AlphaBetaMinds Search 909 tools…

digital life

Digital Age of Consent in Europe: The GDPR Age in Every Country (13 to 16)

The age a child can consent to apps using their data without a parent: 13 in the UK, Sweden and Portugal, 16 in Germany, Ireland and the Netherlands. All 32 countries.

Muhammad Shahzeb· Published ·5 min read
The short answer

The GDPR digital age of consent ranges from 13 to 16 across Europe. It is 13 in the UK, Belgium, Denmark, Estonia, Finland, Latvia, Malta, Portugal, Sweden, Norway and Iceland; 14 in Austria, Bulgaria, Cyprus, Italy, Lithuania and Spain; 15 in Czechia, France, Greece and Slovenia; and 16 in Germany, Croatia, Hungary, Ireland, Luxembourg, the Netherlands, Poland, Romania, Slovakia and Liechtenstein. Switzerland sets no fixed age.

When a child signs up for an app, the service often needs consent to use their data. Under GDPR Article 8, a child below the "digital age of consent" needs a parent to give that consent. The default is 16, and each country may lower it, but not below 13. This page lists the age in all 27 EU countries plus the UK, Norway, Iceland, Liechtenstein and Switzerland, each checked against the national law or the data protection regulator on 16 October 2026.

The age in every country

CountryDigital age of consentLaw
Belgium13Loi du 30 juillet 2018 relative à la protection des personnes physiques à l'égard des traitements de données à caractère personnel, art. 7
Denmark13Databeskyttelsesloven (lov nr. 502 af 23. maj 2018) § 6, stk. 2
Estonia13Isikuandmete kaitse seadus (IKS) § 8 lg 1
Finland13Tietosuojalaki 1050/2018, 5 §
Iceland13Lög nr. 90/2018 um persónuvernd og vinnslu persónuupplýsinga, 10. gr. (Skilyrði fyrir samþykki)
Latvia13Fizisko personu datu apstrādes likums (Personal Data Processing Law, 2018), 33. pants
Malta13S.L. 586.11 Processing of Child's Personal Data in relation to the Offer of Information Society Services Regulations (L.N. 179 of 2018), reg. 4;
Norway13Personopplysningsloven (LOV-2018-06-15-38) § 5
Portugal13Lei n.º 58/2019, de 8 de agosto, artigo 16.º n.º 1
Sweden13Lag (2018:218) med kompletterande bestämmelser till EU:s dataskyddsförordning, 2 kap. 4 § (ändrad t.o.m. SFS 2026:1589)
United Kingdom13UK GDPR Art. 8(1) (as amended by S.I. 2019/419 from 31.12.2020); DPA 2018 s.9 omitted from 31.12.2020
Austria14Datenschutzgesetz (DSG) § 4 Abs. 4
Bulgaria14Закон за защита на личните данни (ЗЗЛД), чл. 25в (нов – ДВ, бр. 17 от 2019 г.)
Cyprus14Ν. 125(Ι)/2018, άρθρο 8 (article number as commonly cited; the age itself is confirmed by the DPA page)
Italy14D.Lgs. 196/2003 (Codice privacy) art. 2-quinquies, comma 1 (inserted by D.Lgs. 101/2018, in force 19-9-2018)
Lithuania14Asmens duomenų teisinės apsaugos įstatymas Nr. I-1374, art. 6 (as restated by Law No. XIII-1426 of 30 June 2018)
Spain14Ley Orgánica 3/2018 (LOPDGDD) art. 7.1
Czechia15Zákon č. 110/2019 Sb., o zpracování osobních údajů, § 7
France15Loi n° 78-17 du 6 janvier 1978 (Informatique et Libertés), article 45
Greece15Ν. 4624/2019 (ΦΕΚ Α' 137/29.08.2019), άρθρο 21
Slovenia15Zakon o varstvu osebnih podatkov (ZVOP-2), Uradni list RS 163/2022, 8. člen (1); in force 26 Jan 2023
Croatia16Zakon o provedbi Opće uredbe o zaštiti podataka (NN 42/2018), članak 19
Germany16No national derogation: GDPR Art. 8(1) default of 16 applies. BDSG 2018 has no Art. 8 provision.
Hungary16No national derogation: GDPR Art. 8(1) default of 16 applies. The Infotv. (2011. évi CXII. törvény) has no Art. 8 age rule.
Ireland16Data Protection Act 2018 (No. 7 of 2018), section 31(1)
Liechtenstein16GDPR Art. 8(1) default (via EEA); Datenschutzgesetz (DSG) LGBl. 2018.272 contains no lower age
Luxembourg16GDPR Art. 8(1) default; Loi du 1er août 2018 (CNPD law) sets no lower age
Netherlands16GDPR Art. 8(1) default (no derogation); UAVG art. 5(1) applies the same 16 to other consent
Poland16GDPR Art. 8(1) default (Ustawa o ochronie danych osobowych 2018 sets no lower age)
Romania16GDPR Art. 8(1) default (Legea 190/2018 sets no lower age)
Slovakia16Zákon č. 18/2018 Z. z. § 15(1) (mirrors GDPR Art 8 default; version in force from 18.08.2026)
SwitzerlandNo fixed ageRevised Federal Act on Data Protection (FADP/DSG, SR 235.1, in force 1 Sept 2023): no fixed age; capacity of judgement (Urteilsfähigkeit, Art.

What the numbers show

  • 13: the UK, Belgium, Denmark, Estonia, Finland, Latvia, Malta, Portugal, Sweden, Norway and Iceland.
  • 14: Austria, Bulgaria, Cyprus, Italy, Lithuania and Spain.
  • 15: Czechia, France, Greece and Slovenia.
  • 16: Croatia, Germany, Hungary, Ireland, Luxembourg, the Netherlands, Poland, Romania, Slovakia and Liechtenstein, most by keeping the GDPR default.
  • Switzerland is not bound by GDPR, and its revised data protection law sets no fixed age; a child's capacity of judgement decides.

No country changed its age between 2024 and October 2026. Spain and Portugal have discussed raising theirs to 16 and Norway to 15, but none of these is law.

Why it matters for parents

The digital age of consent is not a social media ban. It decides when a service needs a parent's consent to rely on consent to use a child's data. Apps still set their own minimum ages, usually 13 (see each app's age), and some countries are adding separate social media age laws, such as the proposed EU KIDS Act, which would let children open their own account from 15.

EU rules on minors online

  • Digital Services Act guidelines on protecting minors were published by the European Commission on 14 July 2025.
  • The EU age-verification app has seven frontrunner countries (Cyprus, Denmark, France, Greece, Ireland, Italy and Spain); a Commission recommendation of 29 April 2026 asks countries to roll out age verification by the end of 2026 (European Commission).
  • The EU KIDS Act, proposed on 17 September 2026, would ban social media accounts under 13 and allow parent-managed accounts at 13 and 14; it is not law.

See the digital age of consent map and the sortable table tool.

Sources

Each country's row links to its national data protection law or regulator page. EU items: European Commission, EU age verification and age verification FAQ.

Frequently asked

What is the digital age of consent?

The age at which a child can agree, without a parent, to an online service processing their personal data on the basis of consent. GDPR Article 8 sets 16 as the default and lets each country lower it to as low as 13.

What is the digital age of consent in Germany?

16. Germany did not set a lower age, so the GDPR default applies.

What is the digital age of consent in the UK?

13, under UK GDPR. Ministers can now change it by regulations, but decided in July 2026 not to change it at this stage.

Does the digital age of consent mean a child can use social media?

Not exactly. It is a data-protection rule about consent. Apps set their own minimum age (usually 13), and some countries have separate social media age laws.

Which countries in Europe use 16?

Croatia, Germany, Hungary, Ireland, Luxembourg, the Netherlands, Poland, Romania, Slovakia and Liechtenstein, mostly because they kept the GDPR default.