{"id":214367,"date":"2024-09-23T20:08:50","date_gmt":"2024-09-23T20:08:50","guid":{"rendered":"https:\/\/www.internetsociety.org\/?p=214367"},"modified":"2025-12-03T12:05:33","modified_gmt":"2025-12-03T12:05:33","slug":"texas-mandatory-age-verification-law-will-weaken-privacy-and-security-on-the-internet","status":"publish","type":"post","link":"https:\/\/www.internetsociety.org\/blog\/2024\/09\/texas-mandatory-age-verification-law-will-weaken-privacy-and-security-on-the-internet\/","title":{"rendered":"Texas\u2019 Mandatory Age Verification Law Will Weaken Privacy and Security on the Internet"},"content":{"rendered":"\n<p>Governments are increasingly turning to age verification to try to restrict access to certain types of content on the Internet. Many such laws may be well-intentioned with the aim to prevent exposing children to adult content. But mandating the use of age verification technologies will not provide an effective solution and will create a false sense of security. <\/p>\n\n\n\n<p>Even more troubling, such laws would introduce accessibility, privacy, and security risks for users of all ages. They would also have a chilling effect on everyday Internet use to access health and entertainment content.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Filing a Joint Amicus Brief<\/h4>\n\n\n\n<p>On Friday, 20 September 2024, we joined an amicus brief led by the Center for Democracy and Technology (CDT) and also signed by New America\u2019s Open Technology Institute (OTI) and professors Daniel Weitzner, Eran Tromer, and Sarah Scheffler. The brief was filed before the US Supreme Court in the case Free Speech Coalition, Inc. et al. v. Ken Paxton, Attorney General.<\/p>\n\n\n\n<p>In 2023, the state of Texas passed a law, <a href=\"https:\/\/legiscan.com\/TX\/bill\/HB1181\/2023\">HB 1181<\/a>, that would require websites with more than one-third of content that is \u201csexual material harmful to minors\u201d to use \u201creasonable age verification methods\u201d to verify that an individual attempting to access the material is of 18 years or older. A district court struck down the law&#8217;s age verification provisions as an unconstitutional burden on the ability of adults to access lawful content. However, the US Fifth Circuit Court of Appeals reversed the ruling. Parties then applied to the US Supreme Court, which agreed to hear the case.<\/p>\n\n\n\n<p>Our concern is that if the US Supreme Court upholds this law, not only will people in Texas have an unsafe online experience, but other US states may seek to copy this law, and soon, people across the US will be less safe online. Additionally, other countries may follow the example of Texas, and <strong>Internet users all around the world will be less secure.<\/strong><\/p>\n\n\n\n<h4 class=\"wp-block-heading\">The Challenge of Age Verification<\/h4>\n\n\n\n<p>Age verification technologies are already in use on the Internet. But that doesn\u2019t make them safe, secure, or effective.<\/p>\n\n\n\n<p>In the <a href=\"https:\/\/www.supremecourt.gov\/DocketPDF\/23\/23-1122\/326510\/20240920161551554_23-1122%20Amicus%20Brief.pdf\">joint amicus brief<\/a> filed on Friday, we outline the practical challenges of using the current range of technologies available for age verification. The brief describes five categories of existing age verification technologies that could be used to comply with HB 1181:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Uploading a copy of a government ID<\/li>\n\n\n\n<li>Authorizing temporary credit or debit card charges<\/li>\n\n\n\n<li>Third-party databases and analysis (that match identifying information (e.g., an email address, phone number, account profile name) to an estimated age using information associated with that identifying information<\/li>\n\n\n\n<li>Biometric scanning<\/li>\n\n\n\n<li>First-party signal analysis (a technique commonly used by social media websites to verify the ages of their users)<\/li>\n<\/ul>\n\n\n\n<p>We explain how they are often ineffective at accurately identifying an individual\u2019s age and can be circumvented by minors. We also highlight how individuals may be excluded from age verification schemes because they do not have government-issued IDs or credit cards. We also address the significant privacy and security risks to all users, including minors, and the effect that age verification will have on adults\u2019 access to content.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">The Risks of Mandatory Age Verification<\/h4>\n\n\n\n<p>Apart from the practical challenges of age verification technologies and their privacy and security risks, users may be less willing to access content that requires age verification, fearing that their activity could be monitored.<\/p>\n\n\n\n<p>Adult users who want to access content may also find their access is hindered because it is too challenging to use. For instance, <a href=\"https:\/\/www.ncbi.nlm.nih.gov\/pmc\/articles\/PMC6456356\/\">adermatoglyphia<\/a> (loss of fingerprints), \u201c<a href=\"https:\/\/ieeexplore.ieee.org\/document\/6845213\">cataracts, stroke, congestive heart failure, hard veins, and other ailments<\/a>\u201d may prevent older Americans from being able to successfully use age verification schemes based on biometrics and facial scans.<\/p>\n\n\n\n<p>Even the narrowest use of mandatory age verification is vulnerable to being expanded and could easily spread to other types of content. Further, if more and more countries start adding mandatory age verification requirements for different ages and different services, a conflicting patchwork of restricted access will emerge and disrupt the seamless, interoperable nature of the Internet.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Next Steps<\/h4>\n\n\n\n<p>Now\u2026we wait. The Supreme Court will hear the case during their 2024-2025 term, but no date has yet been set for oral arguments. You <a href=\"https:\/\/www.supremecourt.gov\/docket\/docketfiles\/html\/public\/23-1122.html\">can join us in watching the Supreme Court\u2019s site in the months ahead<\/a> to see when the next phase begins.<\/p>\n\n\n\n<p>We hope our joint amicus brief will inform the Supreme Court of the significant challenges today posed by age verification technologies, which means that requiring their use under HB 1181 would not effectively protect children from harmful material, and would undermine the security and privacy of all Internet users, including both adults and minors.<\/p>\n\n\n\n<p>In the meantime, there is important work to be done to improve the security, privacy, and accessibility of age verification systems that are already in use, and to <a href=\"https:\/\/www.internetsociety.org\/blog\/2024\/07\/encryption-is-a-preventative-tool-that-protects-children\/\">protect children\u2019s personal interactions with end-to-end encryption<\/a> and strong privacy standards.<\/p>\n\n\n\n<h5 class=\"wp-block-heading has-accent-purple-color has-text-color has-link-color wp-elements-c4fe9c892759148f5c9b3b137add3496\"><a href=\"https:\/\/www.internetsociety.org\/amicus-program\/\" target=\"_blank\" rel=\"noreferrer noopener\">Learn more about our Amicus Program<\/a> where we seek to give the Internet a voice in the courts.\u202f&nbsp;<\/h5>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"has-18-font-size\">Image \u00a9: <a href=\"https:\/\/www.flickr.com\/photos\/8323834@N07\/500995147\">Nick Carter<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Texas&#8217; mandatory age verification law will weaken Internet privacy and security and will not provide an effective solution to children being exposed to adult content online.<\/p>\n","protected":false},"author":393,"featured_media":214378,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_uag_custom_page_level_css":"","footnotes":""},"categories":[98,31,4898,4738],"tags":[5838],"region_news_regions":[37],"content_category":[6085],"ppma_author":[4090,4048],"class_list":["post-214367","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-public-policy","category-privacy","category-strong-internet","category-security-1","tag-amicus-briefs","region_news_regions-north-america","content_category-blog-type"],"acf":[],"uagb_featured_image_src":{"full":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2024\/09\/open-lock.jpg",1200,554,false],"thumbnail":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2024\/09\/open-lock-150x150.jpg",150,150,true],"medium":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2024\/09\/open-lock-450x208.jpg",450,208,true],"medium_large":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2024\/09\/open-lock-768x355.jpg",768,355,true],"large":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2024\/09\/open-lock-1024x473.jpg",1024,473,true],"1536x1536":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2024\/09\/open-lock.jpg",1200,554,false],"2048x2048":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2024\/09\/open-lock.jpg",1200,554,false],"post-thumbnail":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2024\/09\/open-lock-250x115.jpg",250,115,true],"square":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2024\/09\/open-lock-600x554.jpg",600,554,true],"gform-image-choice-sm":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2024\/09\/open-lock.jpg",300,139,false],"gform-image-choice-md":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2024\/09\/open-lock.jpg",400,185,false],"gform-image-choice-lg":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2024\/09\/open-lock.jpg",600,277,false]},"uagb_author_info":{"display_name":"Christine Runnegar","author_link":"https:\/\/www.internetsociety.org\/author\/runnegar\/"},"uagb_comment_info":0,"uagb_excerpt":"Texas' mandatory age verification law will weaken Internet privacy and security and will not provide an effective solution to children being exposed to adult content online.","authors":[{"term_id":4090,"user_id":393,"is_guest":0,"slug":"runnegar","display_name":"Christine Runnegar","avatar_url":{"url":"https:\/\/www.internetsociety.org\/wp-content\/uploads\/2022\/05\/ChristineRunnegar.jpeg","url2x":"https:\/\/www.internetsociety.org\/wp-content\/uploads\/2022\/05\/ChristineRunnegar.jpeg"},"author_category":"","last_name":"Runnegar","first_name":"Christine Runnegar","job_title":"","user_url":"","description":""},{"term_id":4048,"user_id":14,"is_guest":0,"slug":"york","display_name":"Dan York","avatar_url":{"url":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","url2x":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g2x"},"author_category":"","last_name":"York","first_name":"Dan York","job_title":"","user_url":"","description":""}],"_links":{"self":[{"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/posts\/214367","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/users\/393"}],"replies":[{"embeddable":true,"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/comments?post=214367"}],"version-history":[{"count":0,"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/posts\/214367\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/media\/214378"}],"wp:attachment":[{"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/media?parent=214367"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/categories?post=214367"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/tags?post=214367"},{"taxonomy":"region_news_regions","embeddable":true,"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/region_news_regions?post=214367"},{"taxonomy":"content_category","embeddable":true,"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/content_category?post=214367"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/ppma_author?post=214367"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}