You want to search Google for health information, join a community group on Facebook, or read the New York Times. Soon you might need to upload your government ID first. Age verification requirements are rolling out across more than 25 U.S. states and multiple countries, sold as common-sense child protection but threatening to dismantle online anonymity for everyone.
The wave started with adult content sites, but it's spreading fast. Laws now target broad categories of websites, from search engines to educational platforms to news outlets. Countries including Australia have already enacted blanket age verification rules. Canada, India, and others are considering similar bans that would require all users to prove their age.
The pitch sounds reasonable. Keep children safe online. But the machinery behind age verification demands something far more invasive: your data. Platforms will collect government IDs, facial scans, search histories, or other sensitive information claimed to determine age. That data lives somewhere. And history shows it leaks.
A journalist recently linked an anonymous discussion board post to someone's driver's license in ten minutes, thanks to a data breach at an age verification provider. The breaches keep happening because this data is valuable. Tech companies sell it. Governments request it. Once you hand over identifying information to access a website, you've created a permanent record linking your identity to your online activity.
The consequences ripple through vulnerable populations. Someone researching abortion rights in a state where that care is restricted will hesitate to share their story if it requires showing ID. LGBTQIA+ individuals seeking community online, often their only safe refuge, will retreat further if they must reveal their faces or names. Satirists and political artists will self-censor. Immigrants exchanging information about navigating the system will avoid platforms altogether. Whistleblowers and journalists will lose sources.
Anonymity isn't a luxury. It's a shield. People depend on it to escape stigma, to protect themselves from retaliation for unpopular views, to organize against oppressive systems. In authoritarian regions and crackdowns at home, anonymous access to information and community has meant survival.
The tech industry promises these data are collected solely for age verification, nothing more. That promise rang hollow long before age verification arrived. Google handed user data to the Department of Homeland Security after someone sent an email supporting an asylum seeker, leading to a knock on their door. Meta, which championed encryption, announced it would disable end-to-end encryption on Instagram to enable message scanning and law enforcement sharing. Trust in these companies is gone.
Without strict federal privacy laws binding these companies to hard limits on data collection and use, age verification becomes another pipeline. Once normalized, any website can demand personal data. Platforms can sell it. Users can't opt out or fix the damage. We're building the infrastructure for what critics call the "papers, please" web: a digital space where proving your identity is the price of entry to nearly everywhere.
Protecting children online is legitimate. But age verification as currently designed trades real protections for the illusion of them. It expands corporate surveillance, invites government targeting, and silences the people who need anonymity most. If these laws proceed, they require ironclad safeguards: preventing linkage between identity and online activity, restricting data collection to age alone, auditing providers independently. Without them, we lose something fundamental.
Author James Rodriguez: "Age verification schemes are sold as protection but they're actually a wholesale giveaway of our last meaningful privacy shields online."
Comments