Elena Kountoura, a Greek MEP from The Left group, has submitted a written parliamentary question to the European Commission demanding technical assurances on the security, reliability and data protection of the newly announced EU age verification app for minors online. The MEP warns that identified weaknesses could undermine personal data protection and institutional credibility, affecting EU citizens, technology platforms, and the Commission's regulatory reputation.
The question, filed on 21 April 2026 under Rule 144, follows the Commission's announcement that the app is "technically ready". Kountoura points to expert analyses of the open-source code that revealed insufficient protection of stored sensitive personal data and the possibility of bypassing authentication mechanisms. She notes that the app was presented as ready while being acknowledged as a "demo version" under continuous development.
Concrete asks and policy orientation
Kountoura makes two specific demands: first, that the Commission assess the technical weaknesses and detail corrective measures already taken; second, that it reassess the implementation schedule until full compliance with EU security, reliability and data protection standards is ensured. The question references the zero-knowledge proof method, which allows age verification without sharing personal data with platforms, and cites the European Parliament's November 2025 resolution on protecting minors online, which called for strict conditions for secure age verification.
The MEP also invokes recent FRA data showing that most European citizens support age limits on social media use due to risks such as exploitation, exposure to harmful content, and addiction. This positions the question as balancing child protection goals with the need for robust technical safeguards.
Expected follow-up
The Commission is required to reply within approximately six weeks. Its answer will signal whether it acknowledges the flaws, plans to delay deployment, or considers the current version sufficiently secure. The outcome will affect technology platforms that may be required to use or match the app's standards under the Digital Services Act, as well as EU citizens whose data could be at risk.