Greece has become the first European Union member state to write a social media age ban into enforceable law, barring children under 15 from platforms including Facebook, Instagram, TikTok, and LinkedIn starting January 1, 2027. Parliament approved the measure late on October 22, after more than 16 hours of debate, with only the governing New Democracy party voting in favor while opposition parties either abstained or rejected it outright. The vote marks a sharp escalation in Europe's efforts to regulate how young people interact with digital platforms, and it sets a legal precedent other governments are already watching closely.
A law built on verification, not trust
Unlike voluntary guidelines or platform self-policing, Greece's law places the legal burden of age verification squarely on the platforms themselves. Parental consent will carry no weight; a parent cannot authorize an underage account, and existing accounts created before the law takes effect will not be grandfathered in. Coverage is determined by function rather than branding, which is why LinkedIn, often treated as a professional network rather than social media, falls under the same restrictions as Instagram and TikTok. Messaging apps are explicitly excluded, reflecting a distinction regulators increasingly draw between communication tools and algorithm-driven feeds designed to maximize engagement.
Prime Minister Kyriakos Mitsotakis framed the policy in April as a response to what he described as the toll of addictive platform design on adolescent mental health, citing anxiety and disrupted sleep among the harms. That framing echoes a broader international argument, also heard in Australia and the UK, that recommendation algorithms and infinite scroll features are engineered to exploit attention rather than serve users' interests.
How age checks will actually work
The mechanism Greece has chosen tries to thread a difficult needle: verifying age without handing platforms a trove of personal data. When a platform cannot confirm a user's age through existing means, it will present a QR code linked to Kids Wallet, a government-run application. Scanning it returns a simple yes-or-no signal, over 15 or under, with no birthdate, name, or identifying information passed to the platform. Digital Governance Minister Dimitris Papastergiou has emphasized that no personal data about children is shared with platforms under this system.
Oversight will be split between domestic and European regulators. Greece's broadcasting council and data protection authority will monitor compliance generally, while the European Commission will handle the largest platforms directly under the Digital Services Act, the EU's framework for regulating online intermediaries.
The anonymity trade-off
Privacy advocates have raised a consistent objection: any verification system robust enough to reliably screen out under-15s risks pushing every user, regardless of age, toward proving their identity. In May, a coalition of 25 organizations warned that the practical effect could be the erosion of online anonymity for the entire population, not just minors. That concern gains weight given that Greece is separately considering measures to end anonymous social media profiles altogether, suggesting the age-verification law may be one piece of a larger shift toward identity-linked online activity.
This is where tools like VPNs typically enter the conversation. A VPN can mask a device's location and encrypt its traffic, but it does nothing to alter what a platform's own verification system asks for once a user is logged in. Age-check mechanisms like Kids Wallet operate at the application level, not the network level, so rerouting traffic through a different jurisdiction will not bypass them. Still, past rollouts of similar age-verification rules elsewhere have reliably driven spikes in VPN searches and downloads, often from users more concerned about general data exposure than about circumventing the specific check.
Part of a wider European pattern
Greece's law lands amid a patchwork of national experiments. Australia's under-16 ban took effect on December 10, 2025, the first binding restriction of its kind globally. France attempted a similar under-15 ban, only to see it struck down by its Constitutional Council in August on free expression grounds, a reminder that these laws face real legal fragility even when politically popular. The UK has committed to a spring 2027 ban on under-16 social media use but has explicitly ruled out restricting VPNs as an enforcement tool, acknowledging the limits of network-level solutions to what is fundamentally an identity-verification problem. Slovenia, Spain, and Austria are drafting comparable measures, and the European Commission is developing a Kids Act that Greece has said it intends to adapt its own framework around, suggesting today's divergent national rules may eventually converge into a single EU-wide standard.