Social Media at 16: What's Actually Coming in Spain (and What's Still Noise)

Before you promise your kid that "in a few months they'll shut down your Instagram," here's what we actually know, what we don't, and what you can do this week without waiting for it to become law.

You've probably seen the headline: Spain is going to ban social media for minors under 16. And you've probably also, like most people, stopped right there, at the first sentence, without getting to the fine print.

I know what you're thinking: "finally," or maybe "about time," or even "this won't do any good, they'll find a way around it anyway." All three reactions are reasonable. But before jumping to conclusions — or promising your 13-year-old that in a few months their Instagram gets shut down — it's worth separating what's actually decided from what's still a headline dressed up as a done deal.

Let's get to what matters: this isn't law yet

Here's the first misunderstanding going around these days: no, the law is not in effect yet. Pedro Sánchez's announcement was in February 2026, and on July 3rd — barely two weeks ago — PSOE and Sumar filed the specific amendments to the upcoming Law for the Protection of Children and Adolescents in Digital Environments, which would set 16 as the minimum age to access social media without explicit authorization verified by the CNMC (Spain's telecoms regulator).

The text is moving forward, but it still has to clear the parliamentary process, get published in the official state gazette, and then give platforms a grace period to adapt. In other words: we're at the "still cooking" stage, not the "already on the plate" stage. If your household already has a mental deadline for when "they'll shut down my kid's account," ease up on it — there are probably still months to go.

That doesn't mean you shouldn't do anything in the meantime — we'll get to that below — just that it's worth not announcing an expiration date at home that doesn't exist yet.

The real fear isn't the law — it's the ID card

When people hear "age verification," the mental image is usually the same: uploading your kid's ID card to Instagram. And that's where most of the noise comes from, because it's reasonable not to want a social network holding a photo of a minor's ID card on its servers.

The part that's been reported the least is this: the European Union is already rolling out the EU Digital Identity Wallet, a system designed specifically to avoid that problem. Instead of showing the full ID card, the wallet answers a single question — "are they over 16?" — with a yes or no, without handing over a name, date of birth, or document number to the platform. Spain already has a pilot ("Cartera Digital Beta") running since 2024 to verify age for adult content, and Spain's data protection agency (AEPD) backs this approach because it reduces the data trail minors leave behind. The EU's goal is for every member country to have at least one free digital wallet operating before the end of 2026.

In other words: the most likely outcome isn't Instagram asking for your kid's ID, but an intermediary system confirming their age without revealing anything else. That's a distinction worth explaining at home, because it completely changes the conversation from "they're spying on us" to "there's a new lock on the door."

Which platforms get a pass (spoiler: probably none) and the warning coming from Australia

Official sources speak generically about "the main social networks operating in Spain," with no closed list yet. To get a sense of what to expect, it helps to look at Australia, which has enforced the world's first real ban for under-16s since December 2025: Instagram, Facebook, TikTok, Snapchat, YouTube, X, Reddit, and Twitch are all included.

And the warning coming from there is useful precisely because it's honest: the law reduces friction, it doesn't eliminate it. Australia's regulator already acknowledges that more digitally savvy teens are getting around the controls with VPNs (which make it look like they're connecting from another country) or with accounts borrowed from adults. The regulator is now requiring platforms to block VPNs too, with serious doubts about whether that's actually feasible in practice.

The lesson isn't "so it's pointless." It's more nuanced than that: a law like this raises the bar for an 11-year-old who today opens an account with one click, but it doesn't replace the conversation with a 15-year-old who already navigates the internet better than we do.

What the headlines don't tell you: even the experts don't agree

This is where the debate actually gets interesting. Spain's data protection agency (AEPD) has been clear: age verification "isn't enough on its own" and must comply with GDPR without creating new privacy risks for minors. And the Sociology of Childhood and Adolescence research group has posed the uncomfortable question right in its title: "does banning social media access for under-16s actually protect them?"

Cybersecurity expert Gonzalo Álvarez Marañón sums it up in a way worth remembering every time we see the headline: banning is "the easiest answer to a complex problem." Technical verification can delay first access, but it doesn't switch off the engagement-by-design that platforms are built on, nor does it replace the digital literacy a teenager needs to navigate what they will encounter anyway — whether they're 13, 16, or 20.

Said with the compass we use around here: technology shouldn't be a wall that decides for us, but a bridge that supports what we're already trying to do at home. A verification law is, at most, a railing on that bridge. Useful, but it doesn't replace walking it together with them.

This week's plan (without waiting for it to become law)

You don't need to wait for anything to be approved to take action. Here's what you can check right now, depending on where your child is at:

🟢 If they don't have any social media yet: make the most of the runway. Talk now, without deadline pressure, about which platform they want to open first and why, and decide together when it makes sense — not everything "everyone else has" needs to be had on day one.

🟡 If they already have accounts open: turn on the restricted modes Instagram, TikTok, and YouTube already offer voluntarily today (Teen Accounts, restricted mode, limits on contact from strangers). These don't depend on the law taking effect — they already exist and have been available for months.

🔴 If they're 15 and their account technically "expires" soon: don't turn it into a threat ("once the law passes, it gets shut down"). It's better to get ahead of the conversation about how and why they use that platform, so that the change — if it comes — is an agreed-upon transition, not a last-minute ultimatum.

And in parallel, it's worth keeping an eye on the rollout of Spain's Digital Wallet: once it's available for minors, it will probably be the most privacy-respectful verification system out there — better than any alternative that asks for their ID document directly.

One last thing

A few months from now we might come back to this same topic once the law has actually passed, and it'll be time to write the practical "how to verify your kid's age step by step" guide. Today, the only thing you can really do is this: don't wait for a lock that's still being built to have the conversation that's actually up to you.

Have you already talked at home about what will happen the day a social network asks him or her to prove they're 16?