“EU social-media age checks require every user to provide government identification.”

• The EU's Digital Services Act (Regulation (EU) 2022/2065), Article 28, does require very large online platforms and other providers to put in place appropriate measures to ensure a high level of privacy, safety and security for minors, and the Commission's July 2025 guidelines on the protection of minors recommend age assurance in higher-risk cases — so some form of age checking is genuinely being pushed at EU level, which is the kernel of truth in the claim.
• One permitted method of proving age is indeed presenting a government-issued credential: the EU Digital Identity Wallet framework (Regulation (EU) 2024/1183, amending eIDAS) is built on national electronic identity schemes derived from government ID documents, and the Commission's white-label age-verification app can be provisioned using national eID/passport data.
• Several individual member states (e.g. France for pornography sites, and proposals in Denmark, Spain, Greece and Italy) have pushed harder age-verification mandates, and some national implementations have in practice used ID-document or bank-ID checks, which fuels the perception of a blanket ID requirement.
• Platforms are free to choose their verification method, so a platform could in principle decide to demand ID uploads — the law does not forbid ID-based checks.

• There is no EU law requiring every social-media user to submit government identification. The DSA imposes an outcome-based obligation (protect minors, assess risk) and explicitly does not prescribe ID collection; Article 28(3) states that the obligation does not oblige providers to process additional personal data to assess whether a user is a minor.
• The Commission's age-verification blueprint/app is deliberately 'double-blind' and privacy-preserving: it returns a yes/no 'over 18' attestation, so the platform never sees the identity document and the issuer never learns which site the proof was used on — the opposite of 'provide government ID to the platform'.
• Age assurance under the EU approach is method-neutral: acceptable techniques include facial age estimation, device- or OS-level signals, payment-card or mobile-operator signals, parental attestation and zero-knowledge attributes, not only ID documents.
• GDPR data-minimisation (Art. 5(1)(c)) and purpose limitation constrain blanket ID collection; data-protection authorities such as France's CNIL have explicitly criticised ID-document upload as disproportionate and recommended third-party, privacy-preserving verification instead.
• Scope is narrower than 'every user': the Commission's guidelines are non-binding guidance, apply risk-based (strongest for porn, gambling, and high-risk content), and the age-verification app's initial pilots (with a handful of member states) target restricted content rather than all social-media accounts.
• The eIDAS 2 / EU Digital Identity Wallet is to be made available to citizens, but using it is voluntary for individuals; it is not a condition of having a social-media account.

88/100 — the lab’s own confidence in the score above, not a second reading of the claim.

EUR-Lex — Regulation (EU) 2022/2065 (Digital Services Act), Art. 28gov · 98 · EUR-Lex — Regulation (EU) 2024/1183 (European Digital Identity Framework / eIDAS 2)gov · 97 · EUR-Lex — GDPR, Art. 5(1)(c) data minimisationgov · 97 · European Commission — Shaping Europe's Digital Future (DSA policy page)gov · 92 · CNIL (French Data Protection Authority)gov · 90 · European Commission — Digital Services Act overviewgov · 92

• EU law does require certain online platforms, including social-media platforms accessible to minors, to take “appropriate and proportionate” measures to protect minors under the Digital Services Act. That creates a real EU legal basis for age-assurance measures in some contexts.
• The European Commission has promoted an age-verification app/prototype connected to the EU Digital Identity Wallet ecosystem. That means some age checks may use official digital-identity credentials to prove age, especially for high-risk or age-restricted online services.

• The Digital Services Act does not say every social-media user must provide government identification. Article 28 requires appropriate and proportionate protections for minors, not blanket ID checks for all users.
• EU materials describe age assurance/age verification as risk-based and privacy-preserving, not as a universal government-ID upload mandate. Age assurance can include different methods and should minimize personal-data disclosure.
• The Commission’s age-verification approach is designed to let users prove an age attribute, such as being over 18, without revealing their identity or handing a government ID to a platform.
• The EU Digital Identity Wallet framework states use of the wallet is voluntary; it is not a general requirement that every internet or social-media user identify themselves with government documents.
• The claim conflates “some platforms may need age-assurance measures” with “every user must provide government ID.” As written, that is substantially false.

84/100 — the lab’s own confidence in the score above, not a second reading of the claim.

EUR-Lex / European Uniongov · 97 · European Commissiongov · 93 · European Commissiongov · 92 · EUR-Lex / European Uniongov · 96

• The EU Digital Services Act (DSA) requires Very Large Online Platforms (VLOPs) to implement 'appropriate and proportionate measures' to ensure the privacy, safety, and security of minors.
• Because platforms must mitigate risks to minors, they are increasingly required to use age assurance or age verification technologies to distinguish between adults and children.
• Certain EU member states, such as France, have passed national laws requiring social media platforms to verify the ages of users to enforce parental consent for minors under 15, which has fueled speculation about mandatory ID uploads.

• Article 28(3) of the EU Digital Services Act explicitly forbids forcing platforms to collect extra identifying data: 'Compliance with the obligations set out in this Article shall not oblige providers of online platforms to process additional personal data in order to assess whether the recipient of the service is a minor.'
• Under the EU's General Data Protection Regulation (GDPR), the principle of 'data minimization' dictates that platforms cannot legally collect sensitive government identification from every user just for standard access, as it would be highly disproportionate.
• EU regulators and national data protection authorities consistently advocate for privacy-preserving age assurance methods, such as third-party age tokens or zero-knowledge proofs, explicitly warning against universal government ID collection due to cybersecurity and privacy risks.

95/100 — the lab’s own confidence in the score above, not a second reading of the claim.

EUR-Lex (Official Journal of the European Union)gov · 100 · Reutersnews · 90

• The European Commission’s 2025 guidelines recommend age-verification methods for adult-restricted content and where EU or national law sets a minimum age for certain services, potentially including defined categories of social-media services.[1]
• The Commission defines age verification as relying on physical identifiers or verified identification sources, which could include government-issued credentials.[2]

• The claim says every user must provide government identification, but the Commission’s guidance is conditional: it applies to adult content and services subject to a legally defined minimum age, not universally to every social-media user.[1][3]
• The guidance distinguishes age verification from age estimation and recommends age estimation in some cases, especially where platforms set a lower-than-18 minimum age based on risk.[1]
• The EU’s proposed age-verification approach is designed to confirm only an age threshold, with selective disclosure and privacy safeguards; it is not equivalent to requiring users to hand government ID directly to every platform.[3][4]
• The Commission states that age verification should be separate from other platform data collection and should not allow providers to store personal data beyond the user’s age group.[3][4]
• The guidelines do not themselves prescribe a universal minimum age for all social-media services; they describe measures platforms should use where EU or national law establishes one.[5]

96/100 — the lab’s own confidence in the score above, not a second reading of the claim.

European Commissiongov · 98 · EUR-Lex / European Commissiongov · 98 · European Commissiongov · 98 · Council of the European Uniongov · 97 · EUR-Lex / European Commissiongov · 98

• Some national rules in EU member states for protecting minors on certain online services can involve document-based identity checks.
• The EU Digital Identity Wallet (eIDAS 2.0) is a government-issued credential that platforms could choose to accept for age assurance.
• Robust age verification that must distinguish children from young adults often relies in practice on strong identity proofing, which commonly uses government documents or equivalent.

• The Digital Services Act requires very large platforms to assess and mitigate risks to minors but does not mandate that every user submit government identification.
• EU work on age assurance promotes privacy-preserving methods (age estimation, selective disclosure / attribute credentials) that avoid handing full ID documents to platforms.
• No EU-wide rule requires existing adult social-media users to provide a passport, national ID card, or similar document to keep using the services.
• Indiscriminate collection of government IDs from all users would conflict with GDPR data-minimisation and purpose-limitation principles.

78/100 — the lab’s own confidence in the score above, not a second reading of the claim.

European Commissiongov · 95 · Wikipediaother · 70