Ofcom outlines age checks for the UK's social media rules

Ofcom, the UK regulator for communications services, has outlined four potential methods for verifying that users are 16 or over as part of preparations for a forthcoming social media age-restriction regime. The BBC reports that Ofcom identified photo ID matching, bank-based checks with user consent, facial age estimation, and digital ID services as methods it considers "highly effective" for this purpose. The government and Parliament will determine how the scheme is implemented in practice.

The piece flags several practical and privacy concerns. Photo ID matching would involve highly sensitive documents and facial images, raising questions about data handling and protection, with past incidents showing the potential for breaches of government ID data held by third parties (the author cites a 2025 Discord breach affecting around 70,000 users).

Bank-based checks could be more privacy-preserving if they return only a yes/no confirmation of age, but questions remain about what information is shared, what is retained, and whether checks could be linked to user activity. Facial age estimation avoids documents but processes sensitive imagery and can misclassify by a few years around the threshold, potentially triggering additional verification. Digital ID services offer another route, but again raise questions over data exposure and interoperability.

The author notes that, alongside effectiveness, the balance between privacy risks and access barriers matters, and suggests double-blind verification as an ideal model, though recognising that Ofcom expects some motivated youths may still slip through.