Age Verification on Social Media: The Global Regulatory Landscape in 2026

Fifteen countries have already passed or enacted age verification laws for social media, while another twenty are advancing similar legislation. The mechanisms vary—from outright bans and parental consent requirements to document-based age verification—but the direction is consistent: where these laws exist, self-declared age is no longer considered sufficient for access to certain digital services.

For banks and digital identity platforms, this signals that age assurance has become a cross-sector compliance layer rather than a social media issue alone. According to Goode Intelligence, the market is expected to exceed 9.8 billion age verification transactions annually by 2028, with AI chatbots emerging as the next regulatory frontier and increasingly subject to the same requirements as social media platforms.

Just a year ago, only a handful of governments were debating how online age verification should work. Today, the issue has become mainstream. After Australia introduced the world’s first nationwide social media ban for minors in December 2025, the number of countries adopting dedicated legislation has grown rapidly.

There is no single regulatory model.

Some countries simply prohibit social media accounts below a certain age. Others require parental or legal guardian consent without imposing a complete ban. Others are building broader digital infrastructure, such as the anonymous age verification application being developed by the European Commission. A fourth front is now emerging: AI chatbots, which are beginning to fall under the same regulatory frameworks as social media platforms.

This article brings the global picture together, distinguishing between measures that are already in force, those with confirmed implementation dates, and proposals that remain legislative commitments rather than enacted law.

1. Laws in Force and Their Implementation Dates

Four countries already have age verification laws in force:

France, the First EU Member State to Legislate Age Verification

France is the first EU country to ban social media for users under the age of 15. Parliament approved the law on 21 July 2026, and this time there is no parental consent exception: no one under 15 can access social media, even with a parent or legal guardian’s authorization.

The law will take effect in two stages. From 1 September 2026, no new social media accounts may be created for users under 15. From 1 January 2027, all existing accounts belonging to users under that age must either be age-verified or deactivated. Platforms will be required to offer at least two age verification methods: identity document verification through a trusted third party, or selfie-based age estimation, without retaining the user’s full identity data.

2. Countries with Advanced Legislation Pending

Outside France, a much larger group of countries is moving in the same direction, although they are not all at the same stage. Some already have a bill before parliament, while others have announced plans but have yet to introduce legislation. For clarity, this article groups them by region rather than legislative status, indicating in each case whether the measure is a formal bill or a government announcement.

What most of them have in common is the same underlying approach: setting the minimum age threshold between 13 and 16 years old and requiring an age verification mechanism that replaces self-declared age.

Canada and the United Kingdom: Different Approaches, Same Regulatory Direction

Canada does not have a single legislative proposal on age verification—it has two. The most significant is Bill C-34, the Safe Social Media Act, introduced on 10 June 2026. It goes beyond social media and is one of the first bills in the world to include AI chatbots within the same regulatory framework, subjecting them to the same age-appropriate design obligations. So far, only Australia and the United Kingdom have begun moving in a similar direction. The second proposal, Bill S-209, focuses exclusively on commercial pornographic content and has received public backing from Canada’s Privacy Commissioner. It has already passed the Senate and is currently at second reading in the House of Commons.

The United Kingdom, by contrast, does not yet have a dedicated social media law—only a government announcement, which would also extend future restrictions to AI companion chatbots. However, since July 2025, the country has already enforced meaningful age assurance requirements under the Online Safety Act. Adult content, dating services, and other harmful online services must implement effective age verification measures under the supervision of Ofcom. The results are already measurable: more than 69 million age checks were carried out between July and December 2025, with penalties of up to £18 million or 10% of global annual turnover for non-compliance. It is the largest enforcement dataset in this entire regulatory landscape, making it a key reference point for Europe as it develops its own age verification framework.

Asia: No Age Verification Laws Yet, but Momentum Is Building

Outside Indonesia, Malaysia, and Turkey, the rest of Asia is moving in the same direction, although no age verification legislation has yet been enacted, according to the 2026 Age Assurance & Digital Age Credentials Market Report by Biometric Update and Goode Intelligence.

• Singapore has required age verification at the app store level since April 2025 and is considering extending the requirement directly to platforms.

• The Philippines already requires age verification for restricted products such as nicotine through its national digital identity system, PhilSys, and is evaluating whether to extend the requirement to social media.

• Japan is exploring a platform risk-classification framework in collaboration with mobile network operators.

• Thailand, Vietnam, and Nepal have all raised the possibility of introducing mandatory identity or age verification, although none has yet enacted legislation. Meanwhile, Malaysia, in addition to the measures covered in Section 1, is also considering banning smartphones for children under the age of 16.

The UAE and the Middle East’s Most Comprehensive Regulatory Framework

The United Arab Emirates has one of the world’s most comprehensive age verification frameworks. Federal Decree-Law No. 26 of 2025 entered into force on 1 January 2026 and will become fully enforceable from January 2027.

Unlike the European or North American approach, which typically relies on a single minimum age threshold, the UAE framework ties the level of age verification to the platform’s risk profile. A subsequent regulation also established 15 years old as the minimum age for holding a personal social media account. The rules apply to any platform serving users in the UAE, regardless of whether the company has a physical presence in the country. What matters is where the user is located, not where the company is based.

United States: A Fragmented Regulatory Landscape Without a Federal Law

The United States does not have a federal age verification law for social media. Instead, the regulatory landscape is fragmented at the state level and remains focused primarily on adult content.

The key turning point was the U.S. Supreme Court’s decision in Free Speech Coalition v. Paxton on 27 June 2025, which upheld Texas’s authority to require age verification for adult content. Although the ruling does not address social media directly, it has become the legal foundation for subsequent state legislation. Today, around 25 states have either enacted or introduced age verification laws, with most located outside the West Coast and New England. At the federal level, the SCREEN Act remains in committee and has not yet been scheduled for a vote.

For platforms operating in the United States, there is still no single compliance standard. Instead, they face a patchwork of evolving state-level requirements.

Latin America: The Next Region to Watch

As discussed earlier, Brazil is currently the only country in the region with an age verification law in force. However, the rest of Latin America is moving faster than it may appear, even though no other country has yet enacted nationwide legislation.

• Colombia introduced an age verification bill on 22 July 2026.

• Chile has had a bill under committee review since May 2026, proposing a complete ban on social media access for minors below the age threshold, with no parental consent exception.

• Argentina has proposed banning social media accounts for children under 13, while requiring parental or legal guardian authorization for users aged 14 to 16.

• Mexico does not yet have a federal law. President Claudia Sheinbaum’s proposal could reach congressional committees between September and December 2026. In the meantime, however, regulation is already emerging at the state level, with Mexico City, State of Mexico, Nuevo León, and Querétaro each developing their own rules in the absence of a common national standard.

Africa: Momentum Is Building Across Seven Countries

According to the 2026 Age Assurance & Digital Age Credentials Market Report by Biometric Update and Goode Intelligence, at least seven African countries have already implemented, drafted, or launched consultations on age verification measures.

• Kenya has the region’s most developed framework, although it is not a general law. The Industry Guidelines for Child Online Protection and Safety, issued by the Communications Authority of Kenya in April 2025 and effective since 29 October 2025, require ICT service providers to implement age verification. No public enforcement data or sanctions have yet been reported.

• Gabon adopted Ordinance No. 0011/PR/2026 in February 2026, establishing 16 as the country’s digital age of majority and giving platforms 12 months to implement age verification, with full compliance expected by April 2027.

The remaining countries are progressing more gradually. Nigeria has a bill awaiting consideration in the Senate following a national consultation held in March 2026. Rwanda is drafting its own legislation, although no implementation timeline has been announced. Zimbabwe approved a 2026–2030 National Policy that does not yet impose direct obligations on platforms, while Ghana joined the list of countries considering age verification measures in June 2026.

South Africa, by contrast, has chosen a different approach, prioritizing the strengthening of its existing data protection framework rather than introducing a broad social media ban.

3. The EU’s Age Verification App

While individual countries continue to legislate independently, the European Commission is developing an infrastructure that could become a common age verification layer across the European Union: a free application that proves a user is above a required age threshold without revealing their identity, identity document, or date of birth. It is a pure example of reusable digital identity: age is verified once, and that credential can then be reused across multiple platforms.

Development is already well underway. The Commission published the first technical blueprint in July 2025, followed by a second version in October 2025 with support for passports and national identity cards. In April 2026, Ursula von der Leyen announced that the application was ready, comparing it to the EU Digital COVID Certificate and urging Member States to deploy it before the end of the year.

The application is often referred to as a “mini-wallet” because it shares technical specifications with the European Digital Identity Wallet, which all 27 EU Member States are required to make available to their citizens before the end of 2026. Technical development was awarded by the European Commission in early 2025 to the T-Scy consortium, formed by Scytales (Sweden) and T-Systems (Germany), under a two-year contract.

4. AI Chatbots: The Fourth Category Now Being Regulated Like Social Media

A series of self-harm incidents linked to intensive chatbot use by minors has prompted several regulators to treat AI chatbots as another category of age-restricted digital service, according to the 2026 Age Assurance & Digital Age Credentials Market Report by Biometric Update and Goode Intelligence.

Canada provides the clearest example. Bill C-34 explicitly includes “chatbot services” alongside social media platforms, subjecting them to the same age-appropriate design obligations. The United Kingdom has pledged to ban AI companion chatbots for users under 18, while both Australia and the UK have expanded existing legislation to cover chatbots rather than drafting entirely new laws.

The report also notes, without further commentary, that Anthropic (Claude) and OpenAI (ChatGPT) have begun implementing age verification proactively, before any legal requirement to do so.

5. How Age Verification Works in Practice

With 15 regulatory frameworks already in force or enacted and another 20 advancing through the legislative process, the four age verification methods currently in use can be grouped according to ISO/IEC 27566-1:2025—the first international standard dedicated to age assurance, published in December 2025:

The choice is not purely technical—it is a matter of proportionality. A bank or an online gambling platform requires a much higher level of identity and age verification than a streaming service because the legal and regulatory exposure is significantly greater. This is the same risk-based principle that underpins, with different implementations, both the EU Digital Services Act and Ofcom’s regulatory framework.

6. What This Means for Platforms Operating Across Multiple Countries

The verification mechanism varies from one market to another, but the conclusion is the same across all 15 countries with age verification laws already in force or enacted: self-declared age is no longer considered sufficient. The market itself reflects that shift. According to Goode Intelligence, global age verification transactions are projected to grow from 6.568 billion in 2026 to 9.837 billion by 2028, while market revenue is expected to increase from USD 4.926 billion to USD 7.378 billion. Age verification is no longer a niche regulatory requirement.

For banks and digital identity platforms operating across multiple jurisdictions, this is fundamentally an architectural challenge, not just a compliance one. Within the next 12 to 24 months, organizations will need to support zero-knowledge proofs (EU), document-based verification (Malaysia, Brazil, and soon France), and risk-based verification frameworks (UAE) simultaneously.

The real challenge is whether the age verification infrastructure being built today can adapt as new countries introduce their own regulations—without requiring a complete redesign each time. An age verification solution designed around those same principles of proportionality, rather than for a single market, avoids the need for constant redevelopment.