BRATISLAVA, 27 AUG 2026 — Slovakia's government has approved a bill barring under-16s from creating social media accounts and requiring platforms to verify users' ages. It names Facebook, Instagram, TikTok, X and Snapchat, needs parliamentary approval, and could take effect in January 2027.
The ban is the part being reported. The provision for 16 to 18-year-olds is the part worth reading.
The half nobody is reporting
For users between 16 and 18, the bill would require platforms to apply an automatic protected mode. Profiles private by default, location sharing disabled, restrictions on who can add the account to groups, and stronger safeguards against contact from strangers.
A ban excludes people. This changes what the product does for a defined age group, by default, and nobody is asked.
It is also the more enforceable of the two halves. A ban depends on knowing that a 15-year-old is 15, which is the hard problem. A protected mode applies to accounts the platform has already determined to be in the 16 to 18 band, and consists of settings the platforms demonstrably already have.
Two roads arriving at the same place
The convergence with what happened in an American courtroom this week is striking, and the two processes have nothing to do with each other.
Meta settled the multistate youth safety case on 26 August, agreeing to daily time limits, an overnight block and stronger age assurance for teenagers. Slovakia's cabinet approved private-by-default profiles, disabled location sharing and contact restrictions for the same age group.
A negotiated settlement to end a trial in one country and a legislative programme in another are different mechanisms, in different jurisdictions, with different reasoning. They arrived at a very similar list of product controls.
That convergence is itself informative. When litigation and legislation independently arrive at the same remedies, those remedies have stopped being one country's policy preference. They have become an emerging default specification for a teenage account.
Age verification is still the unsolved part
Every law of this shape runs into the same wall, and Slovakia has not said how it intends to get over it.
Verifying age means choosing one of two paths. The authoritative route — a government identity document, a bank credential, a national digital identity — works, and it forces a platform to collect exactly the data privacy law spent two decades discouraging it from holding. The inferential route — behaviour, device signals, facial estimation — collects less and is unreliable in both directions, locking out adults and letting in children.
There is no third option that is both accurate and private. Any jurisdiction legislating an age limit is choosing which failure it prefers, and the choice is usually made in implementing regulations that arrive long after the headline.
The corollary is that verifying children's ages means verifying everyone's. A platform cannot confirm that one user is over 16 without checking an age signal from all of them, which reshapes the service for the entire population in order to govern a minority.
What happens to the accounts that already exist
Laws of this kind are written about account creation, and the population they most affect already has accounts.
A Slovak 14-year-old on Instagram today did not create that account under this law and will still have it in January 2027. Whether the bill requires platforms to find and remove such accounts, to migrate them into the protected mode until the user turns 16, or to leave them alone until some later trigger, is not addressed in the reporting — and it is the difference between a measure that changes something next year and one that changes something gradually over the following decade as new cohorts arrive.
Retrospective removal is the aggressive option, and a difficult one. It would mean running age assurance across the entire installed base rather than only at signup, and then deleting or suspending accounts people have held for years, taking their messages and contacts with them.
The gentler option is to apply the rule only at the door, which is far easier to implement. The catch is that the ban then does almost nothing for several years, which is not the impression a government usually wants to give.
Whichever is chosen, the enforcement burden sits with the platforms and the penalty regime determines whether they treat it seriously. A duty without a meaningful sanction produces a compliance page rather than a change in behaviour, and the reporting does not yet say what the sanction is.
Radicalisation is a different rationale
The stated justification includes addictive behaviour and social pressure, which is the familiar framing, and radicalisation, which is not.
That third term does real work. Addiction arguments point toward time limits and design changes — how long a young person spends and how the product holds them. Radicalisation points toward recommendation systems and what is served, which is a different mechanism and a much harder one to legislate without touching speech.
A minimum age is a blunt response to a recommendation problem. It removes the young user from the system rather than changing what the system does, which is either the only practical answer or an admission that the harder question was set aside. The bill's protected mode, notably, addresses contact and visibility rather than what appears in a feed.
The region legislated first
The usual sequence has Europe writing the rules and everyone else adapting. On this question that is not what happened.
Malaysia moved earlier, with age verification for under-16s tied to its national digital identity scheme, and it made the harder choice explicitly by attaching verification to a state credential rather than leaving the method to platforms. Australia legislated before either. Slovakia is joining a line that ASEAN was already standing in.
The Malaysian approach also illustrates the trade-off the Slovak bill has not yet made. Tying age checks to a national digital identity gives a reliable answer and concentrates a great deal of sensitive information in one system, with the state as the arbiter of who may hold an account. That is a coherent design and a consequential one, and it is a choice Slovakia will have to make in some form.
What it means from here
For platform operators serving this region the practical planning assumption should now be that teenage accounts will be a distinct product tier almost everywhere, with restricted defaults and some form of age assurance, within two years.
The engineering implication is that this is not a compliance feature to be added per jurisdiction. Building one under-18 mode with configurable parameters is straightforward; building six national variants because each legislature specified slightly different defaults is not, and the second is what happens to companies that treat each law as it arrives.
The date to watch in Slovakia is the parliamentary vote rather than the cabinet approval, and the document to read afterwards is whatever specifies how age is to be established. That paragraph determines whether the law functions and what it costs everyone else. The headline age determines very little.
View author profile → · Editorial policy
