AI-powered age verification spreads across US, prompting privacy debate

New age-verification laws are spreading quickly across the United States as lawmakers try to strengthen protections for children online. 

However, the growing regulations are also raising privacy concerns because millions of adults may need to verify their identities before accessing certain websites and apps.

Under the new rules, platforms such as social media services, gaming websites and adult-content sites must confirm users’ ages.

Many companies are turning to AI-powered identity verification tools that analyse selfies or government-issued identification documents to estimate or confirm a user’s age.

Supporters say the laws are necessary to improve online safety for minors. Privacy advocates, however, warn that the policies could fundamentally change how people connect their real-world identities to everyday online activities.

Around half of US states have already adopted or are considering legislation requiring platforms to block minors from accessing specific types of content.

Joe Kaufman said the regulatory environment is becoming increasingly fragmented, with each state imposing different technical standards and compliance rules. 

That patchwork approach, he noted, creates challenges for companies that must implement age-verification systems across multiple jurisdictions.

Some technology platforms are developing their own solutions. Discord recently announced plans to roll out a global age-verification system that analyses facial features on users’ devices before deleting the data. 

The proposal sparked backlash from users concerned about privacy, forcing the company to delay its launch.

Experts say balancing safety with convenience will be crucial. Civil liberties groups warn that databases containing personal identification data — including names, photos and birth dates — could become attractive targets for hackers or government surveillance.

Officials at the Federal Trade Commission say companies must comply with strict rules governing how personal data is collected, stored and protected.