+7 (777) 001 44 99
Қазақша
Русский
English
Tengrinews.kz – Kazakhstan is considering a legislative ban that would prohibit children under 16 from using social networks. An information security expert explained how technically feasible it is to “switch off” social media for teenagers and whether such restrictions can realistically be bypassed through a VPN.
What happened
The Ministry of Culture and Information (MCI) has developed a draft law on online platforms and the media. One of its provisions is a ban on children under 16 from creating accounts on social networks and any online platforms.
If the law is adopted, teenagers under 16 will not be able to register on TikTok, Instagram, YouTube-type video hosting services, or other platforms. The only exception will be messengers. According to the MCI, this measure would reduce the amount of “illegal content” and make the internet safer for children.
The draft has been published on the “Open NPA” portal for public discussion.
How social networks could be technically “switched off” for children
Co-chair of the Information Security Committee of the QazTech Alliance, Evgeny Pitolin, told Tengrinews.kz that blocking social networks for children is not as simple as “pressing a button”. The most difficult part is verifying a user’s age.
“Solutions do exist, but all of them have limitations, and none can guarantee 100 percent effectiveness,” he said.
There are several methods providers usually use to restrict access to websites and social networks:
- DPI (Deep Packet Inspection): The system “sees” which data is being sent to which applications (e.g., TikTok or Instagram) and can block them.
- Blocking domains and IP addresses: Providers simply deny access to certain websites. However, this is easily bypassed with a VPN.
- URL filtering: Specific pages or sections within a social network can be blocked.
- Operator-level restrictions: For example, slowing down or cutting off access to social networks for subscribers with children’s tariff plans, if such plans exist.
According to Pitolin, these are the most effective technologies within the context of the proposed restrictions.
"Technically, it is possible to create a very effective filtering system for children at the network level, but its implementation depends on the will of the providers and, importantly, on cooperation with families," the expert explained.
Is it possible to determine who is behind the screen - a child or an adult?
This is the most difficult question, says Evgeny Pitolin. Technically, systems that block traffic cannot determine a user’s age. According to him, other approaches are needed:
- Biometric age estimation, where AI analyzes a real-time selfie to assess age.
- Document verification, where a person uploads a photo of an ID (passport, ID card), and the system checks its authenticity.
- Indirect verification, such as linking an account to a bank card or requesting parental permission.
Another option is children’s SIM cards and tariffs, which can automatically restrict access to social networks.
By the way: Kazakhstan may introduce special children’s SIM cards — this initiative was proposed by the Ministry of Education in March of this year.
Can restrictions be bypassed through VPN or proxies?
According to the expert, completely blocking popular social networks is almost impossible — users will simply bypass the restrictions through VPN.
Reference: A VPN is a service that hides your real internet address and routes your traffic through another server. Websites then think you are accessing them from another country or device. This makes it easy to bypass blocks and remain more anonymous.
"Yes, regulators can force popular VPN services to block access to prohibited websites in the country, as Roskomnadzor does in Russia. However, this does not apply to thousands of lesser-known or corporate VPNs," Pitolin explained.
There are two more methods:
- Slowing down VPN traffic — the network identifies traffic that looks like VPN and deliberately reduces its speed.
- Shutting down websites and channels that explain how to bypass blocks.
But even in China, with its advanced internet control systems, complete blocking does not work in an absolute sense.
“Technically skilled users (businesspeople, scientists, students) widely use tools to bypass restrictions, such as paid or custom VPNs that disguise traffic as legitimate. The state is engaged in a constant ‘arms race,’ blocking new tools, but user demand and motivation create a steady supply of new solutions,” he said.
According to Pitolin, this system “creates a high barrier for ordinary users while leaving loopholes for motivated ones, making blocking effective for controlling the masses but not absolute.”
Thus, in Kazakhstan as well: the state can only make bypassing restrictions harder, especially for children.
"Technically, selective content filtering is possible, but its implementation is extremely complex and requires enormous resources," he said.
Mission impossible?
Summarizing, Pitolin explained that “strict age restrictions” are a task that is technically impossible to enforce with 100 percent accuracy.
“When the state formulates strict age restrictions, it essentially sets an ideally unachievable technical task for platforms: to reliably identify the age of every user in its territory. Since 100 percent identification is impossible, the regulator gains a formal basis for sanctions — fines, throttling, or complete blocking,” the expert said.
For international companies, losing an entire market is a serious threat. That’s why they usually engage in negotiations and agree, for example, to store data locally, filter harmful content, and establish legal entities in the country.
"Thus, child safety becomes a logical stepping stone for implementing broader regulatory goals that serve the purposes of informational and public security," Pitolin concluded.
