In a landmark enforcement action under the Digital Services Act (DSA), the European Commission officially charged Meta Platforms on April 29, 2026, with failing to adequately protect minors on Facebook and Instagram. Following a rigorous two-year investigation, EU regulators concluded that the social media giant has not done enough to prevent children under the age of 13 from accessing its platforms, exposing a significant gap between the company’s written policies and its actual technical enforcement. The charges signal a new era of “concrete action” where Big Tech’s terms of service are no longer viewed as mere suggestions, but as legally binding commitments to public safety.
The core of the Commission’s preliminary findings focuses on the ease with which underage children bypass Meta’s age-gating mechanisms. Despite Meta’s internal rules requiring users to be at least 13, regulators found that the “self-declaration” model where a user simply types in a birth date is fundamentally flawed.
According to the EU tech enforcer, Meta’s measures to identify and remove children who lie about their age are “inadequate.” Internal data and independent research cited by the Commission suggest that roughly 10% to 12% of children under 13 in Europe are currently active on Facebook and Instagram. The EU argues that Meta’s failure to implement robust age-estimation or verification technology has turned its platforms into an unauthorized digital playground for millions of vulnerable minors.
Clunky Reporting and Ineffective Follow-Ups
A major point of contention in the charges is the “user-unfriendly” design of Meta’s internal reporting tools. Regulators pointed out that reporting an underage account is an unnecessarily complex process, often requiring up to seven clicks to reach the correct form.
More damningly, the Commission alleged that even when a minor is successfully reported, there is often “no serious follow-up.” In many documented cases, reported accounts remained active without any additional age checks, allowing the minor to continue using the service uninterrupted. This lack of responsiveness, according to EU tech chief Henna Virkkunen, proves that Meta’s safety measures are “more about optics than impact.”
The “Rabbit Hole” and Mental Well-being
While the current charges focus on age access, they are part of a broader probe into the psychological impact of Meta’s interface design. The Commission is specifically investigating:
-
Addictive Loops: Features like “infinite scroll” and “auto-play” that exploit the underdeveloped impulse control of young users.
-
Recommendation Algorithms: The “rabbit hole” effect where AI-driven suggestions lead children toward age-inappropriate or harmful content.
-
Risk Assessment Failures: Regulators claim Meta’s internal risk reports were “incomplete and arbitrary,” failing to acknowledge the scientific evidence regarding the vulnerability of younger children to social media harms.
In response to the charges, Meta has maintained that it has built over 50 tools and features to protect teenagers and that understanding age is a “universal industry challenge.” The company argues that age verification should be handled at the app store or operating system level (by Apple or Google) rather than by individual apps.
However, the EU has rejected this “buck-passing” approach. Commissioner Virkkunen was clear: “Terms and conditions should not be mere written statements, but rather the basis for concrete action.” The Commission’s stance is that if a company profits from a platform, it bears the sole responsibility for policing its own digital borders.
The 6% Financial Sword of Damocles
The financial stakes for Meta are unprecedented. Under the Digital Services Act, if the preliminary findings are confirmed in a final decision, the European Commission has the power to impose fines of up to 6% of Meta’s global annual turnover. Given Meta’s 2025 revenues, this could result in a penalty exceeding $8 billion.
Beyond the fine, the Commission can also impose “periodic penalty payments” until Meta proves it has implemented effective age-assurance technologies that are “accurate, reliable, and non-intrusive.”
The charges against Meta are being watched closely by regulators in the United States, Australia, and the UK, all of whom are grappling with similar youth safety crises. By moving from “investigation” to “formal charges,” the EU has set the global benchmark for how a modern state can hold a digital superpower accountable.
As Meta prepares its legal response, the message to the tech industry is unambiguous: the era of “self-regulation” regarding child safety is over. Governments are no longer asking platforms to protect children; they are now using the full force of the law to ensure they do. The outcome of this case will likely redefine the digital childhood of the next generation, forcing a shift from engagement-first design to safety-first architecture.
