EDRi-gram, 17 September 2025

Age verification technologies are rapidly gaining prominence across the digital landscape, prompting significant debate regarding their potential impact on fundamental rights and the future of online spaces in Europe. Concerns are mounting that these systems, designed to verify the age of users, may unintentionally compromise user privacy and undermine existing safeguards established by the General Data Protection Regulation (GDPR). The development and deployment of these technologies demand careful consideration from policymakers and regulators to ensure a balance between age verification and the protection of individual freedoms. Several age verification methods are being proposed and tested, ranging from simple self-declaration to more complex systems involving biometric data or the sharing of personal information with third-party providers. This technical landscape is evolving quickly, and raises important questions about data security, storage, and the potential for misuse. The effectiveness of these technologies in preventing access to age-restricted content remains a subject of ongoing debate, whilst the potential for disproportionate impact on younger users and those with limited digital literacy is a growing concern. The widespread adoption of age verification technologies could affect all European citizens, particularly children and young adults, but also businesses operating online. Changes to online practices necessitate strong safeguards to prevent discrimination and protect against the unwarranted collection and use of personal data. The EU needs to ensure compliance with existing regulations, and promote the development of solutions aligned with its commitment to digital sovereignty and fundamental rights. The evolving landscape surrounding age verification technologies requires a proactive and informed approach from European regulators. The European Commission is under pressure to update its Digital Services Act (DSA) guidance on age verification and is also examining the potential of fostering European-led alternatives. This regulatory momentum indicates the EU is taking the issue seriously and should be considered as the framework for digital rule-making evolves.