective on January 1, 2025, Florida’s Social Media Safety Act requires social media companies to verify the age of users and terminate accounts for children under 14 years old. Click here.
– Effective January 1, 2025, the Tennessee Protecting Children from Social Media Act requires that social media companies verify express parental consent for users under 18. Click here.
International case laws
– US Federal Court Approves Order Requiring Disney to Pay $10 Million to Settle Federal Trade Commission Allegations the Firm Enabled the Unlawful Collection of Children’s Personal Data. Click here.
Articles, commentaries, reports and blogposts
– The CDT launched on November 19, 2025, a report that examines the gap between child safety policy proposals for social media and how teens and parents experience and view them. Click here.