Protecting minors online takes more than age verification
DIDAS warns that age verification alone cannot solve harmful content, addictive design, profiling or commercial exploitation of children online.
Where verification is necessary, it should reveal only what is required, such as a simple “over/under age threshold”, without exposing identity, birth date or biometrics. DIDAS proposes six principles: privacy by design/default, unlinkability, data minimisation, open-source auditability and decentralisation.
More importantly, platforms should be accountable: no targeted advertising, engagement-optimising algorithms or monetisation of minors’ personal data.
The message is clear: digital identity can support child protection, but privacy-preserving technology, platform responsibility and strong governance must develop together.