17.6 Social media restrictions and bans

The proposals on the table

Unlike the measures in the preceding pages, restrictions on who may use social media are, in the UK, still proposals rather than law — and it is important to say so plainly, because the distinction changes the appropriate response. Following moves abroad and a growing public anxiety about children's relationship with phones and social media, ministers have signalled active interest in measures such as a minimum age for social media use, limits or "curfews" on how long children can spend in certain apps, and restrictions on smartphones for younger children. Studies have been commissioned, options floated, and the political mood has been broadly receptive. None of this has yet become a binding rule for the general user.

That these are proposals does not make them unimportant. Proposals are how every measure in this chapter began, and the social-media age question in particular has strong momentum and cross-party sympathy. The purpose of this page is to explain what is being considered, to identify the privacy consequence that is easy to miss, and to think clearly about the trade-offs — so that if and when concrete legislation arrives, you can assess it rather than simply react to the headline.

The Australian precedent

Much of the UK debate has been shaped by Australia, which in late 2025 brought into effect a law barring children under 16 from holding social media accounts and placing the obligation on platforms to enforce it. It is the most significant such measure attempted by a comparable democracy, and it is being watched closely around the world as a test case: whether the age limit can actually be enforced, what it costs in privacy and practicality, whether children simply route around it, and whether the promised benefits materialise. UK ministers have referred to the Australian approach with evident interest, and its perceived success or failure will heavily influence what the UK does.

The Australian experience is therefore the most useful evidence available, and it cuts both ways. Supporters point to a society-wide attempt to push back against documented harms to children. Critics note the enforcement problem: to keep under-16s off a platform, the platform must determine the age of every user, which is where the privacy difficulty arrives. Early reports of children circumventing the rules, and of the burden falling on age-assurance systems of uncertain accuracy, are exactly the issues the UK would inherit. Watching how Australia's scheme actually performs is more informative than any prediction.

The identity side-effect everyone misses

Here is the point that is most often lost in the debate, and the reason this topic belongs in a privacy guide at all. To stop under-16s from using social media, a platform cannot only check the people who are under 16 — it has no way to know in advance who they are. It must, in effect, establish the age of every user, including every adult. An age limit for children is therefore, unavoidably, an age-verification requirement for everyone. The infrastructure described in 17.2 — document uploads, face scans, identity providers — would extend from adult content sites to the mainstream platforms where ordinary public life now happens.

This is why a measure aimed at protecting children has implications for every adult's privacy and anonymity. The ability to read, post, and organise on social media without first proving who you are is not a small thing; it underpins whistleblowing, dissent, support communities, and ordinary candour, as discussed throughout 16.9 and Chapter 9. Attaching verified identity to mainstream social media as the price of a child-protection measure would quietly end pseudonymous public participation for everyone. Whatever one concludes about the policy, this consequence should be named and weighed, not smuggled in as a side-effect.

The genuine concern, and the trade-off

It would be dishonest to treat the underlying worry as manufactured. There is real and growing evidence of harm associated with heavy social media use by children: effects on sleep, attention, mental health, body image, and exposure to material no child should see. Many parents feel genuinely powerless against engagement-maximising designs aimed at their children, and the desire to do something is understandable and decent. A guide that dismissed these concerns would deserve to be ignored.

The difficulty is that the proposed remedy and its costs are poorly matched. Verifying everyone's age to keep some children off platforms imposes a permanent, society-wide privacy cost to address a problem that might be better met by other means: device-level controls, default settings for minors, design regulation of addictive features, education, and giving parents better tools. The question to ask of any concrete proposal is whether it actually protects children effectively, and whether the same protection could be achieved without conscripting the entire adult population into an identity-verification regime. Often the honest answer is that the heavy, identity-based approach is chosen because it is administratively simple, not because it is the only way that works.

Platform pressure and deplatforming

Age limits are not the only way social media participation is constrained. The broader environment — shaped by the Online Safety Act, by platform terms of service, and by political and commercial pressure — already determines what may be said and who may say it, often more powerfully than any law. Accounts are suspended, content is removed or demoted, and individuals are excluded from the platforms where public conversation happens, sometimes for clear cause and sometimes through error, automation, or pressure. This is the territory of 16.3 and 16.6, and it is a restriction on participation that operates regardless of formal bans.

The practical lesson is that your presence on any single platform is conditional and revocable, and increasingly so. Building your entire public identity, audience, or livelihood on one service leaves you exposed to a single company's decisions and a single regulator's rules. The resilience principles elsewhere in this guide — keeping independent channels, owning your own means of contact, not depending wholly on platforms you do not control — apply directly here, and they matter more as the rules around participation tighten.

What to watch, and what to do

Because social media restrictions remain proposals, the most valuable responses now are attention and engagement. Watch for the shift from consultation to legislation, and in particular for any age-limit measure that would require age verification of all users rather than only children — that is the threshold at which a child-safety policy becomes an everyone-identity policy. Engage through the ordinary civic channels while the matter is still open, since this is precisely the stage at which public input has most effect.

For your own resilience, act on the things already within your control. Reduce your dependence on any single platform; keep ways to reach the people who matter to you that do not rely on a social media account, such as the encrypted messaging in 7.1; and keep sensitive or easily-misread expression off mass platforms in favour of more appropriate channels, as set out in 16.8. If age verification does come to mainstream social media, the data-minimisation guidance in 17.2 will apply there too. The consolidated steps are in 17.7.