The short version
- The UK communications regulator has outlined four specific technologies that social media companies could use to verify user ages ahead of a statutory ban on under-16s.
- Proposed measures include photo ID matching, banking data checks, facial age estimation, and digital identity services, aiming to balance effectiveness with privacy concerns.
- While tech firms have suggested device-level blocking by app stores, Ofcom maintains that platforms remain responsible for their own compliance and verification processes.
The United Kingdom’s communications regulator has published a detailed framework for how social media companies can verify the ages of their users, setting the stage for a significant shift in online access rules. Under legislation scheduled to take effect in March of next year, individuals under the age of sixteen will be prohibited from accessing ten of the largest social networking platforms, including Instagram, TikTok, and Snapchat. Ofcom’s latest guidance identifies specific technical methods it considers highly effective for distinguishing minors from adults, a move that could require millions of UK users to prove their age to continue using these services.
The regulator has recommended four primary approaches for age assurance, moving beyond traditional identification documents which present logistical challenges for teenagers who may lack passports or driving licenses. The first method involves photo ID matching, where information from a physical document like a passport is compared against a live image captured during the verification process. This aims to prevent fraud while confirming the user’s identity and age simultaneously.
A second recommended approach utilizes banking-based checks, leveraging data already held by financial institutions regarding a customer’s age. This method relies on existing relationships between users and banks rather than requiring new document uploads. The third option is face age estimation technology, which Ofcom argues has seen recent improvements in accuracy. This software analyzes facial features to estimate whether a person is likely under or over the legal threshold.
The fourth method involves digital ID services, allowing users to prove their identity and age through secure digital credentials. These systems enable individuals to share specific information about themselves without revealing unnecessary personal data. Ofcom emphasized that any chosen solution must preserve user privacy and protect sensitive data, drawing on lessons learned from implementing similar checks for pornography websites last year.
The regulator’s stance reflects a deliberate shift away from prescriptive mandates that dictated exactly how companies must verify ages. Dame Melanie Dawes, the CEO of Ofcom, noted that previous attempts in other countries to enforce specific technical solutions often failed because they were too rigid. Instead, the current guidance offers a menu of effective options, leaving it to social network providers to determine which methods best fit their platforms while ensuring compliance with safety standards.
Implementation responsibility rests squarely on the tech companies themselves. While some major firms, including Meta, have advocated for age verification to be handled at the device level by app store operators like Apple and Google, Ofcom has clarified that this would not absolve social media providers of their duties. Even if Apple or Google block installations for underage users, the platforms must still maintain their own verification checks to ensure ongoing compliance.
The scale of this undertaking is substantial, with Ofcom acknowledging that a large number of adult accounts will need to undergo verification processes. The regulator has also been candid about the limitations of these measures, admitting that the risk of circumvention cannot be entirely eliminated. Some children may still find ways to bypass age checks, echoing concerns raised after similar bans were introduced in Australia last year, where many minors reportedly found workarounds.
Despite these challenges, Ofcom views the initiative as a collective effort involving regulators, tech companies, and society at large. The ultimate goal is to change the cultural norm around social media usage among younger children, preventing it from becoming an expected part of daily life for eight- to ten-year-olds entering secondary school. The government is now reviewing Ofcom’s report, with a final decision on the specific measures expected by the end of the year.
The outcome of this review will determine how strictly these verification methods are enforced and which technologies become standard across the industry. As the deadline approaches, social media companies face the complex task of integrating robust age checks without compromising user experience or privacy. The success of this policy will depend not only on technological efficacy but also on how well it addresses the practical realities of digital life for both children and adults.
This development marks a critical juncture in the UK’s approach to online safety, balancing the protection of minors with the rights of adult users. While no system is perfect, the proposed framework represents a significant attempt to create a safer digital environment through structured, evidence-based verification methods. The coming months will reveal whether these measures can effectively reduce underage access while maintaining trust among the broader user base.
Sources behind this briefing
Go to the original reporting
- BBC News↗Ofcom outlines ways social media can verify ages of users
