In the EU, the argument over how far governments may go to protect minors online has become concrete. On April 29, 2026, the European Commission adopted a recommendation for EU-wide age-verification technologies and urged member states to accelerate rollout of an age-verification app. This initiative grew out of the Digital Services Act guidelines on protecting minors, published on July 14, 2025, and it is aimed first at legally age-restricted online services such as pornography, gambling, and alcohol sales. The Commission’s goal is ambitious: make robust, privacy-preserving age-verification tools available across the EU by December 31, 2026. (digital-strategy.ec.europa.eu)
At first glance, this sounds like a digital checkpoint. Yet the Commission is trying to avoid exactly that image. Its solution, which became feature-ready on April 15, 2026, is open source and designed as a “mini wallet” compatible with future EU Digital Identity Wallets. A user can prove just one fact — for example, that they are over 18 — after onboarding with a passport, national eID, banking app, or an in-person check. According to the Commission, the app stores no name and no full birth date, gives platforms only a yes-or-no age answer, and does not let different transactions be linked together. Even the original provider that helped certify the user’s age is not supposed to track later browsing. The Commission says it is already working with seven frontrunner countries, including Cyprus, Denmark, France, Greece, Ireland, Italy, and Spain. (digital-strategy.ec.europa.eu)
Still, the real issue is not technical but political. Protection can quietly become surveillance if everyone must prove their age before reading, speaking, or joining online spaces. That is why the European Data Protection Board has insisted that age assurance must be risk-based, proportionate, and the least intrusive option that still works. It also warns that such systems must not become tools for profiling, tracking, or limiting free expression and access to information. In fact, the Board explicitly says that checking the age of all users for all content would fail the tests of necessity and proportionality. So the EU app exposes the true boundary line: society may ask for proof of age, but in a free society, it should ask for as little else as possible. (edpb.europa.eu)










