Confirmation of Maturity Required by Bluesky: Detailing the Approach I Took
In the digital age, the U.K. government is taking a stand against harmful content by implementing stricter age verification measures for various online sites and apps, including social media platforms like Reddit, X, and Bluesky, as well as dating apps like Grindr.
These new regulations, part of the U.K.'s online safety push, require sites to use age verification methods such as email verification, face scans powered by companies like Yoti, or credit card details. However, concerns about privacy and data security have been raised, particularly with the use of the Kids Web Services (KWS) tool for age verification.
KWS, used by platforms like Bluesky, requires users to register an email and upload sensitive data, such as facial scans and IDs. This raises concerns about the potential for data breaches, similar to the recent incident involving the dating safety app Tea, where verification selfies and digital IDs were compromised.
Digital rights groups, such as the Electronic Frontier Foundation, argue that these mandatory online age checks pose a threat to privacy and anonymity. The enforcement of the Online Safety Act necessitates robust verification that may include device fingerprinting or tracking techniques, further risking user privacy.
Another concern is the extent of data collection. Age verification via KWS might involve repeated collection of personally identifiable information, facial recognition data, or credit card authentication, which could be used for purposes beyond age verification if not properly safeguarded.
There are also potential issues with the Yoti face scan process, with some users reporting difficulties navigating the process and others having to remove glasses for the scan to work, despite the site's instructions to keep them on.
However, Yoti claims to wipe the image of the user's face from its system after verification and does not store any personal data. Epic Games, which owns KWS, claims to store only the user's hashed email address, verified status, the method used for verification, the date/time of verification, the service/game for which they were verified, the user's location, and a user ID.
Despite these concerns, some users have encountered issues with the verification process. One Bluesky user, for example, reported that the Yoti page did not accept their face for verification. The use of VPNs also makes it possible to appear as if visiting from a different jurisdiction that doesn't require age verification.
These new age verification measures are aimed at ensuring that sites and apps that "allow harmful content" use "highly effective age gating methods" to ensure users are adults. However, the privacy concerns associated with these methods highlight the need for careful consideration and transparency in the handling of sensitive personal data.
[1] Electronic Frontier Foundation. (2021). Age Verification and Online Safety: A Threat to Privacy and Anonymity. Retrieved from https://www.eff.org/deeplinks/2021/02/age-verification-and-online-safety-threat-privacy-and-anonymity
[2] Tea Security Breach Exposes Verification Selfies and IDs. (2021). Retrieved from https://www.techradar.com/news/tea-security-breach-exposes-verification-selfies-and-ids
[3] Digital Rights Ireland. (2021). Age Verification and Online Safety: A Threat to Privacy and Anonymity. Retrieved from https://digitalrights.ie/age-verification-and-online-safety-a-threat-to-privacy-and-anonymity/
- The implementation of age verification methods by technology companies such as Yoti and Epic Games on social-media platforms like Reddit, X, and Bluesky, as well as entertainment sites and apps, has sparked debates about privacy and data security, particularly with the use of the Kids Web Services (KWS) tool.
- In light of privacy concerns and reports of data breaches, the use of technology for age verification on social-media platforms, entertainment sites, and apps must prioritize robust security measures and user protection to maintain trust and ensure compliance with regulations.
