EU Finds Meta Violating Law — Child Safety Failures on Facebook, Instagram

The European Union has issued a preliminary finding that Meta is violating EU law by failing to adequately prevent children from accessing Facebook and Instagram. A preliminary investigation by the European Commission, reported by both CNBC and Engadget, concluded that the company's age verification measures are insufficient, allowing minors to create accounts simply by inputting a false birth date.

This move escalates the long-running conflict between regulators and Meta over child safety. It formally puts the company on notice that its current systems are not compliant with the EU's powerful Digital Services Act (DSA). While Meta has policies against underage users, the EU's position is that its enforcement mechanisms are fundamentally flawed.

A Known Vulnerability, Now a Legal Liability

The core of the EU's case is not a sophisticated hack or hidden loophole. It is the simple, front-door method of faking a date of birth during signup. Both CNBC and Engadget highlight that the preliminary findings confirm this basic method remains effective for children to get onto Meta's platforms. For years, this was treated as an intractable industry problem. The EU is now reframing it as a legal failure.

The pattern indicates a deliberate choice by platform operators to prioritize frictionless sign-ups over robust age verification. Asking for more stringent proof—like document scans or other verifiable methods—adds complexity that can deter new users. The EU's investigation suggests that relying on a user's self-declared birthdate, without meaningful checks, does not meet the legal standard for due diligence required by the DSA.

The Digital Services Act Shows Its Teeth

This case is a critical test for the Digital Services Act, which grants regulators sweeping powers to police content and platform design. The investigation into Meta is not just about one company's practices; it is about establishing the DSA's authority across the entire tech sector. By targeting the age verification systems of Facebook and Instagram, the Commission is tackling one of the most visible and emotionally charged aspects of online safety.

These preliminary findings are the first step in a formal process. Meta will have a chance to respond and propose remedies. However, the direction is clear. The era of self-regulation and easily bypassed age gates is being challenged by a regulatory framework with the power to levy fines of up to 6% of a company's global annual turnover. Together, these reports point to a structural shift where design choices that favor growth at the expense of safety are becoming a direct and expensive legal liability in Europe.