The EU KIDS Act arrives with tiered age assurance for all
The EU KIDS Act proposes tiered age assurance: mini accounts at 13, full access at 15, verification across social, games, app stores, and AI chat services.
Europe just proposed the most sweeping age assurance regime ever written. On September 17, the European Commission unveiled the EU Keeping Internet Digital Spaces Accountable and Trustworthy Act, the EU KIDS Act, a tiered framework that would gate access to social media, video-sharing platforms, app stores, online video games, and AI Companions and chatbots by verified age band: child-managed video services for ages 3 to 13, parental-guardianship mini accounts for 13 to 15, and full access from 15.
The scope is the story. Every prior age regime targeted a sector, gambling, adult content, social media. The KIDS Act targets the digital environment itself, folding app stores and AI chat services into the same verification obligation as social platforms, with safety-by-design duties for any service minors use and enforcement investigations that can be fast-tracked to 90 days.
For the age assurance industry, this is the demand event of the decade. For platforms, it is a proof burden arriving on a negotiation timeline the Commission wants adopted swiftly.
How the tiers work
The framework grades access rather than gating it once. Under 13, children reach only child-appropriate video services under parental management. From 13 to 15, minors hold mini accounts on social and video platforms, created and supervised through parental guardianship. From 15, full accounts open. Each boundary is a verification event: the platform must know which band a user occupies, and the burden of proving appropriate protections sits with the service, not the regulator.
The verification method stack is deliberately staged. Initially, services may rely on the EU's age verification app, designed to confirm age bands without storing biometrics or identity documents. The destination is the EU Digital Identity Wallet, which the proposal names as the first option for online age and attribute claims, aligning the KIDS Act with the eIDAS 2.0 infrastructure arriving as member states launch wallets by the end of 2026.
The global convergence is now unmistakable
Read the KIDS Act beside this quarter's other moves and one regime emerges in pieces. Australia enforces an under-16 social media minimum with A$99 million penalties and documentation-disclosure powers. The US House bill mandates facial age checks for sportsbooks and prediction markets, with the Digital Age Assurance Act pushing OS-level signals. The UK certifies digital IDs for alcohol sales. Now the EU proposes tiered bands across the whole consumer internet, anchored to wallet-based, privacy-preserving proofs.
The common architecture underneath: age as a verified attribute, proven at the moment of access, by privacy-preserving methods, with evidence platforms must produce on demand. Businesses building to that shape once are building for every regime at once.
What platforms should build for
Three capabilities cover the proposal's demands. Band verification, not just threshold verification: distinguishing 13-to-15 from 15-plus requires either credential-based proofs, wallet attestations and the EU age app's tokens, or estimation with buffer policies tuned to two boundaries instead of one. Parental-guardianship flows: mini accounts bind a verified adult to a minor's account, a delegation problem closer to Know Your Agent than to classic KYC. And examination evidence: fast-tracked 90-day investigations reward platforms whose per-decision records are produced by the system rather than assembled under notice.
deepidv's stack maps to all three: Arc ingests wallet attestations and ZKP age proofs with per-issuer policy, facial age estimation runs on deepeye's structural liveness for the estimation path on the core platform, and every verdict carries its evidence trail. The parental-binding flows the KIDS Act sketches are delegation chains, and validating delegation is what Arc does all day.
EU KIDS Act FAQ
- What is the EU KIDS Act?
- The EU Keeping Internet Digital Spaces Accountable and Trustworthy Act, proposed by the European Commission on September 17, 2026, is a tiered age assurance framework covering social media, video platforms, app stores, online games, and AI chat services: child-managed video only under 13, parental mini accounts for 13 to 15, and full access from 15.
- Which services does the EU KIDS Act cover?
- Social media services, video-sharing platforms, app stores, online video games, and AI Companions and chatbots, a broader scope than any prior age regime, with safety-by-design requirements for services used by under-18s.
- How would age be verified under the KIDS Act?
- Initially through the EU's age verification app, which confirms age bands without storing biometrics or ID documents. The framework's stated destination is the EU Digital Identity Wallet as the first option for online age and attribute claims, aligning with eIDAS 2.0 zero-knowledge proofs.
- When would the EU KIDS Act take effect?
- It is a proposal entering European Council and Parliament negotiations, so no effective date exists yet. The Commission has asked for swift adoption, and its enforcement design allows investigations fast-tracked to 90 days, signaling an aggressive posture once enacted.
- What is a mini account under the EU KIDS Act?
- A supervised account tier for ages 13 to 15 on social media and video platforms, created through parental guardianship. It requires platforms to verify both the minor's age band and the guardian's authority, a two-sided verification most current stacks do not perform.
Relevant Articles
Australia doubles down: A$99M penalties for failed age checks
The enforcement template the EU is studying.
Sep 14, 2026
EUDI wallet deadline: Europe's identity clock hits 90 days
The infrastructure the KIDS Act rides on.
Sep 11, 2026
Sportsbook age verification: Congress moves on face checks
America's sector-specific parallel.
Sep 4, 2026
What is deepidv?
Not everyone loves compliance — but we do. deepidv is the AI-native verification engine and agentic compliance suite built from scratch. No third-party APIs, no legacy stack. We verify users across 211+ countries in under 150 milliseconds, catch deepfakes that liveness checks miss, and let honest users through while keeping bad actors out.
Learn More