A safer internet starts with smarter age checks.

Today, we're rolling out our first prototype of an age verification app to protect minors:

📱 Online platforms will be able to use it to protect our children from harmful and illegal content.

🚸Young people will be able to verify their age without revealing any other info, such as their identity.

🌍 The pilot phase kicks off with 🇩🇰🇫🇷🇬🇷🇮🇹🇪🇸

Making sure our children and young people are safe online is our duty.

https://europa.eu/!BKxcW3

@EUCommission Single-use certificates, good stuff!
Let's try to avoid India's Aadhar number privacy catastrophy :)
We can't have both full anonymity and age verification at the same time, but like hell any private business has anything to do with my identity.
So let's have anonymity where we can and keep the responsibility with people I can vote out of government if they fail me.
(And if we do elect a fascist government, this will be the least of our worries. Sorry EFF libertarians.)
@EUCommission and you know what else is sad? It’s so American! If there’s one thing that this mildly different between people in the north of the EU and the Anglo-Saxon world it’s their approach to nudity. Where the Anglo-Saxons are extremely prudish and the north European countries like Denmark and Netherlands are rather liberal.

So what does the European Union do?

Exactly, copy the Anglo-Saxon world.

So again: it’s the responsibility of the parents.
Nufsaid.

@EUCommission Concept:

A browser extension that:
• Stores or imports an age credential file (e.g., JSON, JWT, or cryptographic blob)
• Automatically detects when a site requests age verification
• Intercepts the request and auto-injects a valid credential (e.g., over-18 proof)
• Silently passes the check without user interaction

@EUCommission@ec.social-network.europa.eu Stupid question about this, that hopefully someone more versed in security than me might know.

The protocol description mentions that the first version is going to use batching and after that going to move to a ZK proof but... Wouldn't this particular case work well with a single batch for everyone?

For example, you would authenticate in an app/website and get the current global "adult PIN" (rotating every 10 minutes or something). Kind of like TOTP, but not really (as it's not one time and is shared by everyone).

I'm sure I'm missing something, but what would be the limitations of this vs the proposed solution?

I can think of code sharing, but if the refresh window is small, is that so much different than sharing the content itself?

Even if a website decided to start distributing the codes openly, wouldn't that just be the same as if someone setup an adult proxy or a site without an age gate?

@EUCommission a better Europe starts with a European Commission doing serious stuff.

Every app, every device and every streaming service has excellent parental controls. It’s the parents that are responsible for what their children see and don’t see. There’s even within the European Union a huge cultural difference in what is seen as appropriate per age group.

So stop messing around and start doing serious stuff or your risk repeating the cookie drama.

@EUCommission
Checking how an "age verification" app can "allow users to easily prove they are over 18" while at the same time the user remains "in full control of any other personal information, such as a user's exact age or identity":
"age will be verified by the issuer using detailed personal data", so, uhh. 🤷
Apps can be removed/disabled/bypassed. Better, I believe, would be to rate a DEVICE as 18+, 16+ or All Ages, where it's the System that blocks age-restricted content.
@EUCommission You are providing a solution that won't fix the problem in question, but will introduce unnecessary surveillance in a very personal and intimate sphere further destroying the reputation of the EU within member states and giving fuel to far-right movements. It will be very invasive for adults, and inefficient for minors - they will find ways to access such content either way. Instead you should explore areas of proper sexual education, teaching consent and non-abusive pornography.
@EUCommission Just use local control (like parental control) for minor. This is efficient (cannot be bypassed by VPN) and privacy respecting (100% local). Mandate phone sold to minors to be locked this way, while phone sold to adult are unlocked.

Online solutions are easily bypassed and extremely privacy invasive, this is clearly the wrong approach

@EUCommission delegating the check to a site is a dumb decision that made possible scams.
If you want to realise an age verification easy and Safe, you can use something like Italian Spid. People visiting a e.g. porn site must authenticate with a spid provider. Once authenticated, the provider will pass a token to the site which authorize the user to access it
@EUCommission This is a non-solution in search of a problem. Young people are getting radicalised by neo-nazi content on all-ages websites like YouTube, Twitter and Facebook, while youth consumption of pornography causes zero measurable harm. I am appalled that we are introducing this level of surveillance into European daily lives.

#ageverification