Social Media Age Limits: What the Law Actually Says
Why 13 is not the legal minimum age for social media in the UK, what the Online Safety Act says about age limits, and what platforms are required to do.
Many parents assume that 13 is the legal minimum age for social media in the UK. It is not — it is an industry standard adopted by platforms under the Children's Online Privacy Protection Act in the United States, which most major platforms have applied globally. In the UK, the Online Safety Act and the ICO's Children's Code take a different approach: they focus on what protections must be in place for under-18s, and require platforms to verify age rather than simply setting a rule that children self-report compliance with.
Where does 13 come from?
The age of 13 for social media sign-up is not a UK legal requirement. It originated in the US Children's Online Privacy Protection Act (COPPA), which requires parental consent for data collection on under-13s. Most major platforms adopted this threshold globally because it was the most convenient single standard. UK law does not set 13 as a minimum age for social media — but the Online Safety Act and the ICO's Children's Code apply different rules and protections for under-18 users, including children between 13 and 17.
Key takeaway: The age 13 rule is an American industry standard adopted globally — it has no basis in UK law as a minimum age for social media.
What UK law actually says
UK law does not set a single minimum age for social media. The ICO's Children's Code (also known as the Age Appropriate Design Code) applies to any online service likely to be accessed by under-18s and requires age-appropriate privacy settings and design for all users under 18 — not just under-13s. The Online Safety Act requires platforms to use age assurance and to apply different safety measures for children, broadly defined as those under 18.
Key takeaway: UK law protects all under-18s on platforms likely to be accessed by children — not just those under 13.
Age verification and the reality of enforcement
Even where platforms set a minimum age, enforcement has historically relied on children self-reporting their age accurately — which is widely ignored. The Online Safety Act requires platforms to use technically effective age assurance rather than relying on a date-of-birth field. This means the gap between a stated age limit and actual enforcement should narrow as platforms implement Ofcom's requirements. However, determined teenagers will often be able to find ways around verification measures, particularly on devices outside the home.
Key takeaway: Self-reported age gates are insufficient under the Act — platforms must use technically effective age assurance.
Children aged 13-17: still protected
The Online Safety Act makes clear that being between 13 and 17 does not mean a child has the same rights and exposure as an adult on a regulated platform. Platforms accessible to children must apply age-appropriate safety defaults, restrict certain content, and use algorithms responsibly for all under-18 users. Parents of teenagers should understand that even if their child is legally able to be on a platform, the platform has legal obligations to treat them differently from adults.
Key takeaway: Teenagers between 13 and 17 are entitled to child-appropriate safety measures, not adult-level exposure.
Practical guidance for parents of teenagers
If your child is 13-17 and using social media, the law now requires platforms to apply stronger defaults than they did before the Online Safety Act. In practice, this means checking whether your teenager's accounts are set to private by default (they should be on new accounts under the Children's Safety Code), whether strangers can message them directly (they should not be able to by default), and whether the recommendation algorithm is serving them appropriate content. Knowing the legal expectations helps you have informed conversations with platforms when defaults are not met.
Key takeaway: Even for teenagers, check that accounts are private by default and that direct messaging from strangers is restricted.
What the Act does
Requires platforms to use technically effective age assurance rather than relying on self-reported ages.
Applies children's safety duties to all under-18 users, not just those under 13.
Obliges platforms to apply age-appropriate defaults for all users under 18, including teenagers.
What the Act does not do
Understanding the limits of the Act helps you set realistic expectations when using complaint and reporting processes.
Set a legal minimum age for social media in the UK — that remains a platform policy decision.
Guarantee that every child under 18 will be accurately identified by age assurance systems.
Prevent older teenagers from making choices about their online presence — it requires protective defaults, not prohibitions.
Practical steps
When setting up a social media account for or with your teenager, check whether the account is private by default.
Review direct messaging settings — platforms should restrict who can message an under-18 account by default.
Talk to your teenager about why the 13-age rule exists, what UK law actually says, and what protections they are entitled to.
If you find a platform is not applying age-appropriate defaults to a new under-18 account, document this and consider reporting it to Ofcom.
Frequently asked questions
Is it illegal for a child under 13 to have social media in the UK?
No, there is no UK criminal law that makes it illegal for a child under 13 to have social media. Most platforms set 13 as their minimum age in their terms of service, but this is a contractual condition, not a legal prohibition. What matters under UK law is whether the platform is applying appropriate safety measures — which it must do for all under-18 users.
Should I report my child's social media account if they are under 13?
If your child's account violates the platform's own minimum age policy, you can contact the platform to have the account reviewed. Many platforms allow parents to report underage accounts. The platform's decision on what action to take is governed by their own policies, not by a UK legal requirement to remove the account.
Sources and further reading
Related guides
Last reviewed: 19 April 2026
This is practical educational content to support families. For case-specific concerns about a child's safety, contact the NSPCC helpline on 0808 800 5000 or your local safeguarding team.
Was this page helpful?