{"id":149007,"date":"2026-04-17T06:15:19","date_gmt":"2026-04-17T14:15:19","guid":{"rendered":"https:\/\/xira.com\/p\/2026\/04\/17\/438-experts-said-age-verification-is-dangerous-legislators-are-moving-forward-with-it-anyway\/"},"modified":"2026-04-17T06:15:19","modified_gmt":"2026-04-17T14:15:19","slug":"438-experts-said-age-verification-is-dangerous-legislators-are-moving-forward-with-it-anyway","status":"publish","type":"post","link":"https:\/\/xira.com\/p\/2026\/04\/17\/438-experts-said-age-verification-is-dangerous-legislators-are-moving-forward-with-it-anyway\/","title":{"rendered":"438 Experts Said Age Verification Is Dangerous. Legislators Are Moving Forward With It Anyway."},"content":{"rendered":"

In early March, 438 security and privacy researchers from 32 countries\u00a0signed a massive open letter<\/a>\u00a0warning that age verification mandates for the internet are technically impossible to get right, easy to circumvent, a serious threat to privacy and security, and likely to cause more harm than good. While many folks (including us at Techdirt) have been calling out similar problems with age verification, this was basically a ton of experts all teaming up to call out how dangerous the technology is \u2014 by any reasonable measure, a hugely significant collective statement from the scientific community on an active area of internet regulation.<\/p>\n

It got about a day of\u00a0press coverage<\/a>, and then legislators everywhere went right back to doing the thing the scientists just told them was dangerous.<\/p>\n

Since the letter was published, Idaho\u00a0signed a law mandating parental consent and age verification for social media<\/a>. Missouri\u00a0moved forward with age verification measures for minors using social media and AI chatbots<\/a>. Greece\u00a0announced plans to ban teens from social media entirely<\/a>. At least\u00a0half of US states<\/a>\u00a0have now passed some form of age verification or digital ID law with many others considering similar laws. The European Union continues to push age assurance requirements through various regulatory channels. Australia is trying to get other countries on board with its own social media ban for kids. All of this, proceeding as though hundreds of the world\u2019s foremost experts on security and privacy had said nothing at all.<\/p>\n

We\u2019ve been writing about the serious problems with age verification mandates\u00a0for years now<\/a>. The arguments haven\u2019t changed, because the underlying technical realities haven\u2019t changed. But this letter deserves far more attention than it received because of how thoroughly it tears apart every assumption that age verification proponents rely on.<\/p>\n

The letter starts by acknowledging what should be obvious: the signatories share the concerns about kids encountering harmful content online. This matters, because the go-to response to any criticism of age verification is to accuse critics of not caring about children. These are hundreds of scientists saying: we care, we\u2019ve studied this, and what you\u2019re proposing will make things worse.<\/p>\n

\n

We share the concerns about the negative effects that exposure to harmful content online has on children, and we applaud that regulators dedicate time and effort to protect them. However, we fear that, if implemented without careful consideration of the technological hazards and societal impact, the new regulation might cause more harm than good.<\/em><\/p>\n<\/blockquote>\n

Some will argue that this is meaningless without a proposed \u201cfix\u201d to the problems facing children online, but that\u2019s nonsense. As these experts argue, the focus on age verification and age gating will make things\u00a0worse<\/em>. It\u2019s the classic \u201cwe must do something, this is something, therefore we must do this\u201d fallacy dressed up as child protection.<\/p>\n

The fact that child safety problems are specific and complex is exactly why simplistic bans and age-gating cause so much damage. And it\u2019s a genuine indictment of our current discourse that refusing to embrace a non-solution somehow gets read as not caring about the problem itself.<\/p>\n

From there, the letter walks through the actual problems with these commonly proposed solutions in a level of detail that should be mandatory reading for any legislator voting on these laws. (It almost certainly won\u2019t be, but we can dream.)<\/p>\n

First, the biggest problem: these systems are ridiculously easy to circumvent. This point gets hand-waved away constantly by politicians who seem to think that because something sounds like it should work, it must. The scientists have a different view, grounded in actual evidence from actual deployments:<\/p>\n

\n

There is ample evidence from existing deployments that lying about age is not hard. It can be as easy as using age-verified accounts borrowed from an elder sibling or friend. In fact, there are reported cases of parents helping their children with age circumvention. There is evidence that, shortly after age-based controls appear, markets and services that sell valid accounts or credentials quickly arise. This enables the use of online services deploying age assurance at an affordable price or even for free. This is the case even if the verification is based on government-issued certificates, as shown by the ease with which fake vaccination certificates could be acquired during the COVID pandemic<\/em><\/p>\n<\/blockquote>\n

We just recently talked about the evidence in Australia showing that a huge percentage of kids have\u00a0simply learned how to get around<\/a>\u00a0age gates. Australia\u2019s biggest accomplishment: teaching kids how to cheat the system.<\/p>\n

The letter makes a point that almost never appears in the legislative debates: The threat model for age verification is fundamentally broken because the people building these systems assume the only adversary is a teenager. But since every adult internet user will also be subjected to these checks, and many adults will not want to submit to this kind of surveillance, we\u2019re going to be creating huge incentives for adults to get around these age checks as well, meaning that new industries (some likely to be pretty sketchy) will arise to help people of all ages avoid this kind of surveillance. And that, alone, will make it easier for everyone (kids and adults) to bypass age gates (though in a way that will likely make many people less safe overall):<\/p>\n

\n

As its main goal is to restrict the activities of children, it is common to believe that the only adversary is minors trying to bypass age verification. Yet, age verification mechanisms also apply to adults that will have to prove their age in many of their routine online interactions, to access services or to keep them away from children-specific web spaces. As these checks will jeopardize their online experience, adults will have incentives to create means to bypass them both for their own use or to monetize the bypass. Thus, it is foreseeable that an increase in the deployment of age assurance will result in growing availability of circumvention mechanisms, reducing its effectiveness.<\/em><\/p>\n<\/blockquote>\n

The circumvention problem alone should be enough to give legislators pause. But the letter goes further, addressing what happens to people who\u00a0can\u2019t<\/em>\u00a0circumvent the systems, or who try to and end up worse off.<\/p>\n

One of the strongest sections addresses the perverse safety consequences. Deplatforming minors from mainstream services doesn\u2019t make them stop using the internet. It pushes them toward less regulated, less secure alternatives where the risks are dramatically higher, and where these services care less about actually taking steps to protect kids:<\/p>\n

\n

If minors or adults are deplatformed via age-related bans, they are likely to migrate to find similar services. Since the main platforms would all be regulated, it is likely that they would migrate to fringe sites that escape regulation. This would not only negate any benefit of the age-based controls but also expose users to other dangers, such as scams or malware that are monitored in mainstream platforms but exist on smaller providers. Even if users do not move platforms, attempting circumvention to access mainstream services from a jurisdiction that does not mandate age assurance might also increase their risk. For example, free VPN providers might not follow secure practices or might monetize users\u2019 data (especially non-EU providers that are not subject to data protection obligations), and websites accessed in other jurisdictions through VPNs would not provide the user with the data protection standards and rights which are guaranteed in the EU.<\/em><\/p>\n<\/blockquote>\n

And as we keep explaining: age verification makes adults\u00a0think<\/em>\u00a0they\u2019ve \u201cmade the internet safe,\u201d which creates all sorts of downstream problems \u2014 including failing to teach young people how to navigate the internet safely, while doing nothing to address the actual threats. As the letter notes, it creates a false sense of security:<\/p>\n

\n

The promise of children-specific services that serve as safe spaces is unrealizable with current technology. This means that children might become exposed to predators who infiltrate these spaces, either via circumvention or acquisition of false credentials that allow them to pose as minors in a verifiable way.<\/em><\/p>\n<\/blockquote>\n

So the system designed to \u201cprotect the children\u201d could end up creating verified hunting grounds for predators, while simultaneously pushing kids who get locked out of mainstream platforms toward sketchy fringe sites.<\/p>\n

Some child safety measure.<\/p>\n

The privacy concerns are equally serious. Age verification mandates give online services a justification \u2014 indeed, a\u00a0legal requirement<\/em>\u00a0\u2014 to collect far more personal data than they currently do. The letter notes that age estimation and age inference technologies are \u201chighly privacy-invasive\u201d and \u201crely on the collection and processing of sensitive, private data such as biometrics, or behavioural or contextual information.\u201d<\/p>\n

And this data will leak. It always does. The letter points\u00a0to a concrete example<\/a>: 70,000 users had their government ID photos exposed after appealing age assessment errors on Discord. That\u2019s what happens when you force the creation of massive centralized databases of sensitive identity information. You create targets.<\/p>\n

The most alarming part of the letter is the one that gets the least discussion: centralization of power. The scientists warn, bluntly, that age verification infrastructure doubles as censorship infrastructure:<\/p>\n

\n

Those deciding which age-based controls need to exist, and those enforcing them gain a tremendous influence on what content is accessible to whom on the internet. Recall that age assurance checks might go well beyond what is regulated in the offline world and set up an infrastructure to enforce arbitrary attribute-based policies online. In the wrong hands, such as an authoritarian government, this influence could be used to censor information and prevent users from accessing services, for example, preventing access to LGBTQ+ content. Centralizing access to the internet easily leads to internet shutdowns, as seen recently in Iran. If enforcement happens at the browser or operating system level, the manufacturers of this software would gain even more control to make decisions on what content is accessible on the Internet. This would enable primarily big American companies to control European citizens\u2019 access to the internet.<\/em><\/p>\n<\/blockquote>\n

This should be the part that makes everyone uncomfortable, regardless of their political orientation.<\/p>\n

This brings us to what is already happening to real people right now.<\/p>\n

A recent article in The Verge details how age verification systems are creating serious,\u00a0specific harms for trans internet users<\/a>. Kansas passed a law invalidating trans people\u2019s driver\u2019s licenses and IDs overnight, requiring them to obtain new IDs with incorrect gender markers. Combine that with age verification laws requiring digital identity checks, and you get exactly the kind of discriminatory exclusion the scientists warned about:<\/p>\n

\n

\u201cThese systems are specifically designed to look for discrepancies, and they\u2019re going to find them,\u201d said Kayyali. \u201cIf you are a woman and anyone on the street would say \u2018that\u2019s a woman,\u2019 but that\u2019s not what your ID says, that\u2019s a discrepancy.\u201d The danger of these discrepancies extends not just to trans people, but to\u00a0anyone else<\/a>\u00a0whose\u00a0appearance doesn\u2019t match<\/a>\u00a0normative gendered expectations.<\/em><\/p>\n

\u201cA lot of age estimation systems are built on a combination of anthropological sex markers and skin texture. This means they fall over and provide inaccurate results when faced with people whose markers and skin texture, well, don\u2019t match,\u201d explains Keyes. For example, one of the most prominent markers algorithms measure to determine sex is the brow ridge. \u201cSuppose you have a trans man on HRT and a trans woman on HRT, the former with low brow ridges and rougher skin, the latter with high ridges and softer skin,\u201d Keyes explains. \u201cThe former is likely to have their age overestimated; the latter, underestimated.\u201d<\/em><\/p>\n<\/blockquote>\n

So you have biometric systems that are specifically designed to flag discrepancies between someone\u2019s appearance and their identity documents. And you have a government that is deliberately creating discrepancies in trans people\u2019s identity documents. The result is predictable and ugly: trans people get locked out, flagged, forced to out themselves, or simply blocked from accessing services that everyone else uses freely.<\/p>\n

Most of these verification systems are black boxes with no meaningful appeal process. The laws themselves are written with deliberately vague language requiring platforms to verify age through \u201ca commercially available database\u201d or \u201cany other commercially reasonable method,\u201d with nothing about transparency, accuracy, or redress for people who get wrongly flagged or excluded.<\/p>\n

And in many of these laws, the definitions of content \u201charmful to children\u201d are flexible enough to encompass LGBTQ+ communities, information about birth control, and whatever else a given administration decides it doesn\u2019t like. As one of Techdirt\u2019s favorite technology and speech lawyers, Kendra Albert, noted to The Verge:<\/p>\n

\n

\u201cI think it\u2019s fair to say that if you look at the history of obscenity in the US and what\u2019s considered explicit material, stuff with queer and trans material is much more likely to be considered sexually explicit even though it\u2019s not. You may be in a circumstance where sites with more content about queer and trans people are more likely to face repercussions for not implementing appropriate age-gating or being tagged as explicit.\u201d<\/em><\/p>\n<\/blockquote>\n

So to summarize: the age verification infrastructure being built across the world (1) doesn\u2019t actually work to keep kids from accessing content, (2) pushes kids toward less safe alternatives, (3) creates verified \u201csafe spaces\u201d that predators can infiltrate, (4) forces massive collection of sensitive personal data that will inevitably leak, (5) creates infrastructure purpose-built for censorship and authoritarian control, (6) systematically discriminates against trans people, people of color, the elderly, immigrants, and anyone whose appearance doesn\u2019t match neat bureaucratic categories, (7) concentrates enormous power over internet access in the hands of governments and a handful of tech companies, and (8) lacks any scientific evidence that it will actually improve children\u2019s mental health or safety.<\/p>\n

Seems like a problem.<\/p>\n

And 438 scientists from 32 countries put their names on a letter saying so. The letter closes with this:<\/p>\n

\n

We believe that\u00a0<\/em>it is dangerous and socially unacceptable<\/em><\/strong>\u00a0to introduce a large-scale access control mechanism without a clear understanding of the implications that different design decisions can have on security, privacy, equality, and ultimately on the freedom of decision and autonomy of individuals and nations.<\/em><\/p>\n<\/blockquote>\n

\u201cDangerous and socially unacceptable.\u201d That isn\u2019t just me being dramatic. That\u2019s the considered, collective judgment of hundreds of researchers whose professional expertise is specifically in the systems being deployed.<\/p>\n

Meanwhile, the laws keep passing. Nobody seems to have bothered asking the scientists. Or, more accurately, the scientists volunteered their expertise in the most public way possible, and everyone in a position to act on it decided that the political appeal of \u201cprotecting the children\u201d was more important than whether the proposed method of protection actually protects children, or whether it creates a sprawling new infrastructure for surveillance, discrimination, and censorship that will be almost impossible to dismantle once it\u2019s built.<\/p>\n

The scientists\u2019 letter called for studying the benefits and harms of age verification before mandating it at internet scale. That seems like a comically low bar. \u201cMaybe understand whether this works before requiring it everywhere\u201d shouldn\u2019t be a controversial position. And yet here we are, with legislators around the world charging ahead, building systems that security experts have told them are broken, in pursuit of goals that the evidence says these systems can\u2019t achieve, at a cost to privacy, security, equality, and freedom that nobody in a position of power seems interested in calculating.<\/p>\n

ageverif-feb2026<\/a>Download<\/a><\/div>\n

438 Experts Said Age Verification Is Dangerous. Legislators Are Moving Forward With It Anyway.<\/a><\/p>\n

More Law-Related Stories From Techdirt<\/strong>:<\/p>\n

The Right Wing Origins Age Verification Laws Don\u2019t Disappear Just Because They\u2019re Going Bipartisan.<\/a>
All But 3 Of The 4,499 Refugees Admitted To The US Under Trump Are White South Africans<\/a>
Oh Look, The MAGA FTC Built The Censorship Industrial Complex It Was Screaming About<\/a>
ACAB: Cops Are Bringing \u2018Delinquency Of A Minor\u2019 Charges Against Adults Who Assist Students During Anti-ICE Protests<\/a><\/p>\n

The post 438 Experts Said Age Verification Is Dangerous. Legislators Are Moving Forward With It Anyway.<\/a> appeared first on Above the Law<\/a>.<\/p>\n

In early March, 438 security and privacy researchers from 32 countries\u00a0signed a massive open letter<\/a>\u00a0warning that age verification mandates for the internet are technically impossible to get right, easy to circumvent, a serious threat to privacy and security, and likely to cause more harm than good. While many folks (including us at Techdirt) have been calling out similar problems with age verification, this was basically a ton of experts all teaming up to call out how dangerous the technology is \u2014 by any reasonable measure, a hugely significant collective statement from the scientific community on an active area of internet regulation.<\/p>\n

It got about a day of\u00a0press coverage<\/a>, and then legislators everywhere went right back to doing the thing the scientists just told them was dangerous.<\/p>\n

Since the letter was published, Idaho\u00a0signed a law mandating parental consent and age verification for social media<\/a>. Missouri\u00a0moved forward with age verification measures for minors using social media and AI chatbots<\/a>. Greece\u00a0announced plans to ban teens from social media entirely<\/a>. At least\u00a0half of US states<\/a>\u00a0have now passed some form of age verification or digital ID law with many others considering similar laws. The European Union continues to push age assurance requirements through various regulatory channels. Australia is trying to get other countries on board with its own social media ban for kids. All of this, proceeding as though hundreds of the world\u2019s foremost experts on security and privacy had said nothing at all.<\/p>\n

We\u2019ve been writing about the serious problems with age verification mandates\u00a0for years now<\/a>. The arguments haven\u2019t changed, because the underlying technical realities haven\u2019t changed. But this letter deserves far more attention than it received because of how thoroughly it tears apart every assumption that age verification proponents rely on.<\/p>\n

The letter starts by acknowledging what should be obvious: the signatories share the concerns about kids encountering harmful content online. This matters, because the go-to response to any criticism of age verification is to accuse critics of not caring about children. These are hundreds of scientists saying: we care, we\u2019ve studied this, and what you\u2019re proposing will make things worse.<\/p>\n

\n

We share the concerns about the negative effects that exposure to harmful content online has on children, and we applaud that regulators dedicate time and effort to protect them. However, we fear that, if implemented without careful consideration of the technological hazards and societal impact, the new regulation might cause more harm than good.<\/em><\/p>\n<\/blockquote>\n

Some will argue that this is meaningless without a proposed \u201cfix\u201d to the problems facing children online, but that\u2019s nonsense. As these experts argue, the focus on age verification and age gating will make things\u00a0worse<\/em>. It\u2019s the classic \u201cwe must do something, this is something, therefore we must do this\u201d fallacy dressed up as child protection.<\/p>\n

The fact that child safety problems are specific and complex is exactly why simplistic bans and age-gating cause so much damage. And it\u2019s a genuine indictment of our current discourse that refusing to embrace a non-solution somehow gets read as not caring about the problem itself.<\/p>\n

From there, the letter walks through the actual problems with these commonly proposed solutions in a level of detail that should be mandatory reading for any legislator voting on these laws. (It almost certainly won\u2019t be, but we can dream.)<\/p>\n

First, the biggest problem: these systems are ridiculously easy to circumvent. This point gets hand-waved away constantly by politicians who seem to think that because something sounds like it should work, it must. The scientists have a different view, grounded in actual evidence from actual deployments:<\/p>\n

\n

There is ample evidence from existing deployments that lying about age is not hard. It can be as easy as using age-verified accounts borrowed from an elder sibling or friend. In fact, there are reported cases of parents helping their children with age circumvention. There is evidence that, shortly after age-based controls appear, markets and services that sell valid accounts or credentials quickly arise. This enables the use of online services deploying age assurance at an affordable price or even for free. This is the case even if the verification is based on government-issued certificates, as shown by the ease with which fake vaccination certificates could be acquired during the COVID pandemic<\/em><\/p>\n<\/blockquote>\n

We just recently talked about the evidence in Australia showing that a huge percentage of kids have\u00a0simply learned how to get around<\/a>\u00a0age gates. Australia\u2019s biggest accomplishment: teaching kids how to cheat the system.<\/p>\n

The letter makes a point that almost never appears in the legislative debates: The threat model for age verification is fundamentally broken because the people building these systems assume the only adversary is a teenager. But since every adult internet user will also be subjected to these checks, and many adults will not want to submit to this kind of surveillance, we\u2019re going to be creating huge incentives for adults to get around these age checks as well, meaning that new industries (some likely to be pretty sketchy) will arise to help people of all ages avoid this kind of surveillance. And that, alone, will make it easier for everyone (kids and adults) to bypass age gates (though in a way that will likely make many people less safe overall):<\/p>\n

\n

As its main goal is to restrict the activities of children, it is common to believe that the only adversary is minors trying to bypass age verification. Yet, age verification mechanisms also apply to adults that will have to prove their age in many of their routine online interactions, to access services or to keep them away from children-specific web spaces. As these checks will jeopardize their online experience, adults will have incentives to create means to bypass them both for their own use or to monetize the bypass. Thus, it is foreseeable that an increase in the deployment of age assurance will result in growing availability of circumvention mechanisms, reducing its effectiveness.<\/em><\/p>\n<\/blockquote>\n

The circumvention problem alone should be enough to give legislators pause. But the letter goes further, addressing what happens to people who\u00a0can\u2019t<\/em>\u00a0circumvent the systems, or who try to and end up worse off.<\/p>\n

One of the strongest sections addresses the perverse safety consequences. Deplatforming minors from mainstream services doesn\u2019t make them stop using the internet. It pushes them toward less regulated, less secure alternatives where the risks are dramatically higher, and where these services care less about actually taking steps to protect kids:<\/p>\n

\n

If minors or adults are deplatformed via age-related bans, they are likely to migrate to find similar services. Since the main platforms would all be regulated, it is likely that they would migrate to fringe sites that escape regulation. This would not only negate any benefit of the age-based controls but also expose users to other dangers, such as scams or malware that are monitored in mainstream platforms but exist on smaller providers. Even if users do not move platforms, attempting circumvention to access mainstream services from a jurisdiction that does not mandate age assurance might also increase their risk. For example, free VPN providers might not follow secure practices or might monetize users\u2019 data (especially non-EU providers that are not subject to data protection obligations), and websites accessed in other jurisdictions through VPNs would not provide the user with the data protection standards and rights which are guaranteed in the EU.<\/em><\/p>\n<\/blockquote>\n

And as we keep explaining: age verification makes adults\u00a0think<\/em>\u00a0they\u2019ve \u201cmade the internet safe,\u201d which creates all sorts of downstream problems \u2014 including failing to teach young people how to navigate the internet safely, while doing nothing to address the actual threats. As the letter notes, it creates a false sense of security:<\/p>\n

\n

The promise of children-specific services that serve as safe spaces is unrealizable with current technology. This means that children might become exposed to predators who infiltrate these spaces, either via circumvention or acquisition of false credentials that allow them to pose as minors in a verifiable way.<\/em><\/p>\n<\/blockquote>\n

So the system designed to \u201cprotect the children\u201d could end up creating verified hunting grounds for predators, while simultaneously pushing kids who get locked out of mainstream platforms toward sketchy fringe sites.<\/p>\n

Some child safety measure.<\/p>\n

The privacy concerns are equally serious. Age verification mandates give online services a justification \u2014 indeed, a\u00a0legal requirement<\/em>\u00a0\u2014 to collect far more personal data than they currently do. The letter notes that age estimation and age inference technologies are \u201chighly privacy-invasive\u201d and \u201crely on the collection and processing of sensitive, private data such as biometrics, or behavioural or contextual information.\u201d<\/p>\n

And this data will leak. It always does. The letter points\u00a0to a concrete example<\/a>: 70,000 users had their government ID photos exposed after appealing age assessment errors on Discord. That\u2019s what happens when you force the creation of massive centralized databases of sensitive identity information. You create targets.<\/p>\n

The most alarming part of the letter is the one that gets the least discussion: centralization of power. The scientists warn, bluntly, that age verification infrastructure doubles as censorship infrastructure:<\/p>\n

\n

Those deciding which age-based controls need to exist, and those enforcing them gain a tremendous influence on what content is accessible to whom on the internet. Recall that age assurance checks might go well beyond what is regulated in the offline world and set up an infrastructure to enforce arbitrary attribute-based policies online. In the wrong hands, such as an authoritarian government, this influence could be used to censor information and prevent users from accessing services, for example, preventing access to LGBTQ+ content. Centralizing access to the internet easily leads to internet shutdowns, as seen recently in Iran. If enforcement happens at the browser or operating system level, the manufacturers of this software would gain even more control to make decisions on what content is accessible on the Internet. This would enable primarily big American companies to control European citizens\u2019 access to the internet.<\/em><\/p>\n<\/blockquote>\n

This should be the part that makes everyone uncomfortable, regardless of their political orientation.<\/p>\n

This brings us to what is already happening to real people right now.<\/p>\n

A recent article in The Verge details how age verification systems are creating serious,\u00a0specific harms for trans internet users<\/a>. Kansas passed a law invalidating trans people\u2019s driver\u2019s licenses and IDs overnight, requiring them to obtain new IDs with incorrect gender markers. Combine that with age verification laws requiring digital identity checks, and you get exactly the kind of discriminatory exclusion the scientists warned about:<\/p>\n

\n

\u201cThese systems are specifically designed to look for discrepancies, and they\u2019re going to find them,\u201d said Kayyali. \u201cIf you are a woman and anyone on the street would say \u2018that\u2019s a woman,\u2019 but that\u2019s not what your ID says, that\u2019s a discrepancy.\u201d The danger of these discrepancies extends not just to trans people, but to\u00a0anyone else<\/a>\u00a0whose\u00a0appearance doesn\u2019t match<\/a>\u00a0normative gendered expectations.<\/em><\/p>\n

\u201cA lot of age estimation systems are built on a combination of anthropological sex markers and skin texture. This means they fall over and provide inaccurate results when faced with people whose markers and skin texture, well, don\u2019t match,\u201d explains Keyes. For example, one of the most prominent markers algorithms measure to determine sex is the brow ridge. \u201cSuppose you have a trans man on HRT and a trans woman on HRT, the former with low brow ridges and rougher skin, the latter with high ridges and softer skin,\u201d Keyes explains. \u201cThe former is likely to have their age overestimated; the latter, underestimated.\u201d<\/em><\/p>\n<\/blockquote>\n

So you have biometric systems that are specifically designed to flag discrepancies between someone\u2019s appearance and their identity documents. And you have a government that is deliberately creating discrepancies in trans people\u2019s identity documents. The result is predictable and ugly: trans people get locked out, flagged, forced to out themselves, or simply blocked from accessing services that everyone else uses freely.<\/p>\n

Most of these verification systems are black boxes with no meaningful appeal process. The laws themselves are written with deliberately vague language requiring platforms to verify age through \u201ca commercially available database\u201d or \u201cany other commercially reasonable method,\u201d with nothing about transparency, accuracy, or redress for people who get wrongly flagged or excluded.<\/p>\n

And in many of these laws, the definitions of content \u201charmful to children\u201d are flexible enough to encompass LGBTQ+ communities, information about birth control, and whatever else a given administration decides it doesn\u2019t like. As one of Techdirt\u2019s favorite technology and speech lawyers, Kendra Albert, noted to The Verge:<\/p>\n

\n

\u201cI think it\u2019s fair to say that if you look at the history of obscenity in the US and what\u2019s considered explicit material, stuff with queer and trans material is much more likely to be considered sexually explicit even though it\u2019s not. You may be in a circumstance where sites with more content about queer and trans people are more likely to face repercussions for not implementing appropriate age-gating or being tagged as explicit.\u201d<\/em><\/p>\n<\/blockquote>\n

So to summarize: the age verification infrastructure being built across the world (1) doesn\u2019t actually work to keep kids from accessing content, (2) pushes kids toward less safe alternatives, (3) creates verified \u201csafe spaces\u201d that predators can infiltrate, (4) forces massive collection of sensitive personal data that will inevitably leak, (5) creates infrastructure purpose-built for censorship and authoritarian control, (6) systematically discriminates against trans people, people of color, the elderly, immigrants, and anyone whose appearance doesn\u2019t match neat bureaucratic categories, (7) concentrates enormous power over internet access in the hands of governments and a handful of tech companies, and (8) lacks any scientific evidence that it will actually improve children\u2019s mental health or safety.<\/p>\n

Seems like a problem.<\/p>\n

And 438 scientists from 32 countries put their names on a letter saying so. The letter closes with this:<\/p>\n

\n

We believe that\u00a0<\/em>it is dangerous and socially unacceptable<\/em><\/strong>\u00a0to introduce a large-scale access control mechanism without a clear understanding of the implications that different design decisions can have on security, privacy, equality, and ultimately on the freedom of decision and autonomy of individuals and nations.<\/em><\/p>\n<\/blockquote>\n

\u201cDangerous and socially unacceptable.\u201d That isn\u2019t just me being dramatic. That\u2019s the considered, collective judgment of hundreds of researchers whose professional expertise is specifically in the systems being deployed.<\/p>\n

Meanwhile, the laws keep passing. Nobody seems to have bothered asking the scientists. Or, more accurately, the scientists volunteered their expertise in the most public way possible, and everyone in a position to act on it decided that the political appeal of \u201cprotecting the children\u201d was more important than whether the proposed method of protection actually protects children, or whether it creates a sprawling new infrastructure for surveillance, discrimination, and censorship that will be almost impossible to dismantle once it\u2019s built.<\/p>\n

The scientists\u2019 letter called for studying the benefits and harms of age verification before mandating it at internet scale. That seems like a comically low bar. \u201cMaybe understand whether this works before requiring it everywhere\u201d shouldn\u2019t be a controversial position. And yet here we are, with legislators around the world charging ahead, building systems that security experts have told them are broken, in pursuit of goals that the evidence says these systems can\u2019t achieve, at a cost to privacy, security, equality, and freedom that nobody in a position of power seems interested in calculating.<\/p>\n

ageverif-feb2026<\/a>Download<\/a><\/div>\n

438 Experts Said Age Verification Is Dangerous. Legislators Are Moving Forward With It Anyway.<\/a><\/p>\n

More Law-Related Stories From Techdirt<\/strong>:<\/p>\n

The Right Wing Origins Age Verification Laws Don\u2019t Disappear Just Because They\u2019re Going Bipartisan.<\/a>
All But 3 Of The 4,499 Refugees Admitted To The US Under Trump Are White South Africans<\/a>
Oh Look, The MAGA FTC Built The Censorship Industrial Complex It Was Screaming About<\/a>
ACAB: Cops Are Bringing \u2018Delinquency Of A Minor\u2019 Charges Against Adults Who Assist Students During Anti-ICE Protests<\/a><\/p>\n

The post 438 Experts Said Age Verification Is Dangerous. Legislators Are Moving Forward With It Anyway.<\/a> appeared first on Above the Law<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

In early March, 438 security and privacy researchers from 32 countries\u00a0signed a massive open letter\u00a0warning that age verification mandates for the internet are technically impossible to get right, easy to circumvent, a serious threat to privacy and security, and likely to cause more harm than good. While many folks (including us at Techdirt) have been […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[16],"tags":[],"class_list":["post-149007","post","type-post","status-publish","format-standard","hentry","category-above_the_law"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/xira.com\/p\/wp-json\/wp\/v2\/posts\/149007","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xira.com\/p\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xira.com\/p\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xira.com\/p\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/xira.com\/p\/wp-json\/wp\/v2\/comments?post=149007"}],"version-history":[{"count":0,"href":"https:\/\/xira.com\/p\/wp-json\/wp\/v2\/posts\/149007\/revisions"}],"wp:attachment":[{"href":"https:\/\/xira.com\/p\/wp-json\/wp\/v2\/media?parent=149007"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xira.com\/p\/wp-json\/wp\/v2\/categories?post=149007"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xira.com\/p\/wp-json\/wp\/v2\/tags?post=149007"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}