Social media limits are coming for teens across Europe

Europe has stopped asking nicely. The European Commission is drafting legislation that would make social media companies demonstrate their products are not harmful before a single teenager signs up. That is a fundamentally different regime from age verification or parental consent. It inverts the burden of proof. Platforms have spent a decade treating children as a growth market. Now the bloc's executive arm is signaling that access to that market will require a safety certificate — not a terms-of-service checkbox.

Ursula von der Leyen framed the shift in language that sounded deliberate: "This is not about whether children can access social media. It is about when social media can access our children." The line was crafted for headlines, but the policy machinery behind it is grinding forward. A panel of experts delivered recommendations this week that read like a escalator — no screens under three, supervised use under thirteen, gradual autonomy for older teens. Those specifics will not survive the legislative meat grinder intact. They serve a political purpose: they make the final law look like compromise.

The substantive lever is the safety-by-design mandate. The Commission has already opened formal proceedings against Meta and TikTok under the Digital Services Act, finding both in breach over addictive design. Those findings were preliminary. Under the proposed regime, they would become the basis for denying access to entire age cohorts. A platform that cannot prove its recommendation engine does not exploit developmental vulnerabilities would lose the European youth market entirely. That is an existential threat to business models built on engagement maximization.

Meta and TikTok will not wait for the law to pass. They are already deploying "teen accounts" and "family centers" — product changes announced in press releases, not submitted for audit. The industry playbook is familiar: voluntary gestures to forestall mandatory standards. The EU has seen this before with data protection and content moderation. The Digital Services Act was supposed to end the era of self-regulation. The new proposal would extend that logic to the core product architecture, not just the content flowing through it.

The timeline is deceptive. Von der Leyen said the Commission would return with proposals "after the summer." That sounds fast. In Brussels, it means a draft lands in autumn, then enters the ordinary legislative procedure — months of committee work, trilogue negotiations, Parliament votes, Council approval. The earliest enforceable date is 2026. Lobbyists have a calendar full of opportunities to water down definitions, carve out exemptions, and redefine "harm" until the obligation is unenforceable.

Member states will not move in lockstep. France has already banned phones in schools. Italy has floated its own age limits. Spain is drafting a child protection law that overlaps. The Commission wants a single regulation to prevent fragmentation. But 27 capitals have 27 reasons to claim national specificity. The Parliament, meanwhile, will push for stronger language to satisfy its voters. The final text will be a negotiation, not a manifesto.

The expert panel's age thresholds are the easiest target. No legislator will write "no screens under three" into binding law — enforcement would be absurd, and the anecdotal value is low. The real battle is over the definition of "addictive design." The DSA findings against Meta and TikTok cited infinite scroll, autoplay, and notification loops. Those features are not bugs. They are the product. Requiring platforms to redesign them for minors effectively means maintaining two codebases: one optimized for engagement, one neutered for compliance. The cost is massive. The incentive to shrink the minor user base instead is obvious.

Civil society groups will push for a "safety by default" standard that applies to all users, not just children. Industry will argue that age-gating the safe version is technically cleaner. The Commission will likely split the difference: a baseline safety floor for everyone, with additional restrictions for verified minors. That outcome protects the industry's adult revenue while creating a compliance moat around the youth segment.

The global ripple is already visible. The UK's Online Safety Act is in force. Australia is debating a social media ban for under-16s. US states are passing age verification laws that courts keep blocking on First Amendment grounds. Europe's approach — product safety certification — sidesteps the speech issue entirely. It regulates the machine, not the message. That model may become the international template because it survives constitutional scrutiny where content-based rules fail.

But a template is not a law. The distance between von der Leyen's podium and a binding regulation is measured in lobbying hours, not months. The platforms have the resources to litigate every definition, challenge every methodology, and delay every deadline. They have done it before. The Commission knows this. The question is whether the political will survives the attrition. The expert report gave von der Leyen a shield. She still needs a sword.

Teenagers are not waiting. They migrate across platforms faster than regulators can name them. The "phased access" model assumes a stable service landscape. That assumption is already false. The real regulatory target is not the app a 14-year-old opens today. It is the infrastructure that decides what that 14-year-old sees tomorrow. The EU has finally aimed at the right layer. Whether it can hit it remains the only story that matters.