Law & Regulation

France's Court Left a Blueprint, Not Just a Veto

France's Constitutional Council struck down the under-15 social media ban on August 14, 2026, citing two specific, fixable defects. France is also piloting the EU's own privacy-preserving age-verification app, built to fix exactly the gap the court cited.

Law & RegulationBy Servola Tech Desk2026-08-153 min read

AI-assisted, edited by humans. | Editor-in-Chief: Leon Soliman | Editorial standards

France's Court Left a Blueprint, Not Just a Veto

Key takeaways

On August 14, 2026, France's Conseil constitutionnel issued decision 2026-911 DC, striking down as partially unconstitutional the law that would have banned social media access for anyone under 15, which would have made France the first European Union country to enact such an age limit. The censored provision, Article 1 of the law, would have inserted a new Article 6-9 into France's 2004 Digital Economy Act. The Council grounded its ruling in Article 11 of the 1789 Declaration of the Rights of Man, which protects free communication of thoughts and opinions, and in Article 2 of the same Declaration, which protects the right to privacy.
The Council did not rule that age limits on social media are unconstitutional in principle. It ruled that this specific law failed on two identifiable defects. First, the blanket prohibition applied to all covered services without distinguishing between them by functionality, content, or actual, established risk, and without leaving room for parental discretion in an individual child's case, a design the Council called disproportionate under the standard that restrictions on communication freedom must be 'necessary, suitable, and proportionate.' Second, the age-verification mechanism the law would have required lacked adequate legal safeguards for personal data, and, in the Council's own words, its practical effect was that every person, including adults, would have had to prove their age to use the affected services.
President Emmanuel Macron responded the same day by tasking Prime Minister Sebastien Lecornu with drafting a legally robust replacement proposal as quickly as possible, one that accounts for the Council's decision and fits within the wider European legal framework, with implementation now targeted for spring 2027 rather than the original goal of before the September 2026 school year. French lawmakers had voted overwhelmingly in favor of the original bill before the constitutional review.
France is not designing a replacement from scratch. It is one of seven frontrunner member states, alongside Denmark, Greece, Italy, Spain, Cyprus, and Ireland, piloting the European Commission's own privacy-preserving age-verification app, built to integrate with national EUDI Wallets and confirm a user's age without exposing their identity to the platform being accessed. That is precisely the category of legal safeguard the Council found missing from the law it just struck down. Separately, Greece is drafting its own full social media ban for under-15s, and will face the identical proportionality test France just failed.

A Ban Struck Down on Design, Not on Principle

France's Constitutional Council did not tell lawmakers that an age limit on social media access is unconstitutional. It told them, specifically, why this one was: decision 2026-911 DC found the law's blanket prohibition applied to every covered service without distinguishing between them by function, content, or a risk that had actually been established for that particular service, and without any mechanism for parental discretion in an individual case. Under the Council's standard, restrictions on the freedom of communication protected by Article 11 of the 1789 Declaration must be necessary, suitable, and proportionate; a rule that treats a video platform and a messaging app identically, with no off-ramp for a specific family's judgment, does not clear that bar.

The second defect is separate and, for other governments watching, more instructive: the law's age-verification requirement lacked adequate legal safeguards for personal data, and its practical effect, in the Council's own language, was that the prohibition could apply to services whose risks for the age group in question had not been established, while requiring every user, adult or minor, to prove their age to access them. A law can fail on proportionality and privacy grounds independently, and this one failed on both at once, which is exactly why the ruling reads less like a rejection of the policy and more like a list of the two things a rewrite has to fix.

France Already Has the Fix in a Pilot Program It Is Running

The privacy safeguard the Council found missing is not hypothetical or unbuilt. France is one of seven European Union frontrunner states, alongside Denmark, Greece, Italy, Spain, Cyprus, and Ireland, piloting the European Commission's own age-verification app, designed specifically to confirm a user meets an age threshold without disclosing their identity to the platform requesting the check, by integrating with national EUDI Wallets. That is the same category of legal safeguard for personal data the Council's ruling says the struck-down law lacked.

Nothing in the public reporting on the law that was just censored indicates it was built around that pilot infrastructure. France now has both the constitutional ruling that specifies what a compliant age-verification mechanism needs, and an active pilot of a tool engineered to meet exactly that specification, running in parallel rather than connected. Prime Minister Lecornu's mandate to produce a legally robust replacement by spring 2027 is, in effect, a mandate to connect the two.

Every Other Country Drafting This Law Just Got a Free Legal Memo

France was not legislating in isolation. At least a dozen European countries, including the UK and Norway, have enacted or are actively considering minimum age limits for social media, and Greece is separately drafting its own full ban for under-15s. European Commission President Ursula von der Leyen said in May 2026 that the EU may consider its own minimum-age requirements and a possible delay mechanism for younger users at the platform level.

Every one of those efforts now has a public, binding legal test to design against, for free, because France tried first and lost on specific, named grounds rather than on the underlying policy. A blanket ban without differentiation by service risk, or an age-verification mechanism without adequate privacy safeguards, is now a documented way to fail a constitutional challenge in at least one EU member state, and any government drafting similar legislation that ignores both lessons is choosing to repeat an already-litigated mistake.

Frequently asked questions

What did France's Constitutional Council rule on August 14, 2026?

In decision 2026-911 DC, the Conseil constitutionnel found Article 1 of the law banning social media access for under-15s partially unconstitutional, citing Article 11 (freedom of communication) and Article 2 (privacy) of the 1789 Declaration of the Rights of Man. It did not rule that age limits are unconstitutional in principle.

Why exactly was the law struck down?

Two reasons: the blanket ban applied to all covered services without distinguishing by function, content, or established risk, and without allowing parental discretion, which the Council found disproportionate; and the required age-verification mechanism lacked adequate legal safeguards for personal data, meaning every user, including adults, would effectively have had to prove their age to use the affected services.

What is the EU age-verification app, and why does it matter here?

It is a privacy-preserving age-verification tool built by the European Commission and piloted by seven frontrunner states, including France, that confirms a user's age via national EUDI Wallets without exposing their identity to the platform. It is designed to provide the exact category of legal safeguard the Council found missing from the censored law.

What happens next?

President Macron has tasked Prime Minister Sebastien Lecornu with drafting a legally robust replacement, targeting spring 2027 rather than the original goal before the September 2026 school year. Separately, Greece is drafting its own full under-15 social media ban and will face the same proportionality test.

France's Constitutional Council did not close the door on age limits for social media. It filed the specifications for the door that would actually hold: differentiate by service risk, preserve parental discretion, and verify age without exposing identity, the exact capability France is already piloting through the EU's own age-verification app. The ruling that looked like a defeat for the policy is, read closely, a working blueprint that every other European government now drafting similar legislation gets to use for free.

FranceConseil constitutionnelsocial mediaage verificationGDPREUminorsEUDI Wallet

Airbus's Sovereignty Deal Keeps Skywise on AWS

On July 16, Airbus picked Scaleway as its sovereign cloud provider after scoring bids on protection from foreign extraterritorial law - yet Skywise, its own flagship aviation data platform, stays on AWS, the exact cloud the tender says needs shielding from.

3 min read

Digital Sovereignty

France's Own Linux Pilot Has Reached 70 Machines

France's DINUM ordered every ministry to plan a Windows-to-Linux exit for up to 2.5 million workstations by autumn 2026. Four months on, DINUM's own in-house pilot, the one meant to prove the model works, has reached 70 production-ready machines.

4 min read

Decisions

The Third Pivot Was the Warning Magic Leap Missed

Magic Leap filed a WARN notice for 193 layoffs effective 1 October 2026, its fourth strategic pivot after $4 billion raised. The lesson is the pattern, not the pivot.