Analysis
A Five Word Clause in the EU's New Child Safety Proposal Decides Whether Any of It Works
A three part reading of the EU KIDS Act, the Regulation the European Commission proposed on 17 September 2026. Part one sets out what the text obliges, article by article: one minimum age of 15 for an account of your own, a guardian-controlled account with a one hour daily cap for 13 and 14 year olds, a narrow guardian-mediated channel from 3, and duties that reach past social media to app stores, operating systems, online games, AI companions and general conversational chatbots. Part two covers safety by design, the reversal that puts the burden of proof on the largest platforms, the six month clock on every existing account, and Article 28(3), which says in five words that any age assurance measure shall be zero knowledge proof. Part three sets out the five problems standing between that sentence and a working system, proving a predicate without producing a person, unlinkability in three directions, the guardianship link, the audit paradox and redress, then proposes an architecture, seven things the implementing act should specify, and what a platform can do in the next six months. Written by the authors of the Trust Identity Protocol, who state plainly that TIP does no age assurance today.
Dinesh Mendhe, Ross Thorpe, Hema Dey, Sofia Martinez|Sep 21, 2026