Europe's New Age Verification Framework: Protecting Minors Online

The Urgent Need for Age Verification

For as long as I can remember, entering a pornographic site has required the same effort as skipping a line: zero. Just a simple click on the “I'm over 18” button and you're through. This lax approach to age verification has raised significant concerns, especially as the European Commission accelerates the timeliness of introducing effective systems to prevent minors from accessing inappropriate content.

“The objective is clear: to prove the user's age without transmitting personal data to the platform.”

The Context of Regulation

Back in May, it was revealed that Brussels opened formal proceedings against platforms like Pornhub, Stripchat, XNXX, and XVideos for suspected violations of the Digital Services Act (DSA). Effective since 2024, this regulation aims to impose transparency obligations and requires rapid removal of illegal content, alongside the management of systemic risks to protect minors. Just a year later, in March 2026, the investigation concluded that these platforms were permitting minors to access their services through inadequate one-click confirmation pages.

The Requirements Ahead

While the DSA does not explicitly mandate a thorough age verification system, it holds Very Large Online Platforms (VLOPs)—those with over 45 million monthly users—accountable. Non-compliance risks hefty penalties of up to 18 million euros or 10% of global annual turnover. The urgency of addressing these lapses could not be clearer.

Innovative Solutions: The Mini-Wallet

At a recent press conference, Prabhat Agarwal and Renate Nikolay discussed the Age Verification Blueprint: a novel mobile application designed as a digital wallet. Users verify their age only once via official identification and subsequently can prove that they are over 18 at all participating sites without repetitive document uploads. This ensures that while users can validate their age, no unnecessary personal data is transmitted.

The mini-wallet employs a principle called selective disclosure—a system that permits responses to the query “Is this person over 18 years old?” with a digitally verifiable answer, thus preventing the collection of detailed personal history. As we transition to future EU Digital Identity Wallets (EUDI), users can manage various personal capacities from a single app.

A Case of Uneven Progress

Despite the promising potential, five EU member countries are currently exploring this solution, but there is noticeable divergence in progress. France and Denmark appear to be leading, while countries like Greece, Spain, and Italy seem to be lagging behind. This disparity has led some experts to express skepticism regarding the feasibility of launching a fully functional system within the projected timeline.

Contrasting Approaches

Several age verification methods are being utilized in Europe. For instance, Yoti—employed by TikTok—mixes various techniques for validation, whereas Persona implements an intrusive model involving fingerprint verification and facial recognition. However, the European Commission is steering away from heavily data-reliant approaches, emphasizing that effective age verification should not necessitate extensive data collection.

A Cautionary Tale from the U.S.

The U.S. model serves as a cautionary tale illustrating the risks associated with extensive data collection for age verification. Europe's strategy pivots the conversation towards simply proving age sans revealing extensive personal information. The Commission champions an open-source architecture, allowing member states and market players to devise national or derivative versions of the verification system.

Addressing the Loopholes

However, issues persist. The mini-wallet, while enhancing user data privacy, may not solve the simple issue of minors utilizing an adult's device or credentials. This stands as a significant loophole that continues to undermine the goal of keeping minors safe online.

Despite these challenges, the mini-wallet remains an encouraging prospect. The European Commission has clarified its openness to alternative solutions, provided they achieve similar levels of efficacy. Pornhub is already laying groundwork in the pilot phase alongside other operators.

A New Policy Paradigm?

In summary, Europe has the potential to establish a new standard in the age verification landscape, transitioning from a mere formality to a robust infrastructure that prioritizes the safety of minors online. As with any emerging system, this journey will not be without its complexities and risks.

This article originally appeared in WIRED Italia and has been translated from Italian.