Protecting Minors Online Must Not Come at the Cost of Privacy and Free Expression
The European Commission has taken an important step toward protecting minors online by releasing draft guidelines under Article 28 of the Digital Services Act (DSA). EFF recently submitted feedback to the Commission’s Targeted Consultation, emphasizing a critical point: Online safety for young people must not come at the expense of privacy, free expression, and equitable access to digital spaces.
We support the Commission’s commitment to proportionality, rights-based protections, and its efforts to include young voices in shaping these guidelines. But we remain deeply concerned by the growing reliance on invasive age assurance and verification technologies—tools that too often lead to surveillance, discrimination, and censorship.
Age verification systems typically depend on government-issued ID or biometric data, posing significant risks to privacy and shutting out millions of people without formal documentation. Age estimation methods fare no better: they’re inaccurate, especially for marginalized groups, and often rely on sensitive behavioral or biometric data. Meanwhile, vague mandates to protect against “unrealistic beauty standards” or “potentially risky content” threaten to overblock legitimate expression, disproportionately harming vulnerable users, including LGBTQ+ youth.
By placing a disproportionate emphasis on age assurance as a necessary tool to safeguard minors, the guidelines do not address the root causes of risks encountered by all users, including minors, and instead merely focus on treating their symptoms.
Safety matters—but so do privacy, access to information, and the fundamental rights of all users. We urge the Commission to avoid endorsing disproportionate, one-size-fits-all technical solutions. Instead, we recommend user-empowering approaches: Strong default privacy settings, transparency in recommender systems, and robust user control over the content they see and share.
The DSA presents an opportunity to protect minors while upholding digital rights. We hope the final guidelines reflect that balance.
Read more about digital identity and the future of age verification in Europe here.
PGP Key
Fingerprint: F768123BA2AA95C46F089EE223D35335ECB2871C
-----BEGIN PGP PUBLIC KEY BLOCK----- xsDNBGhQLgsBDADltjtcvUSsqX8xu+epJgEG+7gYjzGJ1nq5B6pirJNs/U+D6H5r od5vKhDtQT8/5kTBCHvQh0W/LLduqrQ6vLuYTm0XuHaAWDHFdZAZSIcUTzZX1zs4 iI2OtHz7La5WQum9dV+Kt5sct+JYs9qTYJ/xNIFv3GQiOapV3kbzlw21rhs6wvMV FKr26I+8YcYgSIQL/Nej1WDfnD7LL2Iu3KEEjefcgfa/Btvqs2tow2Sr9BKDWVGg DDQim85FLh26YSudJu+qU2FUkc1/z6GZ8E7gfVp7y0NArhvuMePMP+an3homcXG5 /O4SI9PbtoBjA8b0xlsv0LUpQyYI99baUZ+z9x15uDdkyPDUuOoT1L1aIbxFt1gv ouVghGs2HgS4F26q0qxYHs+Gmy5y+3pEKDlxtyxHIh5qcd7k0RZehqWFnTSnbQX8 qKtlxyP1BbAlY1ptwHC3d+VXV8QFWzZh603KQTtphW5T4A/icj3LIIWKOB/inoTy LGkarUq2hFehdKsAEQEAAc0iU3RhdGV3YXRjaCA8c2VjdXJlQHN0YXRld2F0Y2gu b3JnPsLBDQQTAQgANxYhBPdoEjuiqpXEbwie4iPTUzXssoccBQJoUC4LBQkFo5qA AhsDBAsJCAcFFQgJCgsFFgIDAQAACgkQI9NTNeyyhxzVdQv+PUzkrCEA4hRp9b13 p0y1puaUElGIn0U5H0iWiWP2h5DPxcj4d8q6kBVOl9tmXHVaXpZ79l4AiFxA74QQ jM3O3h7Gquxj+npbBfmm/PVox6RKNIT8YliueUieB7XlQf03FIvrMcp39jcBIC8a Ru7ybIbdhDq5CVrwgCHHdZogRqfMm7p+74/4sbpBOQe/wCENpdj0GS0rIZC0kMwI noRdBBm2Mtse6p66NvteVuAtoFGxI3FAG3lOC6K5Pm1BivUwWxvGZQlIqYM+Kc/F EFt0OdA0PwV+q8oByZeMoeqm65wZ6hNJBueVKbfYlEgaxElXJJ5HA2yEV7DNtQZT 0gRabpb1cmZzczfq6537btn3t+zzmX/baHV+FeHclAzXTGKAwf4suI7SchqGu/nz qYah9C5sRJPFGv4J3IIZ613/G7y+C1H2rIxbav5Imm3XoVpmbz+H8Fzy/H3NRJ9n b0OanE224Kw9SSgn4hKTL9oT5PuFwTE7SDwC2q7m2kunoZEIzsDNBGhQLgwBDADJ Vk6NYDH7L7bjuoPSzjsQkgOroUjT4vlkrNCh+d3hNbb4lfh33cql0rgEu+dTP2P4 uqlpBlfaEYpHpXeGOiuRRbrot3PtpJ7vN9J3sVgEYon9xiN5APgVnjHw0vqI5snx +11l5HnvM0UF1/oZvBO1Xb6YAWgccm977B/iDL/yjK1OrnduPZ8g/OjNrQUVfFkE wlwDzly0j0b876busmWdjFqSclMUgHd3y4KDkGEsETJ/xncwyieECS++zP7QfEi6 sfmT+ut2kVlMDOIDkQC/tl8ForLTGwmpCNFQpVhATyveDLcCxHiFarcaLpp0mMe5 a1wVuAyID8zPsoCokesy6ASlgE5O2odcs1opK1qvrY7FFkuV3cnVaXDIEioHr4cL eQxpS7dc0erx509hQFSTZwm7mbTbuv7VK4EYrdlCdzEXID6vBNGLkgL+qNb45/4i Gjs9rnJfizUx2yEhrBOWee7iX8bj9WOatWXAj83xefjI2jKWPiWWRsbjpbu2v/EA EQEAAcLA/AQYAQgAJhYhBPdoEjuiqpXEbwie4iPTUzXssoccBQJoUC4MBQkFo5qA AhsMAAoJECPTUzXssocctNIL/2rYWWm6QDuzAc9xLDwPIaC/fMYn04SHblZr8vc5 WOXwrpbguOAjmG+oyJk/d00NXfTWlOOJKh89dyHOIMX/w6n6UkjJ8rNUAYd233EB 9HHbn1QA7jJJDxT/XDe7v+hhR3xalNOdAQsj+9Wo4oQuf+fZbtvDwXkk5d29cZf1 FW8k9i8LvNCtJCDUTiyRPmStv6o9xTa9cLUETy4/cz1//+UZsx+JObyWNL3VBGUJ 4F+qDlXqfGY3Ff5MD7J+s+kVlH1XDBmVx/US8/JwYaWZjn5psXiei3fCTm+mNTgH r6FlFYGAR0up3N3W7fDQZBLoAUdrFzbsedt5nlytK6NzKLigZvzeoMiVxbkAIxxU 2NM4g7qVShZmbvmU9HrJe5UUlOa01w69JF1kBI0xIHh6KryuZeHt4QRpvdE7yxWH pblLcqgqZ33sEmrETeU4HxSo/O+0OgsrErGfohkz3CL5peajgOmTimo9DePndpkL TgqHTnYRmf7YUa9Nb6nTOKoM6A== =2rwV -----END PGP PUBLIC KEY BLOCK-----