France, Spain, and Greece are all moving toward social media bans for minors, with France now evaluating restrictions on VPNs to enforce compliance. This isn't just about protecting kids - it's a fundamental rethinking of how social media companies operate in Europe.
France's National Assembly has already passed legislation prohibiting anyone under 15 from using social media platforms. Now officials are saying "VPNs are next on my list" - signaling they're serious about enforcement. Spain is pursuing an under-16 ban. Greece is reportedly "very close" to announcing similar restrictions.
This represents the most aggressive regulatory push against Big Tech since GDPR. But the technology challenges here are massive. How do you enforce age restrictions without building surveillance infrastructure?
The VPN question is particularly thorny. If kids can circumvent social media bans by routing traffic through VPN servers in other countries, the restrictions become meaningless. But cracking down on VPNs creates new problems. Activists, journalists, and privacy-conscious citizens rely on VPNs for legitimate purposes. Any enforcement mechanism risks collateral damage.
From a technical standpoint, the options aren't great. You could require age verification at the device level - which means mandatory digital IDs. You could force ISPs to block social media domains for users under a certain age - which means tracking who's using what services. You could mandate that social media platforms verify ages through government databases - which centralizes massive amounts of personal data.
None of these solutions are elegant. All of them raise serious privacy concerns.
Big Tech has fought these regulations hard, arguing they're unworkable and infringe on free expression. They're not entirely wrong about the technical challenges. But they also spent years ignoring mounting evidence that their platforms harm adolescent mental health.
