Legal framework for online age verification in France
France has one of the most developed age verification regimes in the EU, primarily focused on protecting minors from access to pornographic content online. The core legal basis is Article 227 24 of the French Penal Code, which makes it a criminal offence to allow minors under 18 to access pornographic material. This provision has existed for many years but was historically difficult to enforce online.
In May 2024, France adopted the Law to Secure and Regulate the Digital Space, commonly referred to as the SREN law. This law significantly strengthened enforcement mechanisms and clarified that online services making pornographic content available in France must implement effective age verification systems. Simple age declarations or click through confirmations are explicitly considered insufficient. The law applies to both French and foreign websites as long as the content is accessible from France.
The age verification obligations became fully enforceable in January 2025. A short transition period allowed limited interim solutions, but services are now expected to comply with the full technical standards issued by the regulator.
Scope of the age verification obligations
The current mandatory age verification regime applies primarily to online pornographic websites and services. This includes free and paid platforms, streaming sites, and content aggregators. The rules are content based rather than company based, meaning that any service distributing pornographic content to users in France can fall within scope regardless of where the company is established.
While pornographic content is the main focus, the legal framework is designed to expand. French authorities have signalled that similar age verification requirements may later apply to other age restricted services such as certain social media platforms, online marketplaces selling adult products, and other digital services that pose risks to minors.
Regulatory authority responsible for enforcement
The main regulator responsible for online age verification in France is the Autorité de régulation de la communication audiovisuelle et numérique, known as ARCOM. ARCOM was created by merging the former audiovisual regulator and the anti piracy authority, and it now oversees audiovisual media, online platforms, and digital communications.
ARCOM has the power to supervise compliance with age verification requirements for online pornographic services. It can issue formal notices to non compliant websites, require them to implement approved age verification systems, and refer cases for enforcement if they fail to comply. ARCOM can request court ordered blocking or delisting of websites that remain accessible to minors and can impose financial penalties in accordance with the SREN law.
ARCOM is also responsible for publishing the technical reference framework for age verification. This framework sets out what constitutes an effective system, including requirements that verification occur before access to content, that the system be robust against circumvention, and that it rely on an independent third party rather than self declaration.
Role of data protection authorities
The Commission nationale de l’informatique et des libertés, known as the CNIL, plays a key supporting role. CNIL is not the primary enforcement authority for age verification itself, but it oversees compliance with data protection and privacy law, including GDPR.
CNIL has formally reviewed and issued opinions on ARCOM’s age verification framework. A central concept endorsed by CNIL is double anonymity, meaning that the content provider should not know the user’s identity and the age verification provider should not know which website the user is accessing. Age verification systems must minimise data collection, avoid unnecessary retention of personal data, and provide strong security guarantees.
Interaction with courts and other authorities
French courts can become involved in individual enforcement cases, particularly where ARCOM seeks blocking orders or where companies challenge regulatory decisions. Courts have also imposed age related access obligations in specific contexts outside pornography, such as online sales of adult products.
At the European level, France’s regime operates alongside the EU Digital Services Act. The DSA requires platforms to assess and mitigate risks to minors and reinforces the legal basis for age appropriate design and access controls.
Future developments
France is actively considering extending age verification obligations beyond pornography. Political proposals include restricting access to social media for users under a certain age, often discussed as under 15, which would likely place additional responsibilities on platforms and expand ARCOM’s enforcement role. France is also monitoring EU level initiatives such as digital identity wallets and harmonised age verification tools, which could influence future national requirements.