New government regulations require platforms to verify user age for new accounts by 2027 to restrict access for those under 16.
The United Kingdom government intends to prohibit individuals under the age of 16 from accessing social media platforms, with new regulatory requirements scheduled to take effect in the spring of 2027. Prime Minister Keir Starmer announced the policy on June 15, following a national consultation process that gathered input from over 116,000 participants.
Platforms will be required to implement age-verification mechanisms to enforce the ban, which removes the option for anonymous account creation for new users in the UK. While existing accounts remain largely exempt, the new rules mandate that any individual opening a fresh account must prove they meet the age threshold through government-issued identification or facial-age scanning technology.
The policy specifically targets platforms designed for social interaction that utilize algorithmic feeds, including major services like Instagram, TikTok, X, and Facebook. Messaging applications such as WhatsApp and Signal are excluded from these requirements, as are dedicated educational services and music streaming platforms.
Technology Secretary Liz Kendall framed the initiative as a necessary intervention to address the failure of technology companies to protect younger users. The government plans to introduce additional restrictions on high-risk features, such as livestreaming and stranger contact, which will be enabled by default for users aged 16 and 17 to prevent a sudden shift in safety protocols upon reaching the age of majority.
The regulatory framework also addresses emerging technologies, requiring AI-powered romantic companion chatbots to enforce an 18-plus age minimum. The government is currently evaluating further measures, including potential overnight curfews and restrictions on infinite scrolling, with additional details expected to be released in July.
Ofcom has been tasked with conducting a rapid assessment to determine the most effective methods for verifying user age at scale. This directive follows the regulator’s recent enforcement actions under the Online Safety Act, which has already seen investigations opened into more than 90 platforms regarding age-gating compliance.
The government’s reliance on these verification tools assumes that platforms can accurately distinguish between age groups without compromising user privacy. However, the technical burden of verifying millions of users creates a complex logistical challenge that may lead to inconsistent enforcement across different service providers.
Cybersecurity experts have expressed concerns regarding the efficacy and safety of the proposed verification infrastructure. Dr. Siamak Shahandashti, a senior lecturer in cyber security and privacy at the University of York, noted that empirical research suggests most current age-verification methods are susceptible to circumvention by motivated users, often serving as an administrative layer that fails to provide genuine security.
Dr. Richard Gomer, a lecturer in computer science at the University of Southampton, highlighted the systemic risks associated with the mass collection of sensitive biometric and identity data. He warned that centralizing such information creates attractive targets for malicious actors, potentially leading to identity theft or blackmail if the data is compromised in a breach.
The Open Rights Group has also criticized the policy, arguing that it prioritizes narrow fixes over addressing the underlying engagement-driven business models that incentivize harmful content. James Baker, who leads the organization’s platform power and freedom of expression programme, emphasized that forcing users to surrender personal documents to unregulated third-party verification firms introduces significant privacy vulnerabilities.
The effectiveness of the ban remains contingent on the government’s ability to address the prevalence of virtual private networks, which allow users to bypass regional restrictions. While the government has rejected a blanket ban on VPNs, ongoing discussions regarding the restriction of VPN access for children continue to generate debate within Parliament.
Future developments will depend on the specific technical standards established by Ofcom and the industry’s response to the compliance burden. Stakeholders will monitor the implementation phase closely to determine whether the policy achieves its stated safety objectives or merely shifts the risk profile of the broader online environment.
The U.S. government is committing $4.2 billion to boost nuclear capacity as data center energy consumption outpaces current grid supply.
At Global Business & Economics Journal, we contribute to the future of business and technology with news, innovative research, expert insights, and thought-provoking analysis.
