>>106474887 (OP)
EU Digital Services Act, article 28 paragraph 2. Where there's a reasonable suspicion a user of a service is a minor, said service may not use direct targeted advertising for that user nor build up a profile of information to effectively do so.
Under paragraph 1, services are required to protect minors against harmful content as well. But paragraph 3 limits that obligation so it does not apply where the only possible means of age verification involves forking over personal data such as mugshots for age estimation, CC info, or copies of national IDs.
This is why you should be weary of shitholes like X which are playing the "think of the children!" card to get users from not just the UK (where the Online Safety Act actually does require this), but also from the EU to hand over personal data for age verification -- when in reality the only reason they legally need to do so in the EU, is because without you having proven you're of legal age they're not allowed to target you with aggressive scumbag advertising.