Since July 2025, UK platforms hosting content deemed harmful must verify that users are over 18 before granting access. Various age verification methods are used, each with distinct data collection and privacy implications that users should understand, especially regarding digital safety.
- UK platforms must verify users are over 18 to access certain content since mid-2025.
- Verification methods vary: facial scans, ID matching, and open banking check age differently.
- Data handling practices differ widely; users face potential privacy and safety risks.
What happened
In July 2025, UK regulations mandated that all online platforms hosting content identified as harmful by Ofcom must verify that users are over 18 years old to grant access. This law affects popular websites including Reddit and has led to implementations in devices like Apple iPhones.
This move aims to protect minors from exposure to potentially harmful content online by legally enforcing age verification processes. Platforms use a variety of technical solutions to ensure compliance, ranging from biometric facial analysis to document checks and financial data confirmation.
Why it matters
Different age verification methods collect varying types of personal data, from biometric images to official identification documents and banking information. These data sets carry different risks regarding user privacy, including potential data leaks or misuse, especially if third-party providers do not delete the information promptly.
Users may unknowingly expose sensitive details that could compromise their safety or privacy. For example, facial age estimation often requires uploading a photo, which might include identifiable background details, while photo-ID matching involves sharing sensitive government-issued documents.
What to watch next
Users should remain vigilant about how each platform or service conducts age verification and inquire about their data retention and deletion policies. Some providers delete biometric data immediately after verification, while others retain it longer, posing ongoing privacy concerns.
Regulators like Ofcom may update guidelines or enforcement mechanisms as the technologies and risks evolve. Monitoring these developments is crucial for users and advocacy groups aiming to protect digital rights and ensure that age verification methods do not undermine personal privacy and safety.