Facebook's WhatsApp announces it will update privacy policy, raising its minimum age from 13 to 16 in Europe, and provide a data download tool ahead of GDPR
Paul Sandle / Reuters :
Context & Ripple Effects
Ahead of GDPR taking effect, WhatsApp is doing three things at once: rewriting its European privacy policy, lifting the region's minimum age from 13 to 16, and shipping a tool that lets users download their own data. The age change is the sharpest of the three — it removes an entire cohort of teen users rather than changing what data is collected about them.
It is not acting alone: the very next day, Snapchat announced it would stop retaining precise location history for under-16s in Europe as part of its own GDPR compliance push, making this a coordinated industry scramble rather than a one-off. The longer arc matters too — the 16-year floor proved temporary, with Meta later lowering the minimum age back to 13 in the UK and EU in 2024.
First-order effects
- European users aged 13–15 lose access to WhatsApp outright, while all European users gain the ability to export their data before GDPR enforcement begins.
- Facebook must re-paper WhatsApp's European terms so that consent flows are valid for users old enough to give it legally under the new regime.
Second-order effects
- Rivals face the same deadline: Snapchat's decision to purge precise location history for under-16s shows competitors converging on age-gated data handling rather than risking enforcement individually.
- The raised age bar shrinks WhatsApp's addressable teen base in Europe, pressuring Facebook to design compliant re-entry paths — which is exactly where the later parent-managed accounts for under-13s ended up.
Third-order effects
- The episode established that GDPR-era age floors are negotiable levers, not permanent rules: WhatsApp raised to 16 in 2018, cut back to 13 in 2024 after criticism from child safety groups, and by 2026 was building supervised accounts instead of exclusion — shifting the industry's answer from 'keep teens out' to 'let parents govern'.
- Regulators learned the same lesson in reverse: the transparency commitments WhatsApp later agreed to with the EU over its 2021 policy changes show compliance pressure settling into ongoing negotiated oversight rather than one-time pre-GDPR cleanup.
The trend: Platform age and privacy policies in Europe are oscillating with regulatory pressure, moving from blunt pre-GDPR exclusions toward parent-mediated access structures.