
Credit: Human Revival
Meta agreed on August 26 to pay up to about $18 billion and overhaul how minors use Facebook and Instagram, settling claims from 47 states, the District of Columbia, and several territories that the company designed addictive products and misled the public about harm to children. The company did not admit wrongdoing. Within days, officials in the United Kingdom, the European Union, and the United Nations treated the agreement as proof that platforms must determine who is on the other side of the screen. Child-safety language is the public face of the deal. Age-assurance systems are the machinery it installs.
What the Settlement Actually Requires
The financial headline is large. The operational terms last longer. Meta must impose a default two-hour daily cap on teen use of Facebook and Instagram, nighttime blocks, muted school-hour notifications, hidden like counts, and an option for a non-algorithmic feed. Restrictions tighten further if Snap, TikTok, and YouTube adopt comparable rules. Roughly $5 billion of Meta’s payout is structured as an incentive for those rivals to settle on similar terms.
Age assurance is not a side note. The agreement requires stronger systems to identify users under 18, with independent testing and error-rate caps. Meta will incorporate age signals from Apple and Google app stores. A provision allows states to shield the company from certain lawsuits over children’s data used to train its age-assurance model. Former Meta employee Arturo Béjar called the time limits the equivalent of permitting two hours of cigarette smoking a day. Meta pointed to parental controls and default feed changes and said teenagers also gain “substantial” benefits from the platforms.
How Child Protection Becomes Identity Infrastructure

Image: Wikimedia
Enforcing a time cap or an under-16 ban requires knowing a user’s age. Knowing age at scale requires identity signals. That is the hinge. U.K. Work and Pensions Secretary Pat McFadden said Meta should apply the new protections to British users, arguing young people in the United Kingdom should not have weaker safeguards than those in the United States. London has already announced a social-media ban for under-16s targeted for spring 2027, plus tighter nighttime and feature restrictions for older teens. Those rules cannot function without age-check systems of the kind already tied to the Online Safety Act.
Greece has used a state-developed app to enforce an under-16 ban. Australia has removed millions of underage accounts after its own prohibition. U.N. High Commissioner for Human Rights Volker Türk said platforms “should be designed to be safe for children” and urged governments not to wait for courts. New York and California have moved bills requiring age assurance on internet-enabled devices, with implementation targeted for 2027.
Academic critics have described platform-level identity requirements as “Trojan horses for government and corporate surveillance.” Digital-wallet advocates counter that cryptographic credentials can verify age without exposing a full identity. Both sides agree on the structural fact: the original internet had no native identity layer. Once platforms and states require proof of age for ordinary access, anonymity is no longer the default. It becomes a permission.
Who Holds the Credential
U.S. officials have already signaled the next targets. D.C. Attorney General Brian Schwalb said Meta “will not be the last.” California Attorney General Rob Bonta said other companies “rightfully must be held accountable.” The settlement itself names Snap, TikTok, and YouTube as the industry peers whose matching terms would unlock additional payments and tighter caps.
The child-harm claims are real enough that nearly every state signed. The unresolved question is whether the remedy must be a court-supervised identity system sitting on corporate servers and app-store gates. A face, a government ID, or a device-level age token is not a cigarette limit. It is a standing credential. Once built for minors, the same pipes can be pointed at every user who wants to post, watch, or log in.

