The Constitutional Council struck down the September ban on free expression and privacy grounds, giving other EU courts a portable template to do the same.
France's top court has struck down a law that would have made the country the first in the European Union to bar children under 15 from opening a social media account. The decision, handed down on 14 August 2026 by the Constitutional Council, found that the September 2026 ban imposed limits on freedom of expression and the right to private life that the law's child-protection goals could not justify (decision n° 2026-911 DC; press release).
The ruling does not kill one French law. It exposes a structural problem the rest of the EU is about to run into.
French lawmakers had spent months trying to thread a needle. The version of the bill that reached the Council in August contained no direct sanctions against Meta, Google, or any other platform. Lawmakers had stripped those provisions out during drafting, according to reporting by Biometric Update, to avoid running afoul of the EU's Digital Services Act, the bloc's main rulebook for large online platforms. The trade-off was blunt: rather than make the companies verify users' ages or face fines, France chose to make the users themselves break the law.
The Council's reasoning punishes that trade-off. The court treated the rule as a limit on minors' own expression, not as a platform rule, and it found both that the limit was disproportionate and that the system the law set up to verify ages did not carry enough privacy safeguards. That second prong is the one that matters for tech companies, because it points toward "stop targeting users," not "verify harder."
France already has a working age-verification standard. The media and internet regulator, Arcom, publishes a technical standard, the référentiel, that outside age-check services for adult content sites must follow. The standard is in force, and an Osborne Clarke analysis describes how it works. The Constitutional Council's privacy complaint was not that age verification is impossible in France. It was that this particular law did not build a verification regime that respected minors' data. That is the standard the rest of the EU is going to apply.
That portability is the part of the story the wire summaries miss. EU member states share a constitutional habit of weighing state action against the Charter of Fundamental Rights, the EU's binding bill of rights, on both free expression and data protection. When one national court says a user-side ban fails that test, every other national court in the bloc can read the same reasoning. Similar proposals in Ireland, Spain, and Greece were already moving through parliaments before the French decision; each of them now has a fresh template to challenge.
The ruling also tells platforms what their next move looks like. Meta, Google, and other large U.S. platforms can cite the French decision in age-check disputes elsewhere, much as they have cited the EU's Charter in data fights for years. That is not a free pass: France's parallel age-verification standard for pornography sites is unaffected, and the Council left the door open for laws that hold platforms rather than users responsible.
Where the political energy goes from here is the open question. With the user-side path closed by the Council's decision in brief, the next wave of child-safety legislation is more likely to focus on what platforms recommend, what content they surface, and what design choices they make for minors. Australia, which has pushed minimum-age laws for social media without a similar constitutional collision, is now the closest working model.
For the rest of the EU, the narrower read is: when national parliaments reach for user-side bans to avoid clashing with EU platform rules, the courts will treat those bans as user-side limits on free expression. The September 2026 start date for the French ban is voided. The reasoning that voided it has just begun to travel.