Surveillance watch · online age-verification & ID laws
Color shows each jurisdiction's strongest age-verification status (any law type). Toggle layers to overlay social-media laws (diagonal stripes) and VPN restrictions (dots). Active laws are shaded by intrusiveness.
How far a law reaches once it is in force -- VPN News' assessment, not an official rating.
&
27 countries enforcing on this date. Drag to watch the wave build over time.
EU-wide instruments apply across all 27 member states and sit above the national laws mapped here. Marked on the map at Brussels. These are not counted as a country: they apply on top of the national laws shown here.
Feb 17, 2024
The DSA is the EU's baseline platform-regulation instrument. The Commission has used it to press very large platforms on minors' protection, opening proceedings and issuing guidelines that push services toward age assurance without a single bloc-wide age-verification mandate. Enforcement runs through the Commission rather than the member states.
Announced Apr 2026
In April 2026 the European Commission announced a privacy-focused age-verification application that confirms a user is over an age threshold without handing identity data to the platform. It is designed as a white-label app member states can adapt, and is expected to fold into the EU Digital Identity Wallet. It is the bloc's answer to the criticism that national age checks force ID uploads to private companies.
Expected before end of 2026
The EU Digital Identity Wallet is expected to launch before the end of 2026, offering user-controlled, privacy-first credentials interoperable across member states -- and the intended carrier for age attestations. Analysts note the model only becomes a genuine global standard if a credential issued in one country works in another, and that cross-border coordination does not yet exist.
Proposal expected H2 2026
Two tracks, neither an adopted restriction yet. First, the data-retention framework proposal still expected in H2 2026 -- the question that decides whether no-log VPNs can legally operate in the single market. Second, the age-verification track: the Commission's May 2026 recommendation asks member states to ensure robust age-verification services by December 31, 2026, built on the EU blueprint and the Digital Identity Wallet, and Commissioner Henna Virkkunen -- asked directly whether VPNs undermine the system -- said preventing circumvention is 'an important part of the next steps.' A European Parliament research briefing has floated limiting VPN access to users above a digital age threshold, and warns of a drastic rise in VPN use to dodge age checks. Virkkunen's office and the Commission insist there is 'absolutely no crackdown on VPNs' and the briefing is analysis, not policy -- accurate as far as it goes, but the direction of travel is that Brussels now discusses VPNs primarily as circumvention software rather than as privacy infrastructure.
Feb 2, 2025
The AI Act bans real-time remote biometric identification (live facial recognition) by law enforcement in publicly accessible spaces, with narrow exceptions; the prohibited-practices rules took effect February 2, 2025. Enforcement is contested -- rights groups argue Hungary's 2025 law using facial recognition to identify Pride participants breaches it, and the Commission has been slow to act.
Most shared
The most-shared reporting on age checks and social-media age limits worldwide.
Country by country, governments are building systems that make you prove who you are to use the internet. It often starts with adult sites, and it rarely ends there. This map tracks the spread worldwide, and advances on its own as each law takes effect.
Data last reviewed 2026-07-23 · Online age-verification laws by country
The case against
Age verification sounds simple. In practice it forces every adult to hand sensitive identity documents to private companies, ends anonymous access to lawful speech, and lays the track for a papers-please internet. Here is why we oppose it.
To reach lawful content you upload a government ID or submit to a face scan, often handed to a third-party vendor. That creates a record tying your real name to what you looked at. Such records get breached, subpoenaed, and sold. The risk is not hypothetical.
The Supreme Court that upheld these laws conceded they burden adults' speech. Reading and watching without showing your papers is part of free expression. Strip it away and lawful behavior is chilled far beyond the stated target.
The same age-and-ID machinery is already spreading to social media, app stores, and anything a legislature labels "harmful to minors." Each new law normalizes an identity checkpoint for one more corner of the internet.
Mandatory age checks are the on-ramp to an internet where access to ordinary services depends on proving who you are. That is a civil-liberties problem dressed up as a parenting tool, and it lands on everyone, not just the people lawmakers name.
And it does not even work. A determined teenager reaches a VPN or an offshore site in seconds. The lasting effect is not safer kids. It is law-abiding adults surveilled, and traffic pushed toward sites with fewer safeguards, not more.
The spread, 2002 to today
These laws are spreading across the country like a virus -- year by year, state by state, watch the map turn red.
0 countries enforcing ID checks
Every country, tracked
More than 170 countries. Open any country for its laws, bills, effective dates, VPN and digital-ID status, and primary sources.
No match. Try a different spelling.
Don't want to hand over your ID just to get online?
vp.net is a privacy network built to keep your connection yours -- hardware-verified, not policy-promised.
Visit vp.net →
Email that can't read your mail.
bmail is verifiably private email -- so the contents of your inbox stay between you and the people you write to.
Visit bmail.ag →