Governments around the world are passing online age restrictions in an attempt to keep children and teens safe online. While often well-intentioned, age check requirements pose significant risks to people\u2019s privacy, security, and access to an open Internet. <\/p>\n\n\n\n
Strong protections and independent oversight are necessary to ensure these policies achieve the goal of improving online safety. Without this, age check requirements become entry points for data breaches and close off people\u2019s access to online services. <\/p>\n\n\n\n
The current global patchwork of requirements is also fragmenting the open, global Internet. A lack of common standards leads to incompatible systems across borders, unequal access to online services, and reduced trust in the Internet. <\/p>\n\n\n\n
Everyone deserves a safe, secure, and trustworthy online experience. That\u2019s why effective online age restrictions must mitigate these risks for everyone and guarantee young people have access to safe, age-appropriate content. There are three guiding principles for policymakers and regulators. <\/p>\n\n\n\n
Many age checks require people to provide their government ID or financial account information to verify their identity. The more personal data people are required to provide, the greater the security and privacy risks become. <\/p>\n\n\n\n
No service is immune to data breaches<\/a>, and there is no available age check solution that is fully privacy preserving. That\u2019s why age checks should limit data collection and processing to an individual\u2019s age or age range.\u00a0<\/p>\n\n\n\n People deserve to choose how their data is used, and age check providers should not be able to identify or track a user. Any data they collect should only be used to complete the age check and deleted when no longer needed. <\/p>\n\n\n\n Even with strong security protections, perceived privacy intrusions still carry risks. For instance, some people, regardless of age, may feel uncomfortable<\/a> using a web camera to scan their face. This method, known as facial age estimation, has become a common method for determining age.\u00a0\u00a0<\/p>\n\n\n\n These privacy fears\u2014real or imagined\u2014can deter people from accessing reputable, age-restricted services. This can also lead them to seek out alternative, often riskier services<\/a> and workarounds<\/a> that do not comply with the law.\u00a0\u00a0<\/p>\n\n\n\n Some governments are considering restricting<\/a> the use of virtual private networks (VPNs) because they can get around area-specific content restrictions. VPNs are important privacy tools for individuals, activists, journalists, and businesses to secure their network connections. We must not let governments weaken or ban legitimate security tools to enforce age checks.\u00a0<\/p>\n\n\n\n Age verification laws can make it more difficult for certain populations to access online services. To be truly accessible, anyone should be able to complete an age check, regardless of their personal circumstances, device type, or computer skills. Unfortunately, this is often not the case. <\/p>\n\n\n\n For example, refugees and other migrant groups may not have government IDs or financial accounts. Low-income individuals may not have access to a web camera or a strong enough Internet connection to complete an age check. Some facial age estimation tools have varying accuracy<\/a> across different racial groups.\u00a0\u00a0<\/p>\n\n\n\n Many age check methods also don\u2019t account for people with disabilities. People unable to drive may not have an ID<\/a>, some disabilities make people look younger<\/a>, and age checks may be difficult or impossible to complete with assistive technologies.\u00a0\u00a0<\/p>\n\n\n\n If age check requirements are in place, everyone must be able to complete them. We believe that people should have multiple options for how they can provide their age or age range, allowing them to choose the method best suited to their circumstances. All age check technologies should be evaluated for accessibility before they are implemented. <\/p>\n\n\n\n Everyone should be able to easily complete age checks regardless of where in the world they are connecting to the Internet, with confidence that their data and privacy are secure. But a patchwork of different age requirements, types of age checks, and impacted services is fragmenting the Internet. <\/p>\n\n\n\n Fragmentation divides the unified, open, global Internet into smaller, isolated networks that are subject to different rules, regulations, and technical standards. People living in different jurisdictions have increasingly different experiences on the Internet. <\/p>\n\n\n\n Age gates and varying access to online services contribute to fragmentation and threaten the interconnectedness that enables seamless Internet use. <\/p>\n\n\n\n We believe the technology used for age checks should be interoperable and have security protections by default. These requirements should be guided by global standards for user-friendly design, reliable verification, and strong default security, including encryption. <\/p>\n\n\n\n Interoperability across jurisdictions will help uphold the principle of an open and global Internet. <\/p>\n\n\n\n Image \u00a9 Rupixen<\/a> via Unsplash<\/a><\/p>\n","protected":false},"excerpt":{"rendered":" While often well-intentioned, age check requirements pose significant risks to people\u2019s privacy, security, and access to an open Internet.<\/p>\n","protected":false},"author":1850,"featured_media":239874,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_uag_custom_page_level_css":"","footnotes":""},"categories":[31,4738],"tags":[],"region_news_regions":[5931],"content_category":[6085],"ppma_author":[5955],"class_list":["post-239873","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-privacy","category-security-1","region_news_regions-global","content_category-blog-type"],"acf":[],"uagb_featured_image_src":{"full":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2025\/12\/credit-card-computer.jpg",1200,550,false],"thumbnail":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2025\/12\/credit-card-computer-150x150.jpg",150,150,true],"medium":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2025\/12\/credit-card-computer-450x206.jpg",450,206,true],"medium_large":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2025\/12\/credit-card-computer-768x352.jpg",768,352,true],"large":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2025\/12\/credit-card-computer-1024x469.jpg",1024,469,true],"1536x1536":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2025\/12\/credit-card-computer.jpg",1200,550,false],"2048x2048":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2025\/12\/credit-card-computer.jpg",1200,550,false],"post-thumbnail":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2025\/12\/credit-card-computer-250x115.jpg",250,115,true],"square":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2025\/12\/credit-card-computer-600x550.jpg",600,550,true],"gform-image-choice-sm":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2025\/12\/credit-card-computer.jpg",300,138,false],"gform-image-choice-md":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2025\/12\/credit-card-computer.jpg",400,183,false],"gform-image-choice-lg":["https:\/\/www.internetsociety.org\/wp-content\/uploads\/2025\/12\/credit-card-computer.jpg",600,275,false]},"uagb_author_info":{"display_name":"John Perrino","author_link":"https:\/\/www.internetsociety.org\/author\/perrino\/"},"uagb_comment_info":0,"uagb_excerpt":"While often well-intentioned, age check requirements pose significant risks to people\u2019s privacy, security, and access to an open Internet.","authors":[{"term_id":5955,"user_id":1850,"is_guest":0,"slug":"perrino","display_name":"John Perrino","avatar_url":"https:\/\/secure.gravatar.com\/avatar\/8eea754b8d9ed7444d5f649f20dbdfd76186af86a9dd7fa3298e08e8049fb666?s=96&d=mm&r=g","author_category":"","last_name":"Perrino","first_name":"John","job_title":"","user_url":"","description":""}],"_links":{"self":[{"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/posts\/239873","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/users\/1850"}],"replies":[{"embeddable":true,"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/comments?post=239873"}],"version-history":[{"count":0,"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/posts\/239873\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/media\/239874"}],"wp:attachment":[{"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/media?parent=239873"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/categories?post=239873"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/tags?post=239873"},{"taxonomy":"region_news_regions","embeddable":true,"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/region_news_regions?post=239873"},{"taxonomy":"content_category","embeddable":true,"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/content_category?post=239873"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.internetsociety.org\/wp-json\/wp\/v2\/ppma_author?post=239873"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Ensure Accessibility for All Users\u00a0<\/h4>\n\n\n\n
Protect an Open and Global Internet\u00a0<\/h4>\n\n\n\n
Young people should not be blocked from accessing positive online experiences, and adults should not be cut off from services because they are concerned about their privacy or cannot complete age verification processes.\u202fRead our full online age restrictions policy brief to learn more.<\/a>\u00a0<\/h5>\n\n\n\n
\n\n\n\n