The Web Just Switched to Closed by Default
Apple's iOS 27 update, which shipped on September 14, flips the default setting on every child account under 13: Safari now blocks any website the child has not already been approved to visit, turning what used to be an open browser into one that opens link by link. Ask to Browse was first previewed on June 8 and arrives now across iPhone, iPad and Mac for any device enrolled in Family Sharing that has updated to iOS 27, iPadOS 27 or macOS 27.
When a child taps a link Apple has not already cleared, the request goes straight to a parent's own phone, who can allow it once, allow it permanently, or leave it blocked - building up a personal whitelist of school tools, hobby sites and approved entertainment over time rather than relying on a fixed content filter. A companion Declared Age Range API, built with guidance from the American Academy of Pediatrics, lets developers request a 13+, 16+ or 18+ band for a user without the app ever seeing an actual birthdate, and Communication Safety now screens gore and violent content in Messages, shared media and live FaceTime calls, not just still images.
Regulators Are Still Arguing Over a Question Apple Sidestepped
Every age-verification scheme built so far starts from the same assumption: a website has to somehow find out how old its visitor is. Britain's Ofcom has spent the past year refining what counts as an acceptable age-check method after admitting that guessing a user's age is not enough. France has ordered social platforms to verify age before account opening. Slovakia built a separate verifier for its under-16 law specifically so the check learns nothing about the child beyond a yes or no. Each approach still asks the child, or a proxy for the child, to prove something to a website that has never met them.
Ask to Browse asks the child to prove nothing. The website never receives an age signal at all - the gate sits entirely on the device, decided by a parent who already knows the child, with no ID, biometric scan or age estimate anywhere in the chain. It is not a substitute for the legal duties regulators are writing; a site still has to comply with the UK, French or Slovak rules that apply to it. But it solves the practical problem - can this child see this page right now - without solving, or needing, the harder verification problem regulators are still fighting over.
Four Approaches to the Same Problem
| Approach | Who decides | What it asks of the child | Where it applies |
|---|---|---|---|
| UK age-assurance rules (Ofcom) | The platform, via an approved age-check method | Prove an age band to the site itself | Adult and high-risk sites in the UK |
| France's social-media ruling | The platform, under court order | Prove age before opening an account | Social platforms serving French minors |
| Slovakia's under-16 law | A separate privacy-preserving verifier | Pass a check that is built to learn nothing about the child | Platforms serving Slovak under-16s |
| Apple's Ask to Browse (iOS 27) | The parent, in real time, on their own phone | Nothing - no age claim, no ID, no scan | Safari on any Family Sharing child account |
What Changes for Anyone Running a Site Families Use
The consequence sits with the site owner, not the regulator. As iOS 27 adoption climbs, a meaningful share of under-13 visitors will start arriving already wrapped in a parental approval step that happens before the page ever loads - a first-visit friction point no site design decision put there and no site operator can switch off. A new domain, a new subdomain for a campaign microsite, or a redirect through a third-party checkout can each trigger a fresh approval request that has nothing to do with the site's own age-appropriateness and everything to do with Apple's whitelist logic.
For EU and UK businesses that already track cookie consent and NIS2 obligations, this is a genuinely new variable worth adding to the list: a platform-level control the business does not own, cannot configure, and did not have to comply with any law to get. It is the same lesson Servola keeps finding in this space - the fastest-moving child-safety change this year did not come from a regulator at all.
Read next: Apple's iPhone 18 Pro Price Gap Isn't About Tax | Your Watch Neighbor Never Agreed to This
