Commission Preliminarily Finds Meta in Breach of Digital Services Act for Failing to Prevent Minors Under 13 From Using Instagram and Facebook

Why It Matters

Non‑compliance threatens Meta’s operating licence in the EU’s lucrative market and signals tighter regulatory pressure on all large online platforms to protect minors.

Key Takeaways

• EU Commission says Meta violated DSA age‑verification rules.
• Under‑13 users can bypass checks by entering false birth dates.
• Meta's current safeguards deemed insufficient by regulators.
• Potential fines could reach up to 6% of global revenue.
• Enforcement may force Meta to adopt stricter verification technologies.

Pulse Analysis

The Digital Services Act, enacted in 2022, represents the EU’s most ambitious attempt to hold online platforms accountable for user safety, especially for children. By mandating rigorous risk assessments and age‑verification mechanisms, the DSA aims to close the loopholes that have allowed under‑age users to slip through on social networks. Meta’s preliminary breach highlights how even the world’s largest platforms can fall short of these heightened expectations, prompting regulators to move from guidance to enforcement.

Meta’s internal policies already require users to be at least 13, yet the company’s technical safeguards—primarily self‑declared birth dates—prove easily circumvented. Unlike newer entrants that employ AI‑driven identity checks or third‑party verification services, Meta relies on post‑hoc monitoring, which the Commission deems insufficient. This gap not only exposes minors to inappropriate content but also raises data‑privacy concerns, as false profiles can be used for targeted advertising and data harvesting.

If the Commission proceeds to a formal decision, Meta could face fines up to 6% of its annual global turnover, translating to billions of dollars. Beyond the financial hit, the ruling could compel Meta to overhaul its onboarding flow, integrating real‑time age‑verification tools and stricter content filters. The outcome will reverberate across the tech sector, signaling that compliance with the DSA is no longer optional but a prerequisite for market access in Europe.