What does Bill C-34 do?

Bill C-34 is federal legislation that would require social media platforms to block access for users under 16 in Canada. Platforms would need to verify users' ages before granting access.

How would platforms verify ages under Bill C-34?

The bill doesn't mandate a single method, but common approaches include uploading government-issued ID, facial age-estimation scans, or third-party verification services that check records like credit history or mobile carrier data.

Why would platforms need to verify everyone's age, not just kids?

Because a system designed to stop users under 16 must also confirm that users over 16 are actually over 16. The article notes platforms can't verify who is under 16 without first verifying who is over it.

What privacy concerns are raised by age verification?

ID uploads expose documents like driver's licenses or passports, facial scanning introduces biometric data that can't be changed if leaked, and third-party verification may send personal information to unfamiliar companies.

Does Bill C-34 apply only to new sign-ups or also existing users?

The compliance burden is on platforms to screen an entire user base, not just flag suspicious new accounts. The bill would also require platforms to prevent underage users from keeping accounts, so existing users could be affected.

Bill C-34: How Canada Would Verify Kids' Ages Online

Ottawa has a new plan to keep kids off social media, and it hinges on a question that has stumped regulators worldwide: how do you actually prove someone's age online without collecting sensitive personal data on everyone?

In June, the federal government introduced Bill C-34, legislation that would force social media platforms to block access for users under 16. The goal is straightforward. The mechanics are not. Any system built to stop a 14-year-old from signing up for an account has to verify the age of every user, not just the ones trying to sneak past the rules. That reality is at the center of growing debate over Bill C-34 age verification privacy tradeoffs, and it's worth understanding before the law takes effect.

What Bill C-34 Actually Requires of Platforms

At its core, Bill C-34 sets a minimum age of 16 for having a social media account in Canada. Platforms would be legally required to prevent underage users from creating or keeping accounts, which means they need some way to confirm how old a person actually is before granting access. The bill doesn't just apply to new sign-ups; it puts the compliance burden on the platforms themselves, meaning companies operating in Canada will need to build or license verification systems capable of screening an entire user base, not just flagging suspicious new accounts.

This is a meaningful shift from self-declared birthdates, which is how most platforms currently handle age restrictions. A checkbox asking "are you over 16" satisfies almost no one, including regulators. Bill C-34 is designed to close that gap by requiring something closer to actual proof.

How Age Verification Technology Works and What Data It Collects

There is no single method for verifying age online, and that's part of what makes this legislation complicated. Common approaches include uploading a government-issued ID, submitting to facial age-estimation scans, or relying on third-party verification services that check a user's information against existing records like credit history or mobile carrier data.

Each method comes with a different privacy footprint. ID uploads mean platforms, or their verification vendors, are handling scans of driver's licenses or passports, documents packed with data far beyond a birthdate. Facial scanning avoids document uploads but introduces biometric data collection, which carries its own long-term risks since biometric identifiers can't be changed if they're exposed. Third-party verification services often sit between the user and the platform, meaning a user's personal information may pass through a company most people have never heard of and never agreed to trust directly.

The practical effect is that an age verification law aimed at protecting minors ends up requiring identity-adjacent data from adults too, since platforms can't verify who is under 16 without first verifying who is over it.

Data Retention and Third-Party Verification Risks for Minors

Once that data is collected, the next question is what happens to it. Bill C-34 would require protections for personal information gathered through age verification, but the specifics of retention periods, deletion timelines, and third-party data sharing are the details that will determine how much risk this creates in practice.

This matters most for the very users the law is meant to protect. If verification data belonging to teenagers, including ID scans or biometric templates, is retained by third-party vendors longer than necessary, or shared across services for fraud-prevention purposes, it creates a new category of sensitive records tied to minors that didn't previously exist at this scale. A breach at a verification vendor, rather than the social media platform itself, could expose exactly the kind of information the law is trying to shield.

How This Fits Into Canada's Broader Push for Online Identity Checks

Bill C-34 doesn't exist in isolation. It reflects a broader pattern in recent Canadian legislation of asking Canadians to prove who they are, or hand over more identifying information, in exchange for using digital services. That pattern extends beyond social media. Canada's proposed lawful access legislation, Bill C-22, has already drawn scrutiny after the RCMP confirmed it targets encrypted communications, despite earlier government assurances that encryption wouldn't be affected. Taken together, these bills suggest a regulatory direction where identity verification and reduced anonymity online are becoming default expectations rather than exceptions.

What This Means for You

If you're a parent, Bill C-34 may sound like a welcome guardrail. But it's worth understanding that the law's success depends entirely on verification systems that will also touch adult users, not just teenagers. If you use social media in Canada, you should expect that compliance with this bill could eventually mean submitting some form of ID, biometric scan, or third-party check to keep your existing account active, not just new sign-ups from minors.

Privacy-conscious Canadians should pay close attention to which verification method platforms choose, since that decision determines whether your data footprint grows slightly (a one-time age estimate) or significantly (a stored ID document or biometric profile held by a third-party vendor).

Key Takeaways

Bill C-34 requires platforms to block under-16 users, which in practice means verifying the age of every user, not just minors.
Verification methods range from ID uploads to facial scanning to third-party data checks, each with different privacy tradeoffs.
Data retention and third-party handling of verification records, especially for minors, remain open questions as the bill moves forward.
This legislation fits a broader Canadian pattern of expanding identity and surveillance requirements online, alongside bills like C-22.

As Bill C-34 moves through the legislative process, the details of how age verification is implemented, and how that data is stored, will matter just as much as the policy's intent. Staying informed on both fronts is the best way for Canadians to advocate for a system that protects kids without exposing everyone else.