France Just Banned Social Media for Under-15s — Here’s Why the Privacy Cost Is Bigger Than the Ban

France becomes the first EU country to ban social media for under-15s. But the real story is the age verification systems that will force everyone to hand over more personal data. Here’s what it means for privacy in 2026.

France has just become the first country in the European Union to ban social media for anyone under 15.

The law, approved in July 2026, will start blocking new accounts from 1 September 2026. From 1 January 2027, every existing account in France will also require age verification. That means everyone in the country — not just teenagers — will eventually have to prove they are 15 or older to use Instagram, TikTok, Snapchat and similar platforms.

On the surface, this looks like a child-protection win. Australia already did something similar. The UK and other countries are watching closely. But the privacy angle is far more important than most headlines are admitting.

The ban isn’t the problem. The enforcement is.

To enforce an under-15 ban, platforms cannot simply ask users to tick a box that says “I am 15+”. That has never worked. So France is requiring age verification systems approved by the national privacy regulator.

These systems typically rely on one or more of the following:

• Uploading a government ID (passport or national identity card)
• Biometric face scans
• Behavioural profiling and device signals

This is where the real risk begins.

France’s law effectively forces this data collection at national scale. The platforms are not being forced to redesign their addictive recommendation engines or stop harvesting behavioural data. Instead, they are being forced to collect more identity data so they can claim compliance.

As one privacy analysis put it: the ban protects the platforms more than it protects the children.

Why this matters beyond France

Age verification is spreading. Once a major European country normalises the idea that you must prove your identity with official documents just to use social media, other governments find it easier to follow. The UK is already moving in a similar direction. The more countries adopt these systems, the harder it becomes to use the internet without a permanent digital identity trail.

This is not theoretical. When identity documents are required for routine online access, the risk of large-scale leaks, misuse by platforms, or government access increases dramatically.

What you can actually do about it

You cannot stop France’s law. But you can reduce how much of your identity and browsing data is exposed in the first place.

The bigger picture in 2026

We are watching two trends collide:

• Governments trying to restrict what young people can access online
• Platforms and states collecting more identity data to enforce those restrictions

Protecting children is important. But creating a system where every adult must hand over government ID or biometric data just to open Instagram is a high price. History shows that once the infrastructure for mass identity verification exists, it rarely stays limited to its original purpose.

The smart response is not to ignore the problem. It is to minimise the data you expose in the first place — starting with your email, your files, and your internet connection.