Privacy / Regulation / AI Governance

Italy's Garante backs age checks under proposed EU Kids Act but calls for minimal data collection

Garante president Pasquale Stanzione told an Italian parliamentary committee that age verification and parental controls must respect minors' privacy and autonomy.

AnnouncementEUNotableProposalOfficial source
EU Kids Act: Garante wants age checks limited to strictly necessary data

Pasquale Stanzione, president of Italy’s data protection authority (Garante), gave evidence on 28 October 2026 to the XIV Committee of the Chamber of Deputies on the proposed EU Kids Act regulation. He welcomed age verification for minors using social media. He added that it should collect only the information strictly necessary, and that parental control tools must also respect children’s privacy.

The Garante asked legislators for better coordination with existing rules and stronger confidentiality safeguards for minors. Stanzione supported the proposal’s measures against addictive platform design, profiling and potentially harmful interactions. In his view these include chatbots that simulate personal relationships.

He also repeated earlier requests to the Italian legislator. These were graduated independent internet access, with risk-based thresholds and an initial phase of parental supervision, and attention to the risks of emotional dependency on empathy-simulating chatbots.

Why it matters

Platforms preparing for EU-level age verification should expect data protection authorities to test those systems against data minimisation. Collecting more identity data than an age check needs is likely to draw scrutiny. Teams designing parental controls, profiling of minors or companion-style chatbots should map these features now against both the draft Kids Act and existing GDPR duties, since the Garante is pressing for the two to be aligned.

Status: Proposal. Garante gave evidence to Italian parliament; EU regulation still a proposal

Sources

  1. Eu Kids Act, Stanzione: Tutela dei minori senza sacrificare privacy e autonomia — Garante per la protezione dei dati personaliPrimary source

Was this useful?

Prepared with AI assistance and reviewed by the editor before publication. Spotted an error? Tell us — see our editorial policy and methodology.

Governance areas

Legislation tracker

Institutions

Who should care

  • DPO
  • Legal & compliance
  • Product privacy leads
  • AI governance lead

Related

Latest

All news

Contact the editor

Tips, corrections, questions?

Write to The Steward, the editor of Data Governance Signal. Every message is read.

editor@datagovernancesignal.com