EFF warns age verification laws exclude millions lacking government ID
Electronic Frontier Foundation argues mandatory ID checks for age verification block access for users without passports or licenses.
Key points
- Australia implemented a ban on social media accounts for users under sixteen in late 2025.
- Roughly 15 million adult US citizens lack a driver’s license, according to EFF data.
- The EU Commission recommends banning social media access for users under thirteen years old.
The Electronic Frontier Foundation published a report warning that mandatory age verification systems exclude millions of people who cannot provide government-issued identity documents. Sheila B. Lalwani, a recent COMPASS Fellow at the EFF, co-authored the analysis highlighting how these requirements create barriers to digital access. The organization argues that current proposals overlook the fundamental issue of identity scarcity among vulnerable populations globally.
Legislators often frame age verification as a simple tradeoff between privacy and child safety. However, the EFF notes that this perspective ignores individuals who simply cannot verify their age. This exclusion is particularly severe when platforms require users to submit passports, driver’s licenses, or credit cards. The report emphasizes that millions of people lack these documents or face regular challenges in obtaining them.
Global Legislative Trends
Age-related restrictions are expanding rapidly across multiple jurisdictions in recent months. Australia became the first nation to enforce a minimum age requirement, prohibiting children under sixteen from creating social media accounts in late 2025. The United Kingdom passed the Online Safety Act, which mandates age verification for services hosting content harmful to users under eighteen. These laws represent a significant shift toward mandatory assurance for digital services.
India enacted the Digital Personal Data Protection Act, which includes mandatory verifiable parental consent provisions. The country is also holding ongoing discussions regarding broader social media restrictions. Meanwhile, more than half of the states in the United States have enacted their own age verification laws. This fragmentation creates a complex compliance landscape for digital service providers operating internationally.
Exclusion of Unidentified Populations
The European Union Commission’s expert report recommends banning social media access for users under thirteen. It also advises mandatory age verification to ensure content is age-appropriate. These recommendations align with the trend toward strict identity proofing. Yet, reliance on standard identification documents excludes critical sections of the population. The problem is global, affecting millions who do not hold government-issued IDs.
In the United States, approximately 15 million adult citizens do not possess a driver’s license. An additional 2.6 million adults lack any government photo ID entirely. These figures leave large groups blocked from online content or services that require age proof. The United Kingdom faces a similar predicament, where proof-of-age checks rely on passports or licenses. People without these documents encounter unique challenges in accessing digital platforms.
What should you do?
Security and policy professionals should monitor how age verification mandates intersect with identity access issues. Organizations developing compliance strategies must consider populations lacking standard identification. Advocacy groups are highlighting privacy harms alongside exclusion concerns. Stakeholders should evaluate alternative verification methods that do not rely solely on government documents.
What to do and how to stay safe: Electronic Frontier Foundation
- Review current age verification compliance requirements in your operating jurisdictions to understand mandatory ID checks.
- Assess whether your user base includes individuals who may lack government-issued identification documents.
- Monitor legislative developments in the US, UK, EU, and Australia for updates on age assurance laws.
- Consult legal counsel regarding the Digital Personal Data Protection Act implications for services in India.
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Which countries have implemented strict age verification laws?
Australia, the UK, India, and the US have enacted or discussed strict age verification and age-related restrictions.
How many US adults lack a driver’s license?
Roughly 15 million adult US citizens lack a driver’s license, according to the Electronic Frontier Foundation.
What does the EU Commission recommend for social media?
The EU Commission recommends banning social media access for users under 13 and mandatory age verification.
