Norway has confirmed that its forthcoming law restricting social media access for children under 16 will explicitly cover Roblox, Snapchat and TikTok, moving beyond the general framework it outlined earlier this year. The clarification, reported by Reuters, marks a shift from policy intention to concrete enforcement scope, and it places gaming platforms alongside traditional social networks for the first time in a major European legislative effort.
From Principle to Platform List
When Norway first announced its plans in April, officials described a bill due by the end of 2026 that would require technology companies to verify users' ages before granting access. What remained unclear was which services would actually fall under that obligation. By naming Roblox, a platform often categorized as a game rather than a social network, Norway has signaled that it intends to judge services by their features and risks rather than by how they are marketed or labeled.
The government's working definition is deliberately broad: any platform whose design features or content pose risks to children's safety, or to their emotional, cognitive or physical development, can be classified as harmful. That framing allows regulators to capture services built around infinite scrolling, algorithmic recommendation, open chat with strangers, or reward loops designed to maximize engagement, regardless of whether the platform calls itself a social network, a messaging app or a game.
What the Law Is Meant to Address
Children and families minister Lene Vaagslid has framed the legislation as a response to a cluster of interconnected risks rather than a single threat. These include illegal marketing aimed at minors, exposure to harmful or age-inappropriate content, addictive design patterns, and unwanted contact from strangers, a risk that has grown alongside the rise of open chat and friend-matching features on platforms built around user-generated content.
The ministry has been careful to distinguish between platforms it considers broadly harmless, such as standard messaging services and many games, and those built around mechanisms that keep young users engaged for extended periods or expose them to unmoderated interactions. Under the proposed system, companies would also face a direct incentive to redesign addictive features or strengthen content moderation, since doing so could move a platform out of the restricted category altogether.
A Widening International Pattern
Norway's move fits into a broader regulatory trend already visible across several continents. Australia implemented a ban on social media access for children under 16 in December of last year, becoming one of the first countries to enforce such a restriction nationally. California has introduced its own rules limiting specific social media features aimed at minors, while Vietnam has proposed parallel restrictions covering both social platforms and online gaming. The United Arab Emirates has gone further still, barring children under 15 from holding social media accounts outright.
The United Kingdom is now weighing similar measures that could extend to gaming platforms, suggesting that the line between "social media" and "online game" is eroding as a regulatory category across multiple jurisdictions, not only in Norway.
The Hard Part: Verifying Age
The central technical and legal challenge behind all these efforts is age verification itself. Placing responsibility on technology companies to confirm a user's age raises immediate questions about what methods are acceptable, how much personal data such verification requires, and how those systems interact with children's existing privacy protections. A poorly designed verification regime risks substituting one problem for another, trading unrestricted access for intrusive data collection.
Norway has not yet detailed the specific verification mechanisms the 2026 bill will require, but the direction of travel is clear: platforms will no longer be able to treat age checks as optional or symbolic. For companies like Roblox, Snapchat and TikTok, each built on different models of interaction and monetization, compliance will likely mean distinct technical responses, and the coming months will show how far regulators are willing to go in specifying exactly what those responses must look like.