New Ofcom findings reveal a difficult trade-off between protecting children online and requiring users to share identity information before accessing social platforms.
The United Kingdom’s planned restrictions on social media access for children under 16 are creating a new challenge for technology companies: verifying users’ ages without excluding legitimate users or compromising their personal information.
In an October 29 assessment, communications regulator Ofcom identified four age-verification methods capable of reliably determining whether someone is at least 16.
However, the regulator estimated that approximately 150,000 British teenagers aged 16 and 17 lack a passport or driving licence, documents that could become important for accessing age-restricted platforms.
The findings highlight the potential consequences of introducing stronger safeguards across digital services used by millions of people.
Four Technologies Could Verify Users’ Ages
Ofcom identified photo ID matching, banking-based checks, digital identity services and facial age estimation as potentially highly effective approaches.
Photo ID verification compares an official document with a live image, while banking-based checks use age information already held by financial institutions.
Facial age estimation examines physical characteristics to predict age, although Ofcom acknowledged that some systems can make errors of several years around the age-16 threshold.
According to the regulator, approximately 94% of people aged 16 and older hold a passport or driving licence, while around 90% of 16- and 17-year-olds have bank accounts.
These figures suggest that many people could complete verification, but others may face additional requirements.
Privacy Experts Warn About Sensitive Information
Age verification introduces risks when platforms process identification documents, facial images or other sensitive information.
In an October 29 statement, Katie Searle, director of children’s strategy at the Information Commissioner’s Office, emphasized the importance of protecting personal data while strengthening online safety.
The regulator is working with the government and Ofcom to ensure data-protection considerations are reflected in the forthcoming rules.
Meanwhile, TechRadar’s reporting cited Pieter Arntz, a senior malware intelligence analyst at Malwarebytes, who warned that identity-document collection could create attractive targets for criminals.
He advocated verification systems that allow users to prove they meet an age requirement without revealing their identities to the services they access.
Enforcement Will Not Be Straightforward
The UK government announced its intention to restrict social media access for under-16s in June.
Its online child-safety policy also proposes restrictions on harmful platform features for users younger than 18.
However, the detailed regulations have not yet been finalized, and implementation is expected in 2027.
Ofcom acknowledged that some children will circumvent age checks, making additional safeguards necessary.
The regulator also suggested that app stores could play a greater role in verification, noting that many currently rely primarily on users declaring their own ages.
What This Means for Software Developers
For social media platforms and identity-verification providers, the challenge extends beyond recognizing valid documents or estimating someone’s age.
Developers must balance accuracy, accessibility, privacy, cybersecurity and the ability to prevent unauthorized access.
Poorly designed systems could exclude legitimate users, collect unnecessary personal information or encourage people to seek alternative services with weaker protections.
The emerging test for online safety technology is whether platforms can protect children effectively without turning ordinary internet access into an unnecessarily intrusive identity-verification process.
