Anyone opening a new social media account in the UK will soon have to prove they are over 16 by uploading an ID or passing a face scan, and the rule applies to every new user, not just to children. Prime Minister Keir Starmer set out the plan on June 15, 2026, with regulations due before Christmas 2026 and the rules themselves taking effect in spring 2027.
The mechanism effectively ends anonymous sign-ups on the largest UK social platforms. New users on Instagram, YouTube, TikTok, Snapchat, Facebook, and X will have to clear an age check that uses either an uploaded ID document or a facial age estimation scan. The plan follows Australia's under-16 social media ban, which took effect in December 2025 and was the first of its kind. The UK says it is going further by also pulling in services with "high-risk features" such as livestreaming and stranger contact, with gaming platforms like Roblox called out by name.
The announcement was paired with a political frame from Technology Secretary Liz Kendall, who said "tech giants had their chance and failed." Starmer called the move "a line in the sand" and said it would "give kids their childhood back." The package followed a national consultation that drew more than 116,000 responses from parents, children, and experts. The government says nine in ten parents backed an under-16 ban and that two-thirds of young people surveyed agreed under-16s should be kept off at least some platforms.
Long-standing accounts are largely exempt from the new checks, though the BleepingComputer write-up does not specify a precise cutoff and treats that as a question still to be settled in the regulations due before Christmas. The carve-outs are narrow. WhatsApp, Signal, and YouTube Kids are explicitly outside the rule, alongside a limited set of educational, e-commerce, and music streaming services described in the source as narrowly defined.
Security and privacy experts quoted in the reporting warned that the system has real weaknesses. They said age checks are easy to circumvent, that handing over ID and biometric data to age-verification vendors creates a new breach target, and that the package moved with little political scrutiny. Those are speaker-attributed views in the source material, not an editorial verdict, and the underlying UK government announcement and the consultation figures should be cross-referenced before the specific numbers harden in any standalone claim.
The live questions for the regulations due before Christmas 2026 are practical. What happens to the ID and biometric data after the check? Who audits the age-check vendors, and under what data protection law? What recourse does a wrongly-flagged adult have if a face scan rejects them? And do the narrow carve-outs for messaging, YouTube Kids, and a small set of educational and music services hold up in practice? The child-safety goal is durable political ground; the chosen tool and its oversight are where the policy is now actually being designed.