EU Commission Declares Meta in Breach of Law for Inadequate Child‑Safety Measures on Facebook and Instagram

After nearly two years of a formal investigation that began in early 2024, the European Commission released preliminary findings on 29 April 2026 asserting that Meta, the corporation behind Facebook and Instagram, has failed to implement effective mechanisms capable of preventing individuals younger than thirteen years old from accessing its services, thereby violating the obligations imposed by Union legislation designed to protect minors online.

The Commission’s assessment, which was presented without reference to any remedial steps taken by the company during the investigative period, concluded that Meta’s age‑verification and parental‑control tools are either insufficiently robust, inconsistently applied across its two flagship platforms, or simply ineffective in practice, a situation the regulator characterises as a clear breach of the Digital Services Act provisions that require proactive prevention of under‑age usage.

Meta’s response, limited to a generic statement reiterating its commitment to child safety while offering no concrete evidence of new safeguards or timelines for compliance, highlights a broader pattern of regulatory lag, wherein the company repeatedly relies on vague policy promises rather than demonstrable technical solutions, thereby underscoring the predictable gap between statutory requirements and corporate implementation.

While the Commission has not yet announced specific penalties, its declaration of a breach implicitly signals forthcoming enforcement actions that may include substantial fines, mandatory corrective measures, or tighter oversight, a development that exposes the systemic weakness of voluntary compliance frameworks and raises questions about the effectiveness of existing supervisory mechanisms designed to enforce child‑protection rules across the digital market.

In the context of an EU legislative environment that has increasingly emphasised proactive risk mitigation and accountability for large online platforms, the Meta case serves as a stark illustration of how a major technology firm can continue to operate with minimal safeguards for one of the most vulnerable user groups, thereby revealing the enduring disconnect between policy ambition and operational reality within the Union’s digital regulatory architecture.

Published: April 29, 2026