EU Strengthens Online Child Protection Rules
On July 14, the European Commission released a set of principles to enhance the protection of minors under the current Digital Services Act (DSA), identifying online gambling as one of the most harmful digital activities for children.
New Standards: Focus on Child Safety
Simply asking for a user’s age is no longer considered sufficient. The Commission now requires online platforms and iGaming providers to implement robust age verification systems.
These rules apply to all platforms accessible to minors, except for micro and small enterprises.
Key Risks Addressed by the Guidelines
- Unwanted contact with strangers (online grooming)
- Exposure to unsafe or harmful content
- Cyberbullying
- Gambling and in-game purchases (including loot boxes)
- Manipulative design and excessive platform use
Recommended Measures by the European Commission
The Commission advises platforms to adopt specific technical and organizational measures to protect children from digital threats.
Privacy and Default Controls
- Children’s accounts must be private by default.
- No group invites without the child’s explicit consent.
- Restrictions on uploading or taking screenshots of content shared by minors.
Changes to Recommendation Algorithms
Recommendation systems should prioritize explicit input from children over behavioral data to avoid driving them into harmful content “rabbit holes.”
Combating Manipulation and Digital Addiction
- Auto-play, push notifications, and “seen” status should be turned off by default.
- No gamified mechanics designed to maximize screen time.
- Increased oversight of AI-powered chatbots and their influence on minors.
Commercial Protections
Platforms must not exploit children’s limited financial literacy:
- Ban on manipulative monetization practices
- Stricter controls on loot boxes and virtual currencies
Enhanced Moderation and Parental Controls
Recommendations include:
- Rapid content moderation response
- Mandatory minimum features for parental controls
Age Verification: Evolving Approaches
The Commission stresses the need for reliable, accurate, and non-intrusive age verification. Key methods include:
| Method | Purpose |
|---|---|
| EU Digital Identity Wallet | Future device-based solution for age verification |
| Third-party verification models | Interim solution until the wallet is fully implemented |
| Age estimation techniques | Applicable when access is allowed for users aged 13–16 |
Voluntary, But with Consequences
While the principles are not legally binding, the Commission will use them to assess compliance with Article 28(1) of the Digital Services Act. Failure to align may trigger scrutiny by national regulators.
How the Guidelines Were Developed
The principles are the result of extensive consultation and engagement:
- Public surveys and feedback collection
- Two rounds of expert consultations (October 2024 and June 2025)
- Direct dialogue with children and young people
- Work by the European Board for Digital Services
What’s Next?
The EU is developing its own age verification solution — the EU Digital Identity Wallet — which will include a secure and unified mechanism for confirming age. This aims to set a common standard for all platforms, including gambling sites.
Conclusion
The European Commission is stepping up efforts to ensure children’s digital safety, with particular focus on restricting gambling and manipulative content.
While voluntary, these new principles lay the groundwork for DSA compliance checks and highlight the EU’s commitment to protecting minors online.