Age assurance ensures online users’ ages are verified to protect minors and adhere to legal standards. This article explores what age assurance is, how it works, common methods used, and the regulatory challenges involved.
Understanding Age Assurance
Age assurance is a broad term encompassing various techniques used by online operators to verify the ages of their users. It’s more than just checking IDs; it involves sophisticated age assurance method to comply with data protection and safety standards overseen by bodies like the ICO and Ofcom.
These measures are crucial for creating a safer online environment for all users, especially minors.
Age Verification vs. Age Estimation
Age assurance primarily involves two techniques: age verification and age estimation. Age verification is a stricter process, often requiring official identification like government-issued IDs to confirm a user’s exact age. It is a highly effective age assurance method but can be considered invasive and time-consuming.
On the other hand, age estimation uses algorithms to analyze facial features and provide an age range estimation based on appearance. While this method is less invasive, it may not always accurately determine a user’s age within narrow age ranges. Each method has its pros and cons, and the choice between them often depends on the specific needs and risks associated with the online platform.
Ofcom’s Age Assurance Recommendations
With growing concerns over children accessing age-restricted content online, Ofcom has provided guidance on highly effective age assurance methods for pornographic websites, encompassing search services as well as user to user services. Ofcom adopts a principle-based approach with four key criteria for evaluating age assurance methods:
Accuracy: Methods should reliably identify a user’s age. If a system has a margin of error, the challenge age should be set higher to ensure minors aren’t mistakenly granted access.
Robustness: Platforms must stress-test their systems against common circumvention attempts and develop countermeasures to prevent children from bypassing age checks.
Reliability: Age assurance should consistently provide accurate results, requiring ongoing monitoring and verification from trustworthy sources.
Fairness: Systems should minimize bias by incorporating diverse datasets and ensuring equal treatment across different user groups.
Here’s a breakdown of the key recommended methods for verifying users’ ages effectively that meet the criteria for Accuracy, Robustness, Reliability and Fairness:
Open Banking Verification
Open banking verification involves confirming whether a user is over 18 without sharing their date of birth or any other personal details. With the user’s consent, the banking system provides a simple yes-or-no confirmation to the website, ensuring that only adults can access restricted content.
Photo-Identification Matching
This method requires users to upload a government-issued photo ID, which is then compared with a real-time image of the user. This ensures that the ID belongs to the person attempting to access the content, reducing the risk of identity fraud or misuse.
Facial Age Estimation
Using artificial intelligence, facial age estimation analyzes a person’s facial features to estimate their age. This method offers a seamless and non-intrusive way to verify users without requiring them to provide identity documents.
Mobile-Network Operator (MNO) Age Checks
Many mobile networks apply Content Restriction Filters (CRF) to prevent underage users from accessing adult content on pay-as-you-go and contract SIMs. Ofcom recommends using MNO age checks to determine whether a CRF has been removed, signaling that the user is an adult.
Credit Card Age Checks
Since credit cards in the UK are only issued to individuals over 18, credit card verification is another effective method. This works similarly to bank verification but relies on the user’s possession of a valid credit card.
Email-Based Age Estimation
By analyzing an individual’s email usage across various online platforms, this method estimates a user’s age based on their interactions with age-restricted services like mortgage lenders or financial institutions. While less direct, it offers an alternative for verifying adult users.
Digital Identity Services
Digital identity wallets allow users to securely store and verify personal attributes, including age. These wallets leverage different verification techniques, such as open banking, facial recognition, and government-issued ID verification, ensuring a robust and flexible approach to age assurance.
Why These Measures Matter
Ofcom’s recommendations aim to create a safer online space, particularly for children, by ensuring only adults can access explicit content. These methods offer a balance between privacy, security, and effectiveness, enabling online platforms to comply with regulations while safeguarding user identities.
Implementing Age Assurance in Online Services
Implementing age assurance in online services involves various methods, tailored to meet the specific needs and risks of the platform. The ICO’s children codes outline the necessity for services likely to be accessed by children to protect their personal data.
Age Checks: Effective age checks are critical to prevent minors from accessing content that is inappropriate for their age. Implementing strong age verification systems, such as biometric systems and government-issued IDs, can accurately distinguish between adult and child users to meet compliance requirements.
Data Protection Laws: Data protection legislation mandates that personal information collected during age verification must be handled securely. Service Providers must document how they safeguard users’ data and comply with privacy laws when implementing age assurance.
Age Assurance in Social Media Platforms
Social media platforms have a significant role in ensuring the safety of their younger users. These platforms are required to implement age assurance methods to protect minors from harmful content and comply with legal standards.
Striking a balance between allowing children access to age-appropriate content and ensuring their online safety is a complex challenge that involves careful policymaking.
Risk Assessments for Children’s Safety: Risk assessments are essential for ensuring children’s safety online, particularly for service providers. Platforms must conduct these children’s risk assessment guidance to determine if children have significant access to their services under the Online Safety Act.
These assessments focus on content, conduct, and contact risks and must be updated regularly to maintain effective safety measures.
Age Assurance Measures for Adult Content
For websites hosting adult content, implementing age assurance measures is critical. These sites must adopt effective age verification systems to prevent minors from accessing inappropriate material. All services providing pornography, including websites that publish their own pornographic content, must implement effective age checks to protect children from harmful content.
Ofcom’s enforcement program ensures compliance with these regulations, protecting minors from the potential harms associated with accessing adult content.
Compliance with the Online Safety Act: Under the UK Online Safety Bill, pornographic websites must prevent users under 18 from accessing their content. Effective age verification systems are essential to ensure compliance and limit access for underage users on these platforms.
Protecting User Privacy: One of the primary risks associated with age verification on pornographic content websites is data breaches. Websites can use government-issued documents or biometric data like face scans to verify users’ ages. However, they must prioritize user privacy and minimize exposure to personal data breaches.
Best Age Assurance Methods
To ensure accurate and reliable age verification, various methods leverage identity documents, biometric data, and advanced algorithms.
ID-Based Age Verification
This method requires users to provide an official identity document along with a live photo for biometric comparison. By analyzing facial features and cross-referencing them with the ID, this approach is excellent at correctly determining user age with minimal fraud risk. Ondato’s system streamlines this process, completing verification in under 60 seconds with zero fraud tolerance.
Facial Age Estimation
Facial recognition technology estimates users’ ages by analyzing physical features. With this age assurance process, advanced algorithms predict age without requiring official documents, providing a seamless and non-invasive method for verification. This technique is particularly useful for quick and frictionless onboarding.
Balancing Access and Protection
Balancing access and protection involves ensuring children’s rights are respected while fostering a safe online environment. Children have rights to privacy, expression, and access to culture, which age assurance practices must consider.
A balanced approach ensures these rights are honoured while safeguarding children from inappropriate content.
Children’s Rights
Children’s rights to privacy, expression, and access to culture are vital considerations when implementing age assurance measures. Data protection regulations emphasize that the collection of personal information for age verification must be compliant and protect children’s privacy.
Service Providers need to consider the potential benefits their service offers to children when implementing age assurance.
Parental Controls
Parental consent measures and controls serve as a supplementary layer alongside age assurance, aiming to guide children’s digital experiences safely. These tools empower parents to manage their children’s online activities in ways that align with family values, complementing age assurance measures by providing additional oversight and content filtering capabilities.
Regulatory Guidance and Enforcement
Regulatory bodies play a vital role in overseeing the implementation of age assurance protocols to protect children online. Enforcement actions may include penalties and requirements for compliance audits to ensure age assurance measures are being adequately followed.
Adhering to these guidelines is crucial for online services to maintain a safe environment for minors.
Information Commissioner’s Office (ICO) Guidelines
Service Providers must conduct a children’s access assessment and children’s access assessments by April 16, 2025. They should consider the benefits to children and the nature and context of the service during assessments.
Social media companies must conduct risk assessments whenever they redesign their systems to ensure children’s online safety. Regular updates to risk assessments should be part of the internal review process to address new risks.
Ofcom’s Enforcement Programme
Ofcom’s enforcement actions focus on ensuring that online services comply with age assurance regulations to protect minors. The enforcement program may lead to penalties for services that do not adhere to age assurance regulations as mandated by the Online Safety Act.
Last Thoughts
In conclusion, navigating age assurance involves a delicate balance between protecting children and respecting their privacy. By implementing robust age checks, complying with data protection laws, and leveraging technological advancements, online services can create a safer digital environment. Regulatory bodies like the ICO and Ofcom play a crucial role in guiding and enforcing these measures. Together, we can ensure that the internet remains a safe and enriching space for all users.
FAQ
