Hundreds of cybersecurity and privacy experts are urging governments to halt the rushed implementation of online age checks, citing significant risks to user data and security. The warning comes as several European nations, including the UK, France, Italy, and Germany, explore restrictions on minors’ access to social media platforms.
The Problem with Current Age Verification Methods
Existing age verification technologies – which often rely on biometric data like live selfies or government IDs – are already in use in some regions, such as Italy and France. However, the open letter signed by 371 academics from 29 countries argues that these systems are fundamentally unsafe. The core issue is that these checks can expose users to malware, scams, or unnecessary data collection, particularly if implemented by less secure third-party services.
“It is dangerous and socially unacceptable to put age checks in place without understanding the consequences for security, privacy, and equality.”
This isn’t just a hypothetical risk. Users verifying their age on unverified sites could face identity theft or exposure to malicious software. Even legitimate platforms may collect excessive personal data under the guise of age assurance.
Why Secure Age Verification Is So Difficult
The letter emphasizes that truly secure age verification would require advanced cryptographic protection for every data transmission. This infrastructure is complex and costly to build and maintain on a global scale, and many providers are likely to avoid implementing such stringent measures due to the added friction for users.
The debate over age verification highlights a broader tension between online safety and individual privacy. Governments face pressure to protect children from harmful content, but poorly designed age checks could create new vulnerabilities instead.
The Call for Caution
The experts urge policymakers to wait for a clear scientific consensus on the benefits and harms of age-assurance technologies before widespread deployment. Until then, they argue that rushing into implementation is reckless and could undermine fundamental rights to privacy and security.
The signatories include leading figures in cryptography, such as Turing Award winner Ronald Rivest and Bart Preneel, president of the International Association for Cryptologic Research, lending further weight to their warning.
The current push for age checks on social media risks trading one set of problems for another if not approached with careful consideration and robust security measures.
