EU Launches Age Verification App Amid Privacy and Security Concerns
On April 15, 2026, Ursula von der Leyen, President of the European Commission, revealed that the European Age Verification App is now operational, mandating user identification for third-party entities to safeguard children online. Pilot programs are underway in France, Denmark, Italy, Spain, Greece, Cyprus, and Ireland, with intentions to incorporate the app into national digital ID wallets. However, shortly after its debut, the app was compromised, highlighting security vulnerabilities. A March 2026 review identified weaknesses in the issuer component. Although the EU's digital identity wallet is presented as optional, it has drawn criticism for possibly becoming mandatory, as evidenced by Germany's proposal regarding social media access. Digital activist Michael Ballweg expressed concerns about the app's open-source assertions.
Key facts
- European Commission President Ursula von der Leyen announced the European Age Verification App on April 15, 2026.
- The app is designed to protect children from online bullying, addictive content, and predators.
- France, Denmark, Italy, Spain, Greece, Cyprus, and Ireland are piloting the app.
- The app was hacked within minutes, exposing security flaws in PIN and biometric checks.
- A March 2026 security analysis found vulnerabilities that could reduce privacy protections.
- The EU's digital identity wallet is based on the eIDAS 2.0 regulation and aims for 80% adoption by 2030.
- Germany's Social Democratic Party proposed making the EUDI Wallet mandatory for social media access.
- Similar systems in Australia, Sweden, and with companies like AU10TIX have experienced data breaches.
Entities
Institutions
- European Commission
- European Union
- Naked Capitalism
- Reclaim the Net
- Electronic Frontier Foundation
- World Economic Forum
- Rockefeller Foundation
- ID2020
- Microsoft Health
- IBM
- Vaccine Collective Initiative
- Common Pass
- Good Health Pass Collaborative
- Bank ID
- AU10TIX
- Discord
- Big Brother Watch
- The Grayzone
- STOPCOMMONPASS
- International Cyber Digest
Locations
- France
- Denmark
- Italy
- Spain
- Greece
- Cyprus
- Ireland
- Germany
- Austria
- Sweden
- India
- Australia
- United Kingdom
- Turkey
- Brazil
- United States
- Washington
- Brussels
- Ukraine
- Gaza
- Israel
- Switzerland
- Netherlands