Plans for age verification: Problem is platform design, not age

The European Commission has proposed stricter measures to protect children and teenagers online, including the introduction of age verification systems and standardized minimum age requirements for social media platforms. These plans come after recommendations from an expert commission, which emphasized the need for a unified approach across Europe. The proposals include mandatory age checks and the development of a digital wallet system designed to verify users' ages independently of the existing EUDI-Wallet. Marielle Findorff, a specialist in data and IT security with the German Consumers' Association (vzbv), was interviewed about these initiatives and their implications for consumer protection. According to the proposed measures, social media platforms would be required to implement age restrictions, potentially limiting access to users under 13 years old. For those aged 13 to 17, the platforms would have to demonstrate that their services are designed with appropriate safeguards and protections. This could mean either redesigning their platforms to ensure safer environments or restricting access for minors through age verification mechanisms. However, Findorff expressed concerns about this approach, arguing that setting age limits does not address the root issues related to platform design and user safety. Findorff pointed out that the core issue lies in how platforms are structured and the default settings they offer. She argued that simply excluding minors would not eliminate the risks faced by all users. Instead, she emphasized the importance of making platforms inherently safer for everyone, regardless of age. She suggested that platforms should be required to prove that their designs are secure, focusing on aspects such as default settings, recommendation algorithms, and other features that might increase user risk. She welcomed the Von-der-Leyen Commission’s recognition that platform providers must take responsibility for ensuring safety, but warned that this alone would not be sufficient. Digital services should be designed to be safe by default for all users, and features that encourage excessive usage should be effectively limited or banned. Findorff stressed that while requiring platforms to prove their safety is a positive step, there is a risk that companies might opt for easier solutions, such as excluding minors via age verification rather than fundamentally changing their product designs. Alternative approaches, such as implementing age controls at the operating system level, were also discussed. In this model, parents could input their child's age during device setup, allowing the information to be shared with app stores and services. However, questions remain about how such age information would be verified and whether it would rely on self-declaration by parents. Currently, the European Commission appears focused on integrating age verification into the EUDI-Wallet or developing a standalone solution that could be incorporated into it. This approach, however, shifts much of the responsibility onto parents, who already struggle to manage the complexities of digital environments. Many feel overwhelmed by the sheer number of online services and the frequent changes made by platforms. Even adults often find it difficult to keep track of evolving privacy and safety settings. If parents are tasked with managing multiple platforms and games, the burden could become even more overwhelming. The debate over the best way to safeguard young users online continues, with experts emphasizing the need for comprehensive strategies that go beyond simple age restrictions. While the European Commission moves forward with its proposals, the challenge remains to create a digital environment that is genuinely safe for all users, without placing undue pressure on individuals to navigate complex and ever-changing technological landscapes.