On 6 February 2026, the Bill establishing minimum requirements and a mandatory certification regime for age verification mechanisms in digital services and applications was introduced to the Chamber of Deputies. The Bill applies to digital platforms, applications, and content providers offering age-restricted content or services that may affect the rights of children and adolescents, including foreign providers operating in the domestic market. It requires the use of systems homologated by the Data Protection Authority and independently certified age verification solutions. The framework emphasises privacy-preserving methods and sets limits on data collection, retention, profiling, and the use of biometric data. The Bill also introduces audit, transparency, and bias-mitigation obligations. Providers must comply within 12 months of publication, while foreign providers are granted 18 months. After these deadlines, non-compliance may result in sanctions, including the potential blocking of services.
Original source