Age verification technologies face privacy and accuracy challenges

Global expansion of age verification mandates is forcing platforms to adopt methods with significant privacy tradeoffs and accuracy limitations, as no current solution adequately balances child safety with user privacy. Age inference systems, which use AI to estimate user ages based on platform activity, represent one common approach. Meta employs such technology on Instagram to identify teens for more restrictive accounts, while Google and YouTube scan accounts for suspected underage users. Discord plans to roll out a similar system later this year, analyzing device data and community patterns. When inference systems cannot confidently determine age or falsely identify adults as minors, users must provide personal verification data. Government-issued photo IDs offer accuracy but create severe security risks if exposed in data breaches. Face-based age estimation presents privacy advantages by avoiding document collection but suffers from accuracy issues, particularly for people of color and women, and has been circumvented using video game character images. Third-party verification services like k-ID, Persona, and Yoti allow companies to offload age-checking responsibilities, though fundamental security concerns persist. On-device verification, while more private than server-side analysis, faces implementation challenges including bypass vulnerability and compatibility limitations with older smartphones. App store-level age verification is gaining traction, with California's Digital Age Assurance Act requiring operating systems to collect birth dates during device setup starting in 2027. This approach creates complications for open-source systems like Linux distributions that typically don't mandate user accounts. GrapheneOS has stated it won't implement mandatory age verification even if it means device sales restrictions in regulated markets. Cryptographic zero-knowledge proofs represent a promising development, allowing age verification without disclosing personal details. France's data privacy agency demonstrated a system where government agencies provide age proofs indicating only whether someone is over 18. The European Union is developing an open-source age verification app incorporating this experimental feature. With a patchwork of global regulations and ongoing constitutional challenges in U.S. courts, platforms face increasing pressure to deploy imperfect verification systems. Privacy experts emphasize the need for solutions that better balance safety requirements with protection of user data.