The EU proposed the KIDS Act to strengthen protections for children using digital services. It includes restrictions on independent social media accounts for under-15s. The act requires age verification for gaming platforms. Some methods may process identity documents or facial images. A 2025 Discord breach exposed 70,000 users' government ID photos. The EU suggests privacy-preserving age checks. Developers must limit collected data and avoid retaining biometric information. Third-party verification providers must secure sensitive data. Smaller studios need affordable, trusted verification solutions. The act is still a proposal and not yet finalized.
What changed
Age verification for digital services had no EU-wide privacy-preserving standards.
What it unlocks
Verifying a user meets an age threshold without disclosing unnecessary personal information.
- 70,000 users affected by Discord ID breach
- Sept. 17, 2025 EU KIDS Act proposal published
What you need to act on it
- EU KIDS Act finalization
- adoption of privacy-preserving age verification methods
Sources