The teen social-media age laws of 2026: what Australia, the UK, EU, US and India are doing to teen accounts, in plain English

On the first of December 2025, Australia's Online Safety Amendment (Social Media Minimum Age) Act 2024 came into force. Across the country, teenagers under the age of 16 who had Instagram, TikTok, Snapchat, Facebook or X accounts began receiving notifications that their accounts would be deactivated. Parents who had been having the "no social media yet" conversation with their 13-year-olds for years suddenly had the law doing the enforcement work for them. Within a week, Reddit was full of Australian parents comparing notes on which workarounds their children had tried, which the platforms had caught, and which they had not. The honest story of what a legal cutoff changes, and what it does not, was being written in real time.

Ten months later, Australia's example has shaped the regulatory conversation across every major English-speaking and Indian jurisdiction. The UK's Online Safety Act Phase 2 came into force in July 2025 with "highly effective age assurance" requirements. The European Commission has pushed Digital Services Act age-verification rulings through 2025 and 2026. More than a dozen US states have passed their own teen social-media laws, with legal challenges and First-Amendment-shaped carve-outs still working through the courts. India's Draft Digital Personal Data Protection Rules, notified in January 2025, route teen consent through the DPDP Act's parental-consent framework rather than through a direct ban.

This piece is the plain-English read of what the 2026 regulatory map actually says, jurisdiction by jurisdiction, what it does and does not change at home, and the home-side work that stays the parent's job regardless of which regime applies to your family.

Australia, the first direct under-16 account ban, now in force

• Legal instrument: Online Safety Amendment (Social Media Minimum Age) Act 2024. Signed November 2024; in force December 2025.
• What it does: places a direct legal obligation on specified social-media platforms (Instagram, TikTok, Snapchat, Facebook, X, YouTube, Reddit and others under the designated-platforms list) to prevent anyone under 16 from holding an account. Age-assurance technology is the platform's responsibility; parents are not required to verify their child's age themselves.
• Penalties: up to AUD 49.5 million per systemic failure. The e-Safety Commissioner has published enforcement guidance distinguishing systemic failures from individual accounts that slip through.
• Early enforcement reality: through 2026, platforms have been running age-estimation technology (behavioural signals, facial-age-estimation on self-provided photos, parental-verification flows) on existing accounts. By October 2026 the e-Safety Commissioner has reported account-removal numbers in the hundreds of thousands, with workarounds (VPNs, borrowed devices, lying about age with no verification) being the main gap.
• What it does not do: stop a 14-year-old from using an older sibling's logged-in account, from signing up with a fake birth year on a less-strictly-verified smaller platform, or from reading social media as a logged-out viewer.

United Kingdom, age assurance, not an age ban

• Legal instrument: Online Safety Act 2023, with Ofcom's Phase 1 (illegal content) in force March 2025 and Phase 2 (child-protection codes) in force July 2025.
• What it does: requires any service accessible from the UK that is likely to be accessed by children to apply age-appropriate protections, which in practice requires "highly effective age assurance" to establish who the child users are. The Act does not set a minimum age; it sets a duty of care that scales with how the service is used by children.
• Penalties: up to the greater of GBP 18 million or 10 percent of global annual turnover.
• Early enforcement reality: Ofcom spent 2025 and 2026 publishing guidance on what "highly effective age assurance" means in practice (facial age estimation, credit-card checks, digital identity, open-banking verification). Platforms have rolled out age-assurance workflows during 2026, with the pace varying by platform and the proportion of UK users affected.
• What it does not do: prevent an account from being created; it changes what the platform shows and allows once a child is identified.

European Union. DSA plus national variances

• Legal instrument: Digital Services Act in force February 2024 for Very Large Online Platforms. Individual member states (France, Spain, the Netherlands, parts of Germany) have added national teen-account rules on top.
• What it does: the DSA requires VLOPs to assess and mitigate systemic risks to minors, including through age-appropriate design and the ability for users to decline personalisation. The European Commission has issued specific DSA rulings on age-verification obligations for several large platforms through 2025 and 2026. France's January 2024 law requires parental consent for under-15 social-media accounts; the Netherlands has introduced similar rules.
• Penalties: up to 6 percent of global annual turnover under the DSA, in addition to member-state-specific fines.
• Early enforcement reality: fragmented but moving in one direction. By October 2026 the European Commission is reported to be considering a bloc-wide approach to teen-social-media age, modelled partly on the Australian precedent. No single EU-wide minimum age exists yet.
• What it does not do: harmonise. A family in Paris, a family in Berlin and a family in Warsaw face materially different rules in October 2026, and the ground is shifting.

United States, a state-level patchwork, no federal law

• Legal instrument: no federal law. State-level: Utah SB 194 (parental consent for under-18), Florida HB 3 (banning under-14 accounts), Texas SB 12, Louisiana, Mississippi, Georgia, Virginia, Minnesota, Ohio and several more by October 2026.
• What it does: varies widely. Some states require parental consent for teen accounts; some ban certain age groups outright; some impose design-code requirements on platforms. Many have faced NetChoice-style First-Amendment challenges, with some provisions enjoined or struck down.
• Penalties: state-specific, typically in the millions-of-dollars range.
• Early enforcement reality: patchy. Several state laws have been partially enjoined by federal courts on First Amendment grounds; others are in force but under-enforced. By October 2026 a federal bill is in play but has not passed; the Supreme Court has heard arguments on several of the state cases.
• What it does not do: provide a single national answer. A family moving from California to Texas sees a different regime; a 14-year-old in Florida and a 14-year-old in Vermont face different legal environments.

India, parental consent through the DPDP Act

• Legal instrument: Digital Personal Data Protection Act 2023, with Draft DPDP Rules notified January 2025 for consultation. Separately, IT Rules 2021 amendments through 2025 and 2026 touch on platform obligations for children.
• What it does: the DPDP Act requires verifiable parental consent before processing personal data of a child (defined as under 18). Platforms must therefore age-gate account creation and route teen signups through parental consent. The Act is not an age ban; it is a consent framework.
• Penalties: up to INR 250 crore for certain categories of breach, with graduated enforcement expected.
• Early enforcement reality: rules in draft, enforcement rolling out through 2026 as the Data Protection Board of India is constituted. By October 2026 platforms are reported to be building Indian consent flows, with uneven coverage across the top social-media services.
• What it does not do: ban teen accounts. A 14-year-old in Mumbai, with their parent's consent, can lawfully hold a social-media account; it is the processing of their data without that consent that the law restricts.

Five jurisdictions, five legal instruments, one shared direction of travel. The law sets the floor; home enforcement is the ceiling.

What the laws actually do, across all five jurisdictions

• Shift legal liability. Before 2025, the responsibility for a child encountering harm on a platform was effectively on the user (or the parent). The 2025-2026 wave of laws shifts a meaningful share of that liability to the platform.
• Force age-assurance technology into the mainstream. Age-estimation, parental-consent, and identity-verification flows now exist on major platforms where they did not two years ago.
• Create penalty frameworks real enough to drive change. The combination of up-to-AUD 49.5 million (Australia), 10 percent of global turnover (UK), 6 percent of global turnover (EU DSA) and INR 250 crore (India) has moved the needle on platform behaviour in ways parental complaints could not.
• Normalise the family conversation. "Everyone else has it" becomes a weaker argument when the law has moved too. The social norm shifts, which is a legitimate second-order outcome.

What the laws do not do

• Stop workarounds. A determined 14-year-old can use a VPN, borrow an older account, lie about age on a less-strictly-verified smaller platform, or read social media without an account. The bypasses piece covers the pattern.
• Reach every platform. Laws target the largest designated services. Smaller apps, newer apps, apps outside the jurisdiction's reach escape the direct effect.
• Change the home environment. Phones in bedrooms overnight, mealtimes without screens, the honest conversation about why, none of this is in any statute. All of it is still the parent's job.
• Make the law stable. Rules are being updated; cases are moving through courts; new jurisdictions are coming online. The map in October 2026 will not be the map in October 2027.

What this changes for the family conversation

The most under-discussed effect of the 2025-2026 law wave is on the conversation parents have with children about social-media access. Pre-2025 the conversation was often shaped as "I'm saying no", an individual parent's choice, open to the "but everyone else has it" counter. Post-2025 the conversation shifts to "the law says not yet", which is a different kind of statement for a child to hear.

Three practical implications at home:

• Lead with the regime that applies to you. If you are in Australia, the under-16 account ban is just how the world works. If you are in the UK, age assurance is what applies. In India, parental consent is the frame. Explain the regime your family is actually under; it carries more weight than invoking a different country's rules.
• Keep the home-side work going. The phone-free dinner, the overnight bedroom-charger rule, the honest conversation about why you set the controls you set, none of this changes. The law covers the account; the home covers the device and the attention economy.
• Expect workarounds; respond calmly. Our signs-parental-controls-are-not-working piece is the diagnostic for home-side bypasses. If your child finds a workaround to the legal cutoff, treat it as a signal to have the conversation, not as grounds for punishment.

How SafeAnywhere fits the 2026 regulatory landscape

• Device-level enforcement of the legal cutoff. If your jurisdiction has an under-16 account rule, SafeAnywhere routines can keep category-level caps on social media apps regardless of account status, so the home enforcement does not depend on the platform's age-assurance alone.
• DM lockdowns on consumer apps. The piece most laws do not reach is the direct-message surface, which is where modern harm lives. SafeAnywhere locks DMs to known contacts by default across the major apps.
• Routines that mirror the legal regime. If your child is above the legal age but you want a slower on-ramp, routines let you grant access on weekends, cap time-of-day, and tune by category.
• Alerts by risk, not by activity. You see safety-relevant events, not routine use; your weekly diagnostic can confirm the controls are actually working.
• Dignity-preserving by default. Guard never reads private messages, chats, keystrokes or photos, regardless of what the law allows.

Common questions parents ask

Do these laws apply when my child uses my phone?

Legally the account on your phone is yours; the law regulating teen accounts is about accounts in the teen's name. In practice, a child using a parent's account defeats the policy intent, and most platforms' terms of service treat shared accounts as a violation. The home-side rule is more useful than the legal one here.

What if we travel between jurisdictions?

Most of these laws apply based on where the user is located and where the platform operates. An Australian under-16 travelling to Paris would still face the Australian ban on their Australian-registered account. A US child in a state with a ban visiting a state without one would still face the account restrictions set up at home. In practice the home-level setup travels; the national law does not switch off.

How do the age-verification technologies actually work?

Several approaches. Facial age estimation uses a selfie and a model to estimate age (reasonably accurate for 13-vs-16 bands, less so around edges). Parental-verification flows ask a parent to confirm via credit-card or digital-identity. Document-based verification uses ID. Open-banking checks use age-of-account signals. Each has trade-offs between accuracy, privacy and friction.

If the law bans teen accounts, do I still need parental controls?

Yes, more than ever. The legal cutoff addresses one surface (account creation on named platforms); it does not address device-level attention management, DM safety on messaging apps, in-app browsers, or any of the home-environment work. Think of the law as a baseline, not a replacement.

What should I tell my child about why their account was deactivated (Australia specifically)?

Tell them honestly. "The law says you cannot have an account on these platforms until you are 16, and the platforms are now required to enforce that. This is not my decision; it is the law. When you turn 16, we will have a conversation about what makes sense for you then, and the home-side rules will still apply then too." Avoid treating the law as cover for your own frustrations; it is cleaner to acknowledge it is a policy decision made by adults who are not the parent in the room.

Will my country adopt an Australian-style ban?

Nobody knows. By October 2026 the UK and EU are considering elements of the Australian model; some US states are moving in that direction; others are facing First Amendment pushback. The regulatory landscape in 2027 will differ from today's; a family that has already set up the home-side scaffolding is well-placed for whichever direction their jurisdiction moves.

The honest bottom line

Five jurisdictions, five different legal instruments, one shared direction of travel. The 2025-2026 wave of teen social-media regulation genuinely changes the ground under the family conversation about social-media access. It does not replace the home-side work. The parent's job is still to set the home environment, keep the no-trouble promise alive, protect the sleep and the mealtime windows, and talk honestly about why. The law is doing some of the lifting now; it is not doing all of it.

The law sets the floor. Home enforcement is the ceiling. The parent fills the gap between.