Terms and conditions should not be mere written statements
In a reckoning that touches the oldest tension between commerce and the protection of the young, the European Commission has found Meta in preliminary breach of EU law for failing to keep children under 13 off Facebook and Instagram. Nearly two years of investigation under the Digital Services Act revealed that a child may enter either platform with a false birthdate and face no meaningful check — a gap between written policy and lived reality that regulators say the law does not permit. The findings arrive as governments across Europe move independently toward broader social media bans for minors, suggesting that this moment is less an isolated legal dispute than a civilizational reckoning with what it means to build public spaces in the digital age.
- Children under 13 can register on Facebook and Instagram using a fake birthdate, with Meta performing no verification — a loophole that regulators say transforms a written rule into an empty promise.
- The European Commission's preliminary breach finding puts up to $12 billion on the line, representing 6% of Meta's $201 billion in 2025 revenue, and signals that the era of self-policing by platforms may be closing.
- Meta is pushing back, calling age verification an industry-wide challenge and insisting it has invested in tools to detect and remove underage accounts — but regulators say investment and effectiveness are not the same thing.
- The investigation is widening beyond the login screen, probing whether Meta's recommendation algorithms actively funnel young users toward harmful or extreme content in a compounding 'rabbit hole' effect.
- Across Europe, Spain, France, and the UK are each pursuing their own restrictions on minors' social media access, turning what began as a regulatory case into a continent-wide political movement.
On Wednesday, the European Commission delivered preliminary findings from a nearly two-year investigation into Meta, concluding that Facebook and Instagram have failed to enforce their own age restrictions. Under the EU's Digital Services Act, platforms are required not merely to publish rules but to act on them — and investigators found that a child can create an account with a false birthdate and face no verification whatsoever. Once inside, the system for reporting underage users is cumbersome and largely without consequence, allowing children to remain on the platforms uninterrupted.
Henna Virkkunen, the commission's lead technology official, stated plainly that the platforms are doing very little to stop under-13s from accessing their services. Meta disputes the assessment, arguing that age verification is an industry-wide problem and that it continues to invest in detection tools. The company will now have the opportunity to review the full investigation file and mount a formal defense before any final determination is made.
The financial stakes are significant. Meta reported $201 billion in revenue for 2025, meaning a maximum fine of 6% of global turnover could reach roughly $12 billion — though the preliminary nature of the findings means no outcome is yet decided.
The case sits within a broader European movement. Spain is pushing for a social media ban for those under 16, France has voted for similar restrictions, and the UK announced this week it is examining age and functionality limits for minors. The commission has described the situation as a tsunami of big tech flooding into people's homes.
The investigation also extends into deeper questions of design and mental health — specifically whether Meta's algorithmic recommendation systems create 'rabbit hole' effects that feed young users negative or extreme content. When the probe opened in 2024, Meta cited a decade of work and more than 50 protective tools. The commission's findings suggest those efforts have not met the threshold the law demands.
On Wednesday, the European Commission delivered preliminary findings from a nearly two-year investigation into Meta, concluding that the company has failed to enforce its own age restrictions on Facebook and Instagram. The investigation, which began in May 2024 under the EU's Digital Services Act, found that Meta lacks effective mechanisms to prevent children under 13 from accessing either platform—a direct violation of the company's own terms of service and European law.
The problem is straightforward in its mechanics. A child can open a Facebook or Instagram account by entering a fake birthdate, and Meta performs no verification of that claim. Once inside, the company's system for reporting underage users is cumbersome and ineffective, according to the commission's assessment. Even when such reports are filed, there is no meaningful follow-up, allowing underage users to continue using the service without interruption. Henna Virkkunen, the commission's lead official on technology policy, put it plainly: the platforms are doing very little to stop children below 13 from accessing their services. The Digital Services Act, she noted, requires platforms to enforce their own rules—not simply publish them as written statements, but act on them concretely to protect users, especially children.
Meta disputes the preliminary findings. A company spokesperson said the firm disagrees with the assessment and maintains that it has measures in place to detect and remove underage accounts. The company characterized age verification as an industry-wide challenge requiring an industry-wide solution, and said it continues to invest in technologies to find and remove younger users. Meta will now have the opportunity to examine the commission's full investigation file and mount a formal defense.
The stakes are substantial. If the commission's findings are upheld in the final determination, Meta could face a fine of up to 6 percent of its global annual turnover. The company reported revenue of $201 billion for 2025, meaning a maximum penalty could reach roughly $12 billion. The preliminary nature of the findings means the investigation is not yet concluded—the commission explicitly stated that its current assessment does not prejudge the final outcome.
This enforcement action arrives amid a broader European movement to restrict children's access to social media altogether. Spain is pushing for a ban on social media use by anyone under 16, framed as protection from the digital wild west. France has voted for similar restrictions targeting children under 15. The UK government announced this week that it is examining age or functionality restrictions on social media for children under 16. The commission itself has characterized the situation as a tsunami of big tech flooding into people's homes.
The Meta investigation extends beyond age verification. The commission is also examining whether the company is doing enough to protect the physical and mental health of young users who do gain access. Investigators are looking at potentially addictive design features, particularly the algorithmic "rabbit hole" effect, where the platform's recommendation system feeds young people negative or extreme content. When the investigation opened in 2024, Meta said it had spent a decade developing more than 50 tools and policies designed to protect young people and wanted them to have safe, age-appropriate experiences online. The commission's preliminary findings suggest those efforts have fallen short of legal requirements.
Citações Notáveis
Our preliminary findings show that Instagram and Facebook are doing very little to prevent children below this age from accessing their services.— Henna Virkkunen, European Commission lead official on tech policy
Meta disputed the findings, saying age verification is an industry-wide challenge requiring an industry-wide solution and that it continues to invest in technologies to find and remove underage users.— Meta spokesperson
A Conversa do Hearth Outra perspectiva sobre a história
So Meta says it has fifty tools to protect kids, but the commission found almost none of them work. What's the gap between what the company claims and what actually happens?
The gap is the difference between having a policy and enforcing it. Meta's terms say 13 is the minimum age. But a child can type in any birthdate and get in. There's no verification. The company built the gate, but it doesn't actually check who walks through.
And when someone reports an underage user, what happens?
According to the commission, the reporting tool itself is hard to use and doesn't work well. Even if someone reports a child, there's no real follow-up. The child stays on the platform. It's like having a complaint box that no one reads.
Meta says this is an industry-wide problem. Is that a fair point?
It's true that age verification is hard across the industry. But the Digital Services Act doesn't ask for perfection—it asks for diligent effort. The commission found Meta wasn't making that effort. Other companies might face the same findings.
What happens now? Does Meta get fined immediately?
Not yet. These are preliminary findings. Meta gets to see the evidence and defend itself. If the commission upholds the findings, then a fine up to 6 percent of revenue is possible. That's roughly $12 billion based on their 2025 earnings.
And meanwhile, governments are talking about banning social media for kids entirely. Does this investigation push that forward?
It certainly adds weight to the argument. When a regulator finds a major platform can't even enforce its own age limit, it makes the case for stronger restrictions harder to ignore.