On July 9, 2026, the Italian data protection authority, Garante, fined Character.AI’s operator, Character Technologies, €158,000 (approx. $181,000) for ineffective age verification mechanisms and defaulting minor users’ profiles to public. This is not an isolated incident—in the same month, New York passed a bill banning minors from using AI companion chatbots, and the federal GUARD Act is currently under review. If you use Character AI or other AI roleplay/companion platforms, this guide explains what happened, the regulatory trends, and what data security signals to look for when choosing a platform.
What Happened: Garante’s Technical Audit, Not Just Paperwork
Garante’s penalty was not based on a simple document review, but on an actual technical audit. They discovered two key vulnerabilities:
First, while Character.AI had a date-of-birth verification in place, and European users under 16 should theoretically be blocked, investigators found that a 15-year-old could still successfully register, rendering the age limit ineffective. Second, profiles of users identified as minors were set to “public” by default, which clearly contradicts the platform’s stance on “protecting minors.”
Beyond these core issues, Garante also noted procedural failures, including the late submission of Character Technologies’ Data Protection Impact Assessment (DPIA) and a delay in appointing an EU representative.
Beyond the Fine: Garante’s “Homework”
More noteworthy than the fine amount are the three improvement measures Garante required Character Technologies to complete within 120 days: ensure the age verification mechanism is effective, establish a “cooling-off period” for blocked minor accounts to prevent immediate re-registration with a different birthday, and change the default profile status for minors to private. These requirements implicitly acknowledge that the current design flaws were not just “oversights,” but systemic issues.
Event Timeline
Looking at the entire event, the timeline is quite concentrated:
Beyond Italy: 2026 as a Watershed for AI Companion Regulation
If you only look at the Garante case, you might think Italy is particularly strict. However, looking at legislative trends in 2026, it is clear that “whether AI companions should be restricted for minors” has become a global issue, and Europe is not the only region moving quickly:
At least 7 US states have introduced relevant bills. Idaho, Oregon, and Washington have legislated to prohibit chatbots from claiming consciousness to minor users or initiating sexually suggestive conversations. This means regulators are no longer just looking at “whether there is age verification,” but are now including “the content of the robot’s responses” in the scope of regulation.
New York’s Direct Approach: Banning Under-18s
Compared to Italy’s requirement to “fix age verification,” New York has chosen a tougher approach. In June 2026, the State Senate and Assembly passed bill S 9051 with overwhelming votes of 60-0 and 137-0, respectively, directly prohibiting AI companies from providing “companion-style” chatbot services to minors. The New York Attorney General can impose fines of up to $25,000 per violation on non-compliant companies. This legislative logic of “simply banning use” rather than “patching loopholes” reflects lawmakers’ lack of trust in current age verification technology.
What This Means for AI Roleplay/Companion Users
If you are an adult user, you will not be directly affected by these regulations in the short term, but several trends are worth noting. First, to comply with regulations, platforms may strengthen age verification processes in the near future (e.g., requiring ID uploads or facial age estimation), which may make the user experience more cumbersome. Second, if you have teenagers using similar platforms, this regulatory trend is a good opportunity to re-examine which platforms they are using and whether the platform’s content rating and privacy settings are reasonable. Third, for users who value data privacy, “whether the platform’s profile is public or private by default” is a detail worth prioritizing—the issue pointed out by Garante this time is essentially that the default settings were not in the user’s best interest.
All-Ages Design vs. Reactive Fixes: WeavAI’s Path
The problem Character.AI encountered this time stems from the fact that it serves both “all-ages” and “mature-themed” content. Age verification thus becomes the most critical, yet most prone-to-failure, line of defense in the entire system—once the verification mechanism is bypassed, the range of content accessible to minor users is completely out of control.
WeavAI has chosen a different path in its product positioning: all-ages design, with the platform itself not supporting the generation of pornographic or NSFW content. This means that even if there is a loophole in age verification, the content accessible to users is inherently limited to family-friendly anime-style interactive novels and roleplay, avoiding the structural risk of “minors bypassing verification to access inappropriate content.”
Of course, this does not mean that WeavAI does not need to pay attention to data privacy and account security—any platform that collects user data should treat “defaulting to the user’s side” as a basic principle. But at least regarding the core risk of this incident—”minors accessing inappropriate content”—the all-ages, no-NSFW product design avoids this problem at the source, without needing to rely on age verification, a defense line easily bypassed.
If you are looking for a platform that is natively in Traditional Chinese, anime-styled, and features both interactive novels and roleplay, you can experience the core gameplay directly on the WeavAI homepage. New users get 15% off their first top-up (use code WELCOME15), and you can also claim 500 points for daily check-ins.
Conclusion: The Age Verification Storm Has Just Begun
€158,000 is a drop in the bucket for a multi-billion dollar company, but the true significance of this case is that it proves “age verification” is no longer a soft commitment for self-regulation by platforms, but a hard obligation that will be tested by regulators and can lead to actual fines. Combined with New York’s blanket ban and the progress of the federal GUARD Act, more platforms are likely to be forced to adjust their minor protection mechanisms in the second half of 2026. Whether you are a long-term user of a platform or are currently comparing which AI roleplay/companion platform to choose, “how this platform handles age verification and privacy defaults” is worth adding to your evaluation checklist.
