Government Regulation No. 17 of 2025 on Child Protection in Electronic Systems
In forceThe Regulation applies to every Electronic System operator, distinguishing operators in the public sphere from those in the private sphere, and requires each to disclose the minimum age and age range able to use its Product, Service, or Feature, to provide a mechanism verifying whether a user is a child, and to provide a mechanism for reporting a Product, Service, or Feature that violates or risks violating a child's rights.
Article 20(2) sets five age bands: ages 3 to 5, 6 to 9, 10 to 12, 13 to 15, and 16 up to under 18. Article 21(1)(a) lets a child under 13 hold an account only on a Product, Service, or Feature specifically designed for a child's use, carrying a low risk profile, and only with parental consent.
Article 22 requires an operator performing age verification to protect the privacy and personal data of users, particularly children, to calibrate the verification mechanism's level of assurance to the risk the Product, Service, or Feature poses to a child's rights, to process verification data only for that purpose and delete it once the purpose is fulfilled (subject to any statutory retention duty), and to give users a mechanism to dispute or seek correction of an age determination.
Oversight of compliance sits with the Minister, who may monitor, investigate reports and complaints, and act on the results of an investigation; the specific administrative sanction types are set out later in the Regulation's own text, not described here.
| Age threshold | 18 |
| Enforcement body | The Minister responsible for overseeing the Regulation's implementation (Article 24(1)) |
Source: Full text of law