Table of Contents
Meta is facing a massive regulatory reckoning after the European Commission ruled the tech giant is failing to keep children under 13 off Facebook and Instagram. Following a nearly two-year investigation, preliminary findings reveal that minors can easily bypass age restrictions using fake birth dates, putting the company in direct violation of the Digital Services Act (DSA).
For parents, educators, and digital privacy advocates, this ruling validates long-standing concerns about child safety on social media. If the company fails to overhaul its age verification systems, it could face unprecedented financial penalties while fundamentally altering how young users interact with its platforms across Europe.
The European Commission's investigation found that Meta lacks adequate measures to identify and remove underage users. According to the EU, reporting tools for underage accounts are difficult to use, and even when a child is reported, the platform often fails to take action. EU tech policy leader Henna Virkkunen stated that while Meta's terms prohibit users under 13, the platforms are doing very little to enforce this rule.
Regulators described Meta's internal risk assessment as incomplete and arbitrary, noting it contradicts evidence showing that 10 to 12 percent of children under 13 in the EU are actively using Facebook or Instagram. Furthermore, a parallel investigation is still ongoing regarding concerns that these platforms may cause behavioral addictions in children.
The financial stakes are staggering. If Meta is hit with a formal non-compliance ruling, it risks fines of up to six percent of its global annual turnover. Based on the company's reported revenue of $201 billion for 2025, the penalty could reach a historic $12 billion. In a statement to The Guardian, Meta disagreed with the preliminary findings, claiming it continues to invest in technologies to find underage users and will announce additional measures next week.
The Inevitable Shift to Hard Age Verification
The era of the honor system for social media age gates is officially over. The European Commission's threat of a $12 billion fine highlights a critical turning point: simply asking users to type in a birth date is no longer legally defensible under the DSA. Meta's upcoming announcement next week will likely signal a pivot toward more aggressive, automated age-detection technologies.
However, this creates a complex privacy paradox. To definitively prove users are over 13, platforms may be forced to implement biometric scanning, device-level age checks, or government ID verification. While this satisfies EU regulators demanding child protection, it simultaneously forces millions of adult users to hand over highly sensitive personal data just to scroll through Instagram.
