What happened?
A global shift is underway in how the internet is governed. Multiple countries — including the United Kingdom, Australia, France, and now India — are moving toward requirements that online platforms verify the ages of their users, particularly to protect children from harmful content and social media exposure. The UK's Online Safety Act, Australia's landmark ban on social media for under-16s, and India's own developing online safety framework all reflect the same underlying political and social momentum: parents, governments, and society are demanding that the largely anonymous, open-access internet give way to a more controlled, verified digital environment. The technology to implement this shift — and its privacy implications — is at the centre of a major global debate.
Key Points
- UK's Online Safety Act requires platforms to implement age verification for adult and social media content
- Australia passed landmark legislation banning social media for children under 16
- India's DPDP Act and IT Rules are creating frameworks for child online protection
- Age verification technology options include ID document checks, credit card verification, and AI-based facial age estimation
- Privacy advocates warn age verification creates new risks of data breaches and surveillance
- Indian children are among the world's most active online users — making the policy debate urgent
Background
The internet was designed as an open, anonymous network — by default, websites do not know who is visiting them or how old they are. For most of the internet's history, this anonymity was seen as a feature: it enabled free expression, protected political dissidents, and preserved privacy. But the growth of social media, online pornography, gambling, and other content categories has created serious concerns about children accessing material that can harm their development.
Parents and governments globally have been frustrated by the inability of existing measures — such as asking users to click a box confirming they are over 18 — to effectively restrict children's access. AI-based age estimation and formal ID verification are being proposed as more robust alternatives.
Main Details
Several age verification technologies are being deployed or considered globally. Document-based verification asks users to upload ID documents. Credit card verification uses the assumption that card ownership correlates with adult status. Biometric methods use AI to estimate age from facial features. Device-based methods use a user's digital identity verified by phone companies or government systems.
The UK's Online Safety Act, which became operative in 2024-25, requires platforms to assess and mitigate the risk of children encountering harmful content. Large platforms must implement age assurance measures. Australia went further in late 2024, passing legislation that bans children under 16 from social media platforms entirely — with the burden of verification placed on platforms rather than families.
In India, the Digital Personal Data Protection Act includes special provisions for children's data, requiring verifiable parental consent before platforms can collect data from users under 18. The rules implementing these provisions are still being finalised, but will require platforms to develop age verification and parental consent mechanisms for India's vast under-18 online population.
Indian children are among the world's most active online users — with hundreds of millions of young people accessing social media, gaming platforms, and streaming services. India's rural internet penetration means that children in smaller cities and villages are also significant online users.
Reactions
Privacy advocates have consistently warned that age verification creates serious risks. Any system that requires ID documents to access the internet creates a centralised database of users' real identities and browsing behaviour — a significant surveillance risk. A data breach of such a system would expose highly sensitive personal information.
Child safety advocates argue that these privacy risks must be weighed against the demonstrated harms of children accessing age-inappropriate content — including exposure to violent and sexual material, eating disorder content, and social media dynamics that research links to mental health harm in adolescents.
Platforms including Meta, Google, TikTok, and Indian apps have broadly opposed strict age verification mandates, arguing they are technically difficult to implement without creating privacy risks, and that parental responsibility and education are more appropriate tools.
Impact Analysis
For India, age verification requirements will significantly affect how social media platforms, gaming apps, and streaming services operate. Indian platforms will face new technical and legal obligations. Foreign platforms serving Indian users will need to comply with Indian regulations or risk being blocked. The implementation will also have implications for India's digital advertising industry, which relies heavily on youth audience data.
What Happens Next
India's DPDP Act implementing rules, expected to be finalised in 2026, will establish the specific requirements for age verification and parental consent. Global technology companies will be closely watching India's approach given the market's scale. The debate between child protection and privacy will continue to evolve as both the technology and the legal frameworks develop.
FAQ
Q: What is age verification for online platforms?
A: A system that requires users to prove their age before accessing certain online content or platforms — using ID documents, credit cards, or biometric methods.
Q: Has Australia really banned social media for under-16s?
A: Yes. Australia passed landmark legislation in late 2024 prohibiting social media platforms from allowing accounts for users under 16.
Q: What does India's DPDP Act say about children online?
A: It requires verifiable parental consent before platforms can process data of users under 18. Implementing rules are being finalised.
Q: Does age verification protect children's privacy?
A: Paradoxically, it may reduce privacy by requiring identity verification. Well-designed systems can mitigate this risk, but poorly designed ones create new vulnerabilities.
Q: Can children bypass age verification?
A: Determined teenagers can often circumvent age verification using VPNs, borrowed credentials, or other means. Technology is only one layer of protection — education and parental involvement remain essential.