Anonymity lost? Age checks come to the web
Richard Errington clicked to stream a science fiction film from his home in Britain recently when Youtube carded him.
The site said Errington, who is older than 50, needed to prove that he was old enough to watch “Space Is the Place,” a 1974 movie starring jazz musician Sun Ra. He had three options: Enter his credit card information, upload a photo identification such as a passport, or skip the video.
“I decided that it wasn’t worth the stress,” he said.
In response to mounting pressure from activists, parents and regulators who believe tech companies haven’t done enough to protect children online, businesses and governments around the globe are placing major parts of the internet behind stricter digital age checks.
People in Japan must provide a document proving their age to use the dating app Tinder. The popular game Roblox requires players to upload a form of government identification — and a selfie to prove the ID belongs to them — if they want access to a voice chat feature. Laws in Germany and France require pornography websites to check visitors’ ages.
The changes, which have picked up speed in the past two years, could upend one of the internet’s central traits: the ability to remain anonymous. Since the days of dial-up modems, people could traverse huge swaths of the web without divulging any personal details. Many people created an online persona entirely separate from their offline one.
But the experience of consuming content and communicating online is increasingly less like an anonymous public square and more like going to the bank, with measures to prove that you are who you say you are. Early last month, lawmakers in Washington, which has lagged other world capitals in regulating tech companies, called for new rules to protect young people after a former Facebook employee said the company knew its products harmed some teenagers. They repeated those calls later in the month in a hearing with executives from Youtube, Tiktok and the parent company of Snapchat.
Critics of the age checks say that in the name of keeping people safe, they could endanger user privacy, dampen free expression and hurt communities that benefit from anonymity online. Authoritarian governments have used protecting children as an argument for limiting online speech: China barred websites this summer from ranking celebrities by popularity as part of a larger crackdown on what it says are the pernicious effects of celebrity culture on young people.
“Are we going to start seeing more age verification? Of course,” said Hany Farid, a professor of engineering and computer science at the University of California, Berkeley, who has called for more child safety measures. “Because there is more pressure, there’s more awareness now on how these technologies are harming kids.”
But, Farid said, regulators and companies need to proceed with caution. “We don’t want the solution to be more harmful than the problem,” he said.
Many websites have long required visitors to submit their birth date to see content meant only for adults. But visitors could usually do so without showing any evidence of their age.
That is no longer enough for some regulators. New child protection guidelines in Britain say some websites need to take additional steps to verify their users’ ages when the services collect sensitive user data.
An update to the European Union’s rules for video and audio services requires sites to protect minors, which may include checking users’ ages. In response, Google said last year that it would ask some users of Youtube, which it owns, for their identification documents or credit card details before they could watch adults-only videos. A spokesperson for Google pointed to an August blog post where the company said it was “looking at ways to develop consistent product experiences and user controls for kids and teens globally” as regulators applied new rules in different countries.
Facebook is exploring similar options. The company said in July that it was developing programs to look for signs users are lying about their age, such as spotting when someone who claims to be 21 gets messages about her quinceañera. But when “we do feel we need more information, we’re developing a menu of options for someone to prove their age,” Pavni Diwanji, Facebook’s vice president of youth products, said in the post. Facebook later said one option would involve providing identification documents.
Many of the new age verification efforts require users to submit government-issued identification or credit card information. But other companies are using, or considering, other options, such as software that scans a user’s face to approximate that person’s age.
Critics of the checks worry the requirement will force users to give sensitive information to websites with limited resources to prevent hacks. Outside companies that offer age checks would be vulnerable, too.
“Either way, that’s still a treasure trove of data that’s exploitable,” said Daly Barnett, a staff technologist at the Electronic Frontier Foundation, an online privacy and free speech advocacy group.
Many companies, and governments, say they are putting measures in place to address privacy concerns, such as limits on how long data is stored. The British privacy regulator overseeing the new child protection code said last month that websites should deploy the most aggressive age checks only when the potential risk was equally significant.
Some services are resisting the checks. Twitter allows users to disclose their birth date but does not require it. If users want to view adult content, they must click through a warning but don’t have to prove they are 18 or older.
“At the heart of Twitter is the belief that there’s a huge value to the public conversation of people being able to speak pseudonymously to the world,” said Nick Pickles, a senior director of global public policy strategy at Twitter, “and also not requiring a significant amount of personal information to be provided before you can use online services.”
The shift might be troublesome for some, critics said. Posts related to lesbian, gay, bisexual and transgender people are more likely to be mistakenly marked as “adult” content even if they are not overtly sexual, for example, said Barnett.
Automatic facial analysis is also often less accurate for female faces or people with darker skin. And critics worry that strict age checks could make life more difficult for people such as sex workers and political dissidents who rely on anonymity online.