Is Instagram safe for a 12 year old? What that 13 really means

A family motif for deciding when a child is ready for an app

Somewhere today, a lot of parents will type “is Instagram safe for a 12 year old” into a search box. The variants are endless and oddly precise. Is Minecraft safe for a 7 year old. Is Fortnite safe for a 10 year old. Is Snapchat safe for an 11 year old. In each case the app answers with a single number, 13, and the number arrives carrying the weight of a rule.

It is not much of an answer. It was never built to be one.

Where the 13 actually comes from

The American Children’s Online Privacy Protection Act, passed in 1998, defines a child as “an individual under the age of 13”. What the law then regulates is data. It makes it unlawful to collect personal information from a child online except under conditions that include “verifiable parental consent”, plus a notice describing what is collected and how it is used.

Read that again for what it does not cover. Nothing about whether the content suits a twelve-year-old. Nothing about who is allowed to message them, or what a recommendation feed does with a bad night, or whether there is a chatbot sitting inside the app waiting to be talked to. It is a data-consent law, and 13 is simply the age at which its paperwork stops applying to the company.

Europe put the line somewhere else entirely. Article 8 of the GDPR says that below the age of 16, processing a child’s data is lawful “only if and to the extent that consent is given or authorised by the holder of parental responsibility”, then adds that member states “may provide by law for a lower age for those purposes provided that such lower age is not below 13 years”. So the age at which a child can consent for themselves depends on which country they happen to live in. A developmental fact would not shift when you cross a border. A negotiated one does.

The number that is actually doing the content work

Games have carried a second number for decades, and it behaves quite differently. The ESRB rates Everyone 10+ as content “generally suitable for ages 10 and up”, and Teen as “generally suitable for ages 13 and up”, each with the reasons attached: violence, crude humour, suggestive themes, language. That is a judgement about what is in the thing. It sits on the same product as the sign-up age, and the two numbers frequently disagree.

A game controller left on a sofa cushion
Games have carried two different age numbers for decades. Social apps are only now catching up.

Social apps have started admitting the gap. In April 2026 Meta expanded a “13+” content setting for Instagram Teen Accounts beyond its first four countries, and explained the method in unusually plain terms: “we reviewed our age-appropriate guidelines against movie ratings criteria for ages 13+ and updated them accordingly”, with the stated goal that “teens will see content on Instagram that’s similar to what they’d see in an age-appropriate movie by default”. Under-18s are placed into that setting and cannot leave it without a parent’s permission, and there is a stricter Limited Content option for parents who want less.

Look at what that move concedes. One number tells you when a privacy law stops applying to the company. A second, borrowed from the film industry, tells you what your child will actually see. A firm now runs both, which is about the clearest signal available that the first one was never doing the job parents assumed it was doing.

The gate is softer than it looks, too

Even as a legal line, 13 holds loosely. Ofcom said in July 2026 that it has serious doubts whether the age inference methods used by some popular social apps are fit for purpose, for a reason worth understanding: those systems guess a user’s age from behaviour, so they can only work “after the child has signed up and used the service for enough time for the inference to be made”. The regulator opened an investigation into TikTok’s age inference that month. We have written before about the two harder alternatives platforms are turning to, a face scan on Roblox and an ID upload on Discord.

Meanwhile the decision lands earlier than most families plan for. Ofcom’s 2026 research on children’s online lives, summarised by the safeguarding group Ineqe, found smartphone ownership jumping from 56% of ten-year-olds to 83% of eleven-year-olds. The device usually arrives a year or two before the birthday the apps ask about.

Four questions that beat the number

This next part is our view rather than anyone’s finding. Swap “is my child old enough for this app” for four questions you can answer in about twenty minutes, with the app actually open in front of you.

  • Who can start a conversation with my child in here, and can I switch that off? Contact is the risk that never appears in a content rating.
  • What does the feed do with a bad mood? Search once for something sad or angry, then watch what it offers next. That behaviour is the product.
  • Is there an AI in it, and what is it there for? The same Ofcom research found around one in ten eight to seventeen-year-olds have used AI “as a friend or someone to talk to”. A chatbot living inside a social app is a different proposition from one your child chose to open.
  • Which protections can my child quietly undo? If a setting reverts without telling you, it is decoration.
A kitchen table lit by a lamp in the evening
Twenty minutes inside the app tells you more than the number on the sign-up screen.

The Singapore read

Regulators are moving to take some of this off parents. Singapore’s Ministry of Digital Development and Information said in a July 2026 factsheet that it intends to require designated social media services to “keep users under 13 off their services”, alongside “age-appropriate experiences and safeguards” for older children up to 18. That is a sensible place to put the burden, and it will help.

But notice the shape of it. Even a perfectly enforced under-13 rule settles one year of your child’s digital life. Everything after that birthday is still a judgement, and it is yours.

So make the account yourself. Spend twenty minutes in it as a new teenage user, tap the things a bored child would tap, and see what the app offers when you give it nothing to work with. You will learn more in those twenty minutes than any number on a sign-up screen was ever going to tell you.

Was this useful?

Sources

  1. 15 U.S. Code 6501, Definitions (Children's Online Privacy Protection Act of 1998) · Legal Information Institute, Cornell Law School
  2. 15 U.S. Code 6502, Regulation of unfair and deceptive acts and practices in connection with the collection and use of personal information from and about children on the Internet · Legal Information Institute, Cornell Law School
  3. Art. 8 GDPR: Conditions applicable to child's consent in relation to information society services · GDPR-Info
  4. ESRB Ratings Guide · Entertainment Software Rating Board
  5. Instagram Expands Teen Accounts Inspired by 13+ Content Ratings (9 April 2026) · Meta
  6. Still Not Safe Enough: What Ofcom's Report Tells Us About Growing Up Digital in 2026 · Ineqe Safeguarding Group
  7. Social media companies have failed to enforce their minimum age requirements: Ofcom · Biometric Update
  8. Singapore's Next Steps in Building Child-Safe Digital Environments (Factsheet, 4 July 2026) · Ministry of Digital Development and Information, Singapore