Social Media Age Checks: What Changes

On 21 July 2026, the French Parliament definitively adopted a law barring under-15s from social media — the first such vote in an EU member state. The text sets two dates: 1 September 2026 for new accounts, and 1 January 2027 for accounts that already exist.

If you run marketing for a business in Monaco, the useful thing to understand is that neither of those dates is likely to mean what it appears to mean, and that the practical work in front of you has almost nothing to do with the law itself.

Monaco is not bound by this, and neither are you

Start here, because it removes a lot of noise. This is French domestic legislation. Monaco is a sovereign state and is not an EU member. A company registered in the Principality has no compliance obligation arising from a French statute on social media minors.

What reaches you is second-order: the platforms your audience uses are affected, and the composition of that audience may shift. That is a marketing question, not a legal one — and it is worth treating as such rather than commissioning a compliance project you do not need.

Why 1 September is almost certainly not happening

The law has run into procedural walls that are worth knowing about, because they tell you how fast to move.

France notified the text to the European Commission on 9 April 2026 under the TRIS procedure, which imposes a standstill period during which the law cannot be promulgated. On 6 July 2026 the Commission issued a detailed opinion, extending that standstill by a further month — pushing the earliest possible promulgation to around 10 August 2026. A law promulgated in mid-August cannot realistically govern account creation from 1 September.

There is a deeper problem. Under the EU's Digital Services Act, obligations on platforms established in other member states fall largely to the country of establishment, not to France. The final text reflects that constraint: legal commentators have noted it states the prohibition but sets out no verification method, no enforcement procedure, and no sanctions regime. The Senate itself described the text as essentially symbolic. A referral to France's Constitutional Council is expected within a month of promulgation.

Add to that the fact that the eIDAS 2 European digital identity wallet — the mechanism most likely to make age assurance work without handing identity documents to platforms — is not expected before December 2026 at the earliest.

The honest summary: the direction of travel is real and durable, the specific dates are not reliable, and anyone selling you urgency on this is selling you something. We are not lawyers; if this touches your business directly, take advice from a qualified professional in the relevant jurisdiction.

What Monaco has already done

The Principality has moved on the adjacent issue rather than on platform regulation. Smartphones have been banned in Monegasque schools from the 6ème through to lycée since the 2025 school year, aimed at addiction and cyberbullying rather than at the platforms themselves. A 2024 ESPAD survey found that close to 64% of Monegasque secondary students spend between two and five hours a day on social media.

Monaco has no equivalent age-verification statute in force, and no announced timetable for one. If that changes, it will come through the Principality's own legislative process, on its own clock.

The part that does affect you: do not build an age gate

Here is where a well-meaning reaction creates a real problem.

The instinct, reading headlines like these, is to add an age check to your own site. Resist it unless your sector genuinely requires one. Collecting a date of birth, a document scan, or a facial estimate means processing personal data — and in some cases sensitive data — under Law No. 1.565 of 3 December 2024, with the APDP as Monaco's supervisory authority. That brings data-minimisation obligations, retention limits, a record of processing, and potentially an impact assessment for higher-risk processing.

The rule of thumb: never store identity documents you do not need. If your business does require age assurance — alcohol, certain financial products, restricted goods — the compliant pattern is a third-party assurance provider returning a yes/no signal, not a folder of uploaded passports on your server. Get the design reviewed before you build it, and if you are unsure whether your processing is caught, verify it with a specialist. Our APDP compliance work starts from what you can defensibly avoid collecting.

What to actually do this quarter

Four things, in order of return.

Audit who your audience really is. Most Monaco businesses — private wealth, real estate, yachting, hospitality — market to adults, often to adults over 40. If your under-18 segment is negligible, the audience effect of this law on your reach is negligible too. Check it in your analytics rather than assuming.

Review influencer partnerships. This is where genuine exposure sits. If a partner's audience skews young, platform-level age enforcement will eventually compress their reach, and the commercial terms you signed may not reflect that. Ask for audience demographics before renewing. Our influencer marketing approach treats verified audience composition as a precondition, not a nice-to-have.

Reduce single-platform dependency. Any brand whose acquisition rests on one social channel is exposed to that channel's regulatory weather. Owned channels are the hedge — a website you control, a mailing list, search visibility. If your funnel begins and ends on Instagram, that is the risk worth fixing this year, independent of any law. Email marketing and CRM is the least glamorous and most durable answer.

Keep watching, quietly. Set a reminder for the Constitutional Council decision and for whatever implementing decrees follow. Do not restructure anything until there is a text with operative provisions in it.

The bigger pattern

Age assurance is arriving across Europe in some form — through the DSA, through national initiatives, through the eIDAS wallet. What is unresolved is the mechanism, not the direction. For a Monaco business, that means the sensible posture is preparation without construction: know your audience, diversify your channels, and avoid building any data-collection machinery you would then have to defend to the APDP.

The businesses that will handle this well are the ones that were not depending on a single algorithm in the first place.

If you want a clear view of where your marketing is exposed to platform risk — and what to build instead — get in touch.