Platforms are caught in a dilemma: enforce age restrictions or protect user privacy. How are they navigating this tricky terrain?
Age verification: Child protection or privacy risk?
With more platforms and governments asking for age verification, we look at the options and the implications.
Age Verification Architecture
This document describes solution-agnostic and technology-neutral schema for how various intermediaries can gate content and services based on age. The analysis of the architecture is done along two dimensions: the efficacy of permitting or restricting access based on age, and the privacy cost of doing so. The document concludes with recommendations as well as critical privacy, security and human rights considerations.
Age verification is coming for the internet — and it’s already raising red flags
Legislative efforts to age-gate parts of the internet are gaining traction. Some experts warn of compliance complications and data security breaches.
Age Assurance Methods Explained
This blog also appears in our Age Verification Resource Hub: our one-stop shop for users seeking to understand what age-gating laws actually do, what’s at stake, how to protect yourself, and why EFF
The Digital Loophole: 11th International Conference on Information Systems Security and Privacy, ICISSP 2025
Social media platforms are an integral part of daily life for nearly five billion people worldwide. However, the growing presence of underage users on these platforms raises significant concerns regarding children’s exposure to harmful content and its impact on their mental health. This paper examines the effectiveness of age verification measures implemented on leading platforms Facebook, YouTube, Instagram, TikTok, Snapchat, and X. We evaluate the age verification processes required for account creation by simulating the registration steps for minors on these platforms. We also compare these methods to best practices in online age assurance in finance, betting and public transportation sectors. IEEE provides a standard for evaluating the age assurance of a platform or service. Our study benchmarks each platform’s approach against the IEEE standard for robustness. Our research identifies gaps that allow underage users to easily bypass existing age restrictions, with particular practices such as allowing disposable emails and basic browser refreshes further weakening self-declared age checks. The findings highlight the need for more robust age verification measures by social media applications to support their stated age limit policies. This work emphasises the urgent need for stronger and more reliable age verification methods to align the digital age of consent across EU member states and beyond with the minimum age requirements on social media.
The Dangers of Age Verification Provisions
One proposed solution to ensuring safe youth online experiences is age verification provisions, which require platforms to confirm the ages
Who’s Harmed by Age Verification Mandates?
Age-verification laws may sound straightforward to some: protect young people online by making everyone prove their age. But in reality, these mandates force users into one of two flawed
Online Age Verification: Government Legislation, Supplier Responsibilization, and Public Perceptions
There are widespread concerns about the online harms to children operating online. As such, governments have enacted laws to require online service providers to deploy age verification to prevent such harms. We investigate the following three research questions regarding this topic: (1) To what extent have different governments legislated age verification controls? (2) Do governments embrace a responsibilization strategy when it comes to online age verification? and (3) How does the UK public feel about online age verification legislation? We find that governments are applying a responsibilization strategy, which has led to widespread deployment of privacy-invasive or ineffective age verification. The former violates the privacy of underage users, with the latter undermining the overarching aims of the legislation. We have also found general disengagement and a lack of trust in the government amongst the public with regards to new online age verification laws within the UK. To conclude, despite governments globally looking to put more robust online age verification mechanisms in place, there remains a general lack of privacy preservation and affordable technological solutions. Moreover, the overarching aims of the online safety and age verification legislative changes may not be satisfied due to the general public stakeholder group's disengagement and lack of trust in their government.
Hack of Age Verification Company Shows Privacy Danger of Social Media
We’ve said it before: online age verification is incompatible with privacy. Companies responsible for storing or processing sensitive documents like drivers’ licenses are likely to encounter data
European Age Verification Solution
The European Commission is developing a harmonized, EU-wide approach to age verification, accompanied by a comprehensive age verification blueprint that is intended to facilitate practical adoption across all Member States and can be customised to the national context. Built upon the robust European Digital Identity Wallet framework, this user-friendly and privacy-preserving age verification solution enables individuals to demonstrate their eligibility for age-restricted online services, such as those restricted to adults, without disclosing more personal information than absolutely necessary. By design, the solution addresses and supports compliance with Article 28 of the Digital Services Act, helping online service providers meet legal requirements for age checks while safeguarding user privacy.
The limits of zero-knowledge for age-verification | Brave
ZKPs are often advanced as a technical remedy, promising privacy-preserving attestations of age or eligibility. Yet their deployment in practice exposes both conceptual and practical limits.
Exploring Privacy-Preserving Age Verification: A Close Look at Zero-Knowledge Proofs
A path toward protecting young people online that doesn’t sacrifice their privacy or data security, amid persistent concerns about screen time.
IACIS 2026 - OpenConf Abstract Submission, Peer Review, and Event Management System
As lawmakers across the United States move to require age verification for access to adult content online, new questions are emerging about the unintended risks these laws create. While intended to protect minors, many of these policies rely on systems that collect and store overly sensitive personal information such as government-issued IDs or biometric data without adequate safeguards. This introduces serious cybersecurity vulnerabilities, privacy concerns, and potential legal liability for platforms and users alike. Some major platforms have already withdrawn from certain states rather than comply, raising questions about the real-world feasibility of these laws. This study examines the intersection of digital privacy, cybersecurity, and legal compliance in the context of mandatory age verification. It analyzes the risks posed by identity-based and biometric systems, the role of third-party vendors, and the inconsistencies in how states define and enforce these requirements. The paper evaluates several age verification models and concludes that attribute-based verification systems that confirm age eligibility without revealing full identities offers the most secure and privacy-conscious path forward. The findings underscore a critical need for better-designed legislation that balances child protection with digital rights and security. This research provides targeted recommendations for policymakers, platform operators, and cybersecurity professionals, urging a shift toward transparent, accountable, and technically sound solutions before flawed systems become entrenched.
Age Verification Mandates Would Undermine Anonymity Online
Age verification systems are surveillance systems. Mandatory age verification, and with it, mandatory identity verification, is the wrong approach to protecting young people online. It would force
Hackers Expose The Massive Surveillance Stack Hiding Inside Your “Age Verification” Check
We’ve been saying this for years now, and we’re going to keep saying it until the message finally sinks in: mandatory age verification creates massive, centralized honeypots of sensitiv…
Online age verification systems fail to protect children | Proton
Do online age verification systems improve child safety? See how age restrictions and age checks fall short, and what that means for privacy and protection.
