Parental Consent Is Not Child Protection
Parents are repeatedly told that they can protect their children online by giving permission, activating parental controls and supervising digital activities. Yet parental consent does not change how a platform operates. Moreover, the presence of a safety setting does not establish that it works effectively. This matters when governments consider consent as a substitute for stronger child protection rules.
A 2 November 2026 Tech Policy Press article by Jonathan Haidt, Marisa Shea, Zach Rausch and Ravi Iyer challenges parental permission models for social media. Its authors argue that these models reinforce peer pressure, expose children during sensitive developmental years and leave the underlying design risks untouched. Their conclusions deserve careful scrutiny, especially when combined with independent evaluations of parental controls.
At Children of the Digital Age (CODA), we support a smartphone free childhood, delaying social media access and reducing unnecessary screen time. We also recognise that parents need practical, evidence based guidance rather than reassurance built on untested promises. The central question is therefore straightforward, why should permission from a parent be treated as proof that a product is safe for a child?
The illusion of parental choice
Children are influenced by what their friends use, where they communicate and how they organise their social lives. Meanwhile, parents may feel pressure to grant access because they fear their child will be excluded. The Tech Policy Press authors cite a 2025 Harris Poll in which 54% of US parents surveyed said they felt they had to give children social media because so many other families had already done so.
This is not necessarily a freely chosen endorsement of the platform. Instead, parental consent can become a response to collective pressure. Once some families approve an app, other children ask for it too. Consequently, a policy built around individual permission may do little to relieve the pressure facing the whole community.
Permission cannot fix harmful design
A signed consent form does not remove infinite scrolling, unwanted contact, harmful recommendations or commercial incentives that encourage prolonged engagement. Likewise, parental approval does not prevent a child encountering manipulation, bullying or inappropriate content. The risks depend on the platform’s systems, the child’s age and circumstances, and the actual effectiveness of safeguards.
Research into adolescent technology use raises concerns about attention, mental health, sleep and social comparison. However, not every observational association proves that social media caused a particular outcome. We must distinguish evidence of risk from certainty about causation. That distinction strengthens, rather than weakens, calls for careful regulation and independent research.
What happens when parental controls fail?
CODA examined this issue in Child Safety Features Failed Independent Tests, drawing on work associated with Dr Laura Edelson and Northeastern University’s Cybersecurity for Democracy initiative. The question is not whether all controls are useless. It is whether the protections advertised to families work reliably enough for parents to trust them.
Parental controls are not a single protective shield. Screen time restrictions manage duration, while contact settings restrict certain interactions. Content filters attempt to reduce exposure to material considered unsuitable. None of those functions automatically verifies another person’s identity, detects every harmful conversation or guarantees safety when a child changes services.
For this reason, parental controls can be useful without being comprehensive. Parents should use suitable settings and review them regularly. However, companies should also explain their limitations, demonstrate their effectiveness and fix failures promptly.
A safety feature that exists only in a settings menu is not the same as a safeguard shown to protect children in practice.
Gaming research reinforces the concern
Our Online Gaming Child Safety Gaps 2026 article considered findings from the October 2026 BOSE transparency report. This work raised questions about child protection measures on games that combine play, user generated content and social interaction. Crucially, the presence or uptake of a control must not be confused with its measured effectiveness.
We also documented the danger of conversations moving between services in Online Gaming Grooming and Private Messaging Risks. Once communication moves to another app, the settings on the original game may no longer offer protection. Therefore, education about grooming, secrecy and manipulation must accompany technical safeguards.
Ireland is testing whether protections actually work
On 8 September 2026, Coimisiún na Meán announced an investigation into X under Ireland’s Online Safety Code. The regulator raised concerns about potentially ineffective age assurance and whether the service’s parental controls met required functions, were accessible and were brought to users’ attention. These are matters under investigation, not established findings of wrongdoing.
The case illustrates an important regulatory principle. It is not enough for companies to state that parents can enable controls. Regulators must be able to examine whether those controls are effective, accessible and properly implemented. Ireland’s Online Safety Code provides a framework for assessing relevant obligations on designated video sharing services.
Parental permission and the digital age of consent are different
Ireland’s digital age of consent is 16 under data protection legislation. However, this is not a general legal ban on social media accounts for every child under 16. The rule applies where an online service relies on consent as its legal basis for processing children’s personal data. Parents therefore need to distinguish data protection consent, the permission a family gives a child and evidence that a service is safe.
Confusing these concepts creates false confidence. A service may comply with one set of rules while still presenting design or communication risks. Similarly, a parent’s permission cannot excuse a platform from its separate legal duties. Ireland’s Data Protection Commission provides further guidance on children’s personal data rights.
The proposed EU KIDS Act goes further
The European Commission’s EU KIDS Act proposal of 17 September 2026 would introduce a graduated approach to social media access. Under the proposal, under 13s could not access social media, children from 13 to under 15 could use restricted parent managed mini accounts and young people from 15 could manage their own accounts. The proposal also calls for stronger safety by design requirements across services used by minors.
Significantly, the Commission proposes restrictions on features encouraging excessive use, tighter contact protections, private by default profiles and specific safeguards for AI companions. It would also shift more of the burden of demonstrating safety onto very large platforms. This remains a proposal, not a law already in force. The European Parliament and Council must consider the text.
Children’s rights still matter
Strong age protections must also respect privacy, accessibility and children’s opportunities for development. Some young people benefit from supportive online communities, educational material and meaningful digital participation. Moreover, poorly designed restrictions may push children towards less regulated services or encourage false age declarations. Policymakers should evaluate those unintended consequences rather than ignoring them.
The goal should be age appropriate access to demonstrably safer services, not the assumption that all digital participation is harmful. Importantly, regulators should examine outcomes, including whether restrictions reduce harmful exposure and whether young people can still obtain appropriate support. Evidence should guide both the implementation and revision of policy.
What should parents do now?
Parents should delay unnecessary access, choose age appropriate services and keep communication open. They should also review contact settings, private messaging features, reporting tools and who can see their child’s activity. CODA’s free parental controls guide and parental control apps guide explain available options and limitations.
Equally, families should discuss grooming, secrecy, inappropriate requests and the danger of moving conversations to private channels. Children need to know they can report a worrying experience without automatically being blamed or punished. Settings are one layer of protection, while trust, education and communication provide others.
Child protection must begin with corporate accountability
Parents have an essential role in children’s digital lives, but they cannot audit every algorithm or discover every technical weakness. Technology companies can design safer systems, test them independently and provide clear evidence of how their protections perform. Meanwhile, governments can establish enforceable standards and regulators can investigate failures.
CODA supports a smartphone free childhood, no social media for national school children and meaningful reductions in screen time. However, families should never be expected to compensate for hazards that platforms could prevent through safer design.
Parental consent is not proof of safety.
Parental controls are not a guarantee of protection.
Neither should replace enforceable responsibilities on technology companies.
References
- Haidt et al., Tech Policy Press (2 November 2026)
- Coimisiún na Meán investigation (8 September 2026)
- Irish Online Safety Code
- European Commission EU KIDS Act proposal (17 September 2026)
Further Reading from CODA
- Child Safety Features Failed Independent Tests
- Online Gaming Child Safety Gaps 2026
- Online Gaming Grooming and Private Messaging Risks
- Why Social Media Age Restrictions May Be Needed Until Platforms Improve Safety by Design
About Children of the Digital Age
Children of the Digital Age provides online safety education and training for schools, parents and organisations. Our guides support practical conversations about online behaviour and the choices people make. However, education and app settings do not replace safeguarding or professional support.
Send a message
Contact Children of the Digital Age to enquire about online safety education, parent sessions or training for your school or organisation.
