What Is Age Verification and Why Is It Expanding?

Age verification (AV) refers to the process of confirming that an internet user meets a minimum age threshold before accessing certain types of online content. While age gates — simple checkbox prompts asking users to confirm their birthdate — have existed for decades, governments worldwide began introducing legally binding, technically enforceable AV requirements in the early-to-mid 2020s. By 2026, dozens of jurisdictions have passed or are actively implementing legislation that requires platforms to verify user ages through robust, documented means rather than self-declaration.

The primary drivers behind these laws are child safety concerns, particularly around exposure to pornography, gambling, alcohol advertising, social media platforms, and violent video games.

---

Key Laws and Regions

United Kingdom

The UK's Online Safety Act, which received Royal Assent in 2023, placed significant obligations on platforms hosting pornographic content and other age-restricted material. Ofcom, the UK communications regulator, has been phasing in enforcement requirements since 2024, with full compliance expected from platforms by 2025–2026. Platforms must implement "highly effective" age assurance methods, which Ofcom interprets as going well beyond a simple date-of-birth entry.

European Union

The Digital Services Act (DSA), fully applicable since early 2024, requires Very Large Online Platforms (VLOPs) to assess and mitigate risks to minors. Member states are also pursuing their own supplementary legislation. France has been particularly active, with courts ordering ISPs to block non-compliant pornographic sites and the ARCOM regulator developing a national age verification framework.

United States

The United States has no single federal AV law as of 2026, but numerous states have enacted their own legislation. Louisiana's Age Verification Law (HB 142) was one of the earliest, requiring pornographic websites to verify user ages. Texas, Virginia, Utah, and over a dozen other states have followed with similar statutes. The Free Speech Coalition has challenged several of these laws on First Amendment grounds, resulting in an inconsistent legal landscape across states. The Supreme Court's 2025 ruling in Free Speech Coalition v. Paxton provided partial clarity, though enforcement remains varied.

Australia

Australia passed the Online Safety Amendment (Social Media Minimum Age) Act in late 2024, banning children under 16 from using major social media platforms and placing the burden of age verification on the platforms themselves, not users or parents. This law is widely considered one of the strictest social media age restrictions globally.

Canada and Others

Canada has debated federal AV legislation tied to its Online Harms Act. Meanwhile, countries such as Germany, South Korea, and Japan have long-standing age verification frameworks tied to their existing media classification systems.

---

How Age Verification Technology Works

Several technical approaches are used or proposed for AV compliance:

  • Credit card or payment verification: Uses financial account ownership as a proxy for adult status. Effective but excludes unbanked users and raises privacy concerns.
  • Government ID upload: Users submit a driving licence or passport scan. Highly accurate but creates significant data security risks.
  • Digital identity wallets: Emerging in the EU under the eIDAS 2.0 framework, these allow users to share a verified age credential without revealing full identity details.
  • Facial age estimation: AI analyses a selfie or short video to estimate whether a user is above a certain age threshold. No identity document is retained, but accuracy and bias concerns remain.
  • Mobile network operator (MNO) verification: The user's mobile carrier confirms their age based on account records. Requires carrier cooperation and is limited to mobile users.

---

Privacy Implications

Age verification creates a fundamental tension between child safety and adult privacy. Any system that works reliably enough to satisfy regulators will, by definition, collect or process personal data. Critics argue that centralised AV databases represent significant breach targets. There is also the risk of function creep — data collected for age verification being repurposed for other surveillance.

Privacy-preserving approaches, such as zero-knowledge proofs and decentralised credential systems, are technically capable of confirming age without revealing identity, but widespread deployment is still limited as of 2026.

---

How VPNs Interact With Age Verification

Using a VPN can change the apparent geographic location of a user, potentially allowing access to platforms that are blocked in a user's home country due to AV non-compliance. However, VPNs do not bypass on-site age verification requirements themselves — if a platform requires ID verification upon arrival, changing your IP address does not remove that requirement. Regulators are increasingly aware of this distinction, and some legislation explicitly addresses VPN circumvention by targeting app stores and payment processors rather than just IP-based blocking.

---