EU Rolls Out Age Verification App as Privacy Groups Warn of Risks

While the Commission touts privacy-by-design features, digital rights organizations have raised sharp concerns about the broader implications.

You may also like

European Commission President Ursula von der Leyen

European Commission President Ursula von der Leyen

By © European Union, 2026, CC BY 4.0, https://commons.wikimedia.org/w/index.php?curid=134243815

While the Commission touts privacy-by-design features, digital rights organizations have raised sharp concerns about the broader implications.

European Commission President Ursula von der Leyen announced on Wednesday that the EU’s Age Verification App is now “technically ready” and will soon be available for download. The app is intended to protect minors from “harmful and illegal content” under the Digital Services Act (DSA). 

“It is for parents to raise their children. Not platforms,” von der Leyen stated in a post on X

Rodrigo Ballester, head of the Center for European Studies at MCC, chimed in, noting

It’s for parents, indeed. So stop shoving the gender cult down their throats, to start with.

The open source app—which can be customized by member states—allows internet users to prove their age without revealing personal details like name, exact birthdate, or address to gain access to age-restricted platforms. During setup, users scan or upload a passport or national ID, after which the app will issue an anonymous digital credential that can be verified by platforms. According to the Commission, this would guarantee that neither governments nor platforms can monitor or trace browsing habits. 

In the press conference, von der Leyen and Executive Vice President Henna Virkkunen emphasized that the tool meets “the highest privacy standards in the world” and eliminates excuses for platforms to not check the ages of users. It is designed to be integrated with the broader EU Digital Identity Wallet (EUDI) framework—Europe’s attempt at creating a standard, digital ID system that will be mandatory for all member states at the end of next year. The Commission presents the app as a standardized, voluntary solution to help enforce DSA rules on child protection while holding big tech accountable.

Von der Leyen compared it with the “huge success” of the COVID app, saying it “follows the same principles, the same model.”

Privacy advocates sound the alarm

Digital rights groups have, however, raised serious concerns about what widespread age verification could mean in practice.

The Electronic Frontier Foundation (EFF) has argued that systems like these can erode anonymity and threaten free expression. The group has warned that scaling up verification—especially when tied to digital wallets—introduces privacy risks and could restrict access to information if ‘mission creep’ allows it to gradually expand beyond its stated goal of protecting children.

European Digital Rights (EDRi) has described age verification as a “sledgehammer approach” that increases the risk of data breaches and surveillance. Even tools claiming anonymity, like the EU’s app, could fail due to metadata leaks or implementation flaws, the group noted. 

Other privacy experts have argued that the app and its ties to EUDI Wallet specifications incorporate standards that could enable easier linking of activities over time.

What if it becomes mandatory—and tied to full digital ID?

For now, the app is presented as voluntary for users. However, if rolled out as mandatory across platforms and fully integrated with the EUDI Wallet—required to be available EU-wide by late 2026—the consequences could be far-reaching.

Privacy advocates warn of a slippery slope toward de facto online identity requirements. When coupled with the EUDI Wallet, the system could become a centralized digital identity infrastructure. Even if selective disclosure and zero-knowledge proofs minimize what data is shared, metadata, repeated use, or wallet-provider logs could still make profiling or tracking possible. This raises fears of government or platform overreach in monitoring online activity.

Even privacy-enhanced systems are not foolproof—and large-scale deployment increases the risks of hacks or leaks, which could also have a chilling effect on free speech as users self-censor to avoid scrutiny by governments cracking down on dissident opinions.

The Commission insists that the app, as well as the wallet framework, comply with the General Data Protection Regulation (GDPR) and prioritizes user control. Whether this balances child safety with fundamental rights will face scrutiny from member states. For now, the launch of the app marks a significant step in the EU’s push to regulate online spaces—one that supporters hail as protective and critics fear could quietly reshape digital anonymity.

Christina Holmgren-Larson is a senior editor at europeanconservative.com.

Leave a Reply

Our community starts with you

Subscribe to any plan available in our store to comment, connect and be part of the conversation!