EU Kids Act Imposes Sweeping Age and Design Rules on Mobile

The EU Kids Act proposes sweeping new age and design restrictions for mobile games and other online services. The European Commission adopted the proposal on September 17, 2026, with a 99-page document outlining legislation that will reshape game access and monetisation across Europe within six months of the rules taking effect.

The Act applies to all online services, including social media, video-sharing platforms, video games, app stores, AI companions, and operating systems. It requires providers to ensure high privacy, safety, and security for minors, including users without accounts. Services must assume all users are minors until age can be verified. The European Parliament and Council will now review and negotiate the proposal, a process expected to take 8 to 24 months. European Commission President Ursula von der Leyen and Executive Vice-President Henna Virkkunen presented the Act.

Age verification and access rules for minors

Providers must verify the age of users. They must deactivate accounts held by users under 15 within six months of the rules taking effect. Age verification is required for minors to access age-restricted features, moving beyond simple self-reporting. Platforms must use the EU Age Verification App or approved third-party systems that do not retain personal information. Providers must also prevent under-15s from creating accounts or accessing services via accounts if the service is deemed risky.

Parental controls and guardian tools

Games must provide specific tools for parents to control access for children under 13. These tools allow guardians to view and approve contacts, manage settings, report harmful content, and control device access. Parental responsibility must be verified for creating limited-feature accounts. Article 20 guardian tools require providers to inform minors when a guardian is using the tools, encourage their usage, and provide reporting mechanisms. These tools must also be interoperable with third-party applications under the Digital Markets Act.

Design restrictions on engagement and data collection

The Act mandates a 'safe by design' approach, banning game mechanics that encourage compulsive or excessive use. Key prohibited features include:

Safety settings must be set at the highest level by default. Platforms can no longer track or share minors’ real-time location or activate microphone and camera access unless the minor explicitly switches them on.

Compulsive use and spending safeguards

Providers must prohibit addictive design features that undermine a minor's ability to stop playing. They must ensure minors understand financial transactions and avoid designs that lead to excessive or unwanted spending. Online game providers must apply safe default settings, implement contact safeguards, and ensure guardian access to control tools. Online games and apps must also be age-rated and prevent children from accessing or buying age-inappropriate items.

Breaches of the Act can result in fines of up to 6% of total worldwide annual turnover for very large online platforms. The rules apply to services accessible to minors in the EU, regardless of the provider's location for core service types, and for AI chatbots regardless of where they are established. Veronica Perez Lima, a policy advisor at Flux Digital Policy, commented on the scope. The European Parliament and Council will negotiate the proposal over 8 to 24 months, with the related Digital Fairness Act expected in Autumn 2026.