There are widespread concerns about the online harms to children operating online. As such, governments have enacted laws to require online service providers to deploy age verification to prevent such harms. We investigate the following three research questions regarding this topic: (1) To what extent have different governments legislated age verification controls? (2) Do governments embrace a responsibilization strategy when it comes to online age verification? and (3) How does the UK public feel about online age verification legislation? We find that governments are applying a responsibilization strategy, which has led to widespread deployment of privacy-invasive or ineffective age verification. The former violates the privacy of underage users, with the latter undermining the overarching aims of the legislation. We have also found general disengagement and a lack of trust in the government amongst the public with regards to new online age verification laws within the UK. To conclude, despite governments globally looking to put more robust online age verification mechanisms in place, there remains a general lack of privacy preservation and affordable technological solutions. Moreover, the overarching aims of the online safety and age verification legislative changes may not be satisfied due to the general public stakeholder group’s disengagement and lack of trust in their government.
Age verification: Child protection or privacy risk?
With more platforms and governments asking for age verification, we look at the options and the implications.
What Would Online Age Verification Mean for Speech, Privacy, and Youth Online Safety?
IACIS 2026 - OpenConf Abstract Submission, Peer Review, and Event Management System
As lawmakers across the United States move to require age verification for access to adult content online, new questions are emerging about the unintended risks these laws create. While intended to protect minors, many of these policies rely on systems that collect and store overly sensitive personal information such as government-issued IDs or biometric data without adequate safeguards. This introduces serious cybersecurity vulnerabilities, privacy concerns, and potential legal liability for platforms and users alike. Some major platforms have already withdrawn from certain states rather than comply, raising questions about the real-world feasibility of these laws. This study examines the intersection of digital privacy, cybersecurity, and legal compliance in the context of mandatory age verification. It analyzes the risks posed by identity-based and biometric systems, the role of third-party vendors, and the inconsistencies in how states define and enforce these requirements. The paper evaluates several age verification models and concludes that attribute-based verification systems that confirm age eligibility without revealing full identities offers the most secure and privacy-conscious path forward. The findings underscore a critical need for better-designed legislation that balances child protection with digital rights and security. This research provides targeted recommendations for policymakers, platform operators, and cybersecurity professionals, urging a shift toward transparent, accountable, and technically sound solutions before flawed systems become entrenched.
Who’s Harmed by Age Verification Mandates?
Age-verification laws may sound straightforward to some: protect young people online by making everyone prove their age. But in reality, these mandates force users into one of two flawed
Age Verification Mandates Would Undermine Anonymity Online
Age verification systems are surveillance systems. Mandatory age verification, and with it, mandatory identity verification, is the wrong approach to protecting young people online. It would force
The Dangers of Age Verification Provisions
One proposed solution to ensuring safe youth online experiences is age verification provisions, which require platforms to confirm the ages
European Age Verification Solution
The European Commission is developing a harmonized, EU-wide approach to age verification, accompanied by a comprehensive age verification blueprint that is intended to facilitate practical adoption across all Member States and can be customised to the national context. Built upon the robust European Digital Identity Wallet framework, this user-friendly and privacy-preserving age verification solution enables individuals to demonstrate their eligibility for age-restricted online services, such as those restricted to adults, without disclosing more personal information than absolutely necessary. By design, the solution addresses and supports compliance with Article 28 of the Digital Services Act, helping online service providers meet legal requirements for age checks while safeguarding user privacy.
Age verification is coming for the internet — and it’s already raising red flags
Legislative efforts to age-gate parts of the internet are gaining traction. Some experts warn of compliance complications and data security breaches.
The Digital Loophole: 11th International Conference on Information Systems Security and Privacy, ICISSP 2025
Social media platforms are an integral part of daily life for nearly five billion people worldwide. However, the growing presence of underage users on these platforms raises significant concerns regarding children’s exposure to harmful content and its impact on their mental health. This paper examines the effectiveness of age verification measures implemented on leading platforms Facebook, YouTube, Instagram, TikTok, Snapchat, and X. We evaluate the age verification processes required for account creation by simulating the registration steps for minors on these platforms. We also compare these methods to best practices in online age assurance in finance, betting and public transportation sectors. IEEE provides a standard for evaluating the age assurance of a platform or service. Our study benchmarks each platform’s approach against the IEEE standard for robustness. Our research identifies gaps that allow underage users to easily bypass existing age restrictions, with particular practices such as allowing disposable emails and basic browser refreshes further weakening self-declared age checks. The findings highlight the need for more robust age verification measures by social media applications to support their stated age limit policies. This work emphasises the urgent need for stronger and more reliable age verification methods to align the digital age of consent across EU member states and beyond with the minimum age requirements on social media.
Online age-verification tools spread across U.S. for child safety, but adults are being surveilled
New age-verification laws and tools are designed for child safety on social media and the internet, but adults are in the crosshairs, say privacy experts.
#cybersafety #ageverification #privacy #minors #ai | Parry Aftab
Internet Age-Verification Causing More Risks than It’s Worth This is not a new issue. Regulators and policymakers have raised it for the last 28 years as the way the keep kids safer online. They compare it to having to flash an ID to purchase regulated content or items (porn, cigarettes, alcohol, restricted medications, age-restricted movies, amusement rides, etc.) But verification online is very different and vastly riskier than flashing an ID in real life. For one, it’s collecting personally-identifiable information about our kids. For two, it puts that information in the too-often untrustworthy digital hands of tech companies. For three, while porn, alcohol and regulated drugs may be a clear-cut case for restricting access to adults, access to the Internet is very different. Yet, regulations begun in the UK and adopted globally have begun a weighted cybersafety approach that, in my humble opinion, prefers excluding young people from digital technology over teaching the cybersafety and digital life skills. That, in my 32 years of work in the fields of cybersafety and protection of minors online, was and remains a mistake. One of my best known quotes, repeated in Congressional and state legislative testimony and in the media is: “The greatest single risk our children face online is being denied access. We have solutions for everything else.” (my testimony before the FTC) Some proponents of age-verification have opted to denying them access unless they give up confirmable personally-identifiable info, such as selfies, feeding AI with PII, and govt or school credentials. I argue that this gives social networks, game providers and digital app operators a wealth of PII to be used for profiling, marketing and collecting far too much. With their privacy at stake, too often incompetent, malicious and greedy producers and mega-tech industry players, can’t and shouldn’t be trusted with the personal info of our most vulnerable - our kids. And AI will now be tasked with collecting everything it can find about our kids to be able to “age-verify.” (It’s ability to age-verify is less reliable with youth as their data-sets are more limited.) I served on a task force appointed by 49 state attorneys general, charged to research and weigh-in on this issue. We concluded that age-verification wasn’t feasible. While this task force was formed many years ago, with the exception of a fortified AI, not much as changed. Our children’s privacy remains, or should remain, paramount. We have robust filtering and blocking technologies. The adult industry has adopted an age-gated model. And parents can restrict access using device-specific tools. And, many well-intentioned age-verification laws were adopted too quickly for thoughtful discourse. Or by governments more prone to censorship/content restrictions. I fear in our quest to protect our kids we have thrown our babies out with the bath water. #cybersafety #ageverification #privacy #minors #AI
Age assurance across Europe: how countries are safeguarding minors online
In 2024, regulators and online service providers fully aligned around the Digital Services Act (DSA), a groundbreaking piece of legislation that regulates the provision of online services within the EU, regardless of whether the provider is based in Europe or not. This year, the focus has shifted to implementing these legislative principles in practice. In particular, measures aimed at safeguarding minors have gained significant momentum, with age verification being a key example.
Who Really Sees Your ID When You Verify Your Age Online? - Intercede
We’re asked to prove our age online more than ever before. Whether we’re accessing social platforms, buying age‑restricted products, or visiting sites that require identity checks by law. Age verification has quickly become a standard part of the digital experience. But as these systems spread, so do the questions around what really happens to the … Continue reading ""
The Age-Verification Trap
Platforms are caught in a dilemma: enforce age restrictions or protect user privacy. How are they navigating this tricky terrain?
Exploring Privacy-Preserving Age Verification: A Close Look at Zero-Knowledge Proofs
A path toward protecting young people online that doesn’t sacrifice their privacy or data security, amid persistent concerns about screen time.
Children’s Rights and Online Age Assurance Systems
Abstract Age assurance is a way to prevent children accessing content, products or services that are potentially harmful to them, ranging from gambling services or alcohol or tobacco or, increasingly, certain products and services online. Now that children’s lives are mediated by digital technologies, policymakers are deliberating over the legal, technical and practical challenges. These have been little examined from the perspective of children’s rights. By combining legal and social research methods, this article examines the legal requirements for age assurance in Europe, assesses compliance by companies and reveals the consequences for family life. In law and practice, we show that age assurance is often ineffective in protecting children from online risk of harm. Further, as currently implemented it risks children’s other rights – to non-discrimination, privacy, to be heard, and their civil rights and freedoms, and remedy. We identify promising directions for the use of age assurance in child online protection, focusing on European policy, regulators and civil society actors.
