France's Constitutional Council has invalidated the central provision of a law that would have barred children under 15 from accessing social-media services. Boing Boing revisited the decision on 28 August 2026, but the controlling source is Decision 2026-911 DC, published on 14 August. The official record states that Article 1 of the law was contrary to the Constitution.
The ruling does not say that protecting children online is illegitimate. It says the mechanism adopted by lawmakers restricted freedom of expression and communication in a way that was not sufficiently appropriate, necessary and proportionate. That distinction matters for other governments considering broad age limits.
What the Council rejected
Article 1 would have prohibited access by anyone under 15 to covered online social networks. The measure was broad in both the people and services it covered. Reporting on the decision explains that the Council considered the restriction indiscriminate and found that some affected services might not present an established risk to minors' health or safety.
The law also implied age checks for the wider user population: a platform cannot reliably exclude people below a threshold without deciding which side of it every user falls on. The Council found that the legislation did not adequately specify conditions and limits for age proof. That connected the child-safety objective with privacy and data-governance consequences for adults as well as minors.
The official decision published by Légifrance is the legal outcome. Secondary reports from Le Monde and AP provide political context, including the government's intention to pursue a revised proposal. A future law would still need its own constitutional and European-law assessment.
Why age verification is the technical hinge
An age rule is only as effective as the assurance mechanism behind it. Simple self-declaration is easy to evade, while identity documents, facial estimation or centralized records can create privacy, security and exclusion risks. Accuracy also matters: false classifications can deny lawful access or expose children to services intended for adults.
The European Commission is developing a different technical model. Its EU age-verification approach is intended to let a person prove that they meet an age condition without sharing unnecessary identity details with each platform. The Commission recommends that member states make a compatible solution available by the end of 2026.
That work does not automatically validate a national social-media ban. It addresses one implementation layer: how to provide privacy-preserving proof of age. Lawmakers must still define which services and risks justify a restriction, what alternatives exist, how appeals work, what data are processed and whether the limitation is proportionate.
What platforms and policymakers should learn
A blanket ban is attractive because it is easy to describe. It is harder to make precise in code and law. Social services vary from public discussion forums to messaging, video, education and collaborative development. A definition broad enough to catch every risky service can also capture low-risk or socially valuable communication.
Platforms should not interpret the ruling as permission to ignore minors' safety. Existing European obligations, including risk mitigation under the Digital Services Act, remain separate from the invalidated French provision. Product measures such as private-by-default accounts, limits on unwanted contact, age-appropriate recommendations and clear reporting tools can be evaluated against defined harms without requiring the same restriction for every service and every child.
Policymakers need evidence that links a proposed measure to the risks it claims to reduce. They also need data-minimization requirements, independent security testing and remedies for people incorrectly classified. A system can be privacy-preserving by design only if the legal rules limit what may be collected, shared and retained.
The next French proposal will face the same test
The government has indicated that it wants a legally stronger route to protect children from social-media harms. The ruling leaves room for action, but narrows the design space. A revised proposal will have to explain why its scope is necessary, how it distinguishes services and risks, and how age assurance protects all users' privacy.
France's decision is therefore not the end of the age-limit debate. It is a reminder that child safety, privacy and expression must be designed together. Treating one right as an implementation detail of another is precisely what invites both technical failure and constitutional challenge.