Age Verification Systems
The age verification of users in digital environments This is an increasingly relevant aspect, especially in services aimed at minors. However, it poses challenges in terms of personal data protection.
Age verification systems collect, store and process personal data such as the user's date of birthThis generates obligations under regulations such as the European Union's General Data Protection Regulation (GDPR) and the Spanish Organic Law on Data Protection (LOPD).
He GDPR establishes the lawful, fair, and transparent processing of data as basic principles. This implies that prior to any age verification informed consent must be requested from the user, clearly detailing the purposes for which your data will be used and for how long it will be stored.
Likewise, the GDPR enshrines the rights of access, rectification, deletion, and data portability, which directly affects the management of age verification records. The data collected must be accessible to the user and, if necessary, modified or deleted at their request.
The Spanish Data Protection Agency (AEPD) has issued recommendations on this issue. They suggest the use of anonymous or pseudonymous criteria that do not require user identification, the non-retention of biometric data, and the use of secure methods that do not pose a risk to citizens' rights and freedoms.
Design of the verification system
Verification systems must be designed with data minimization as a guiding principle, and privacy standards must be respected both in the technical design and in personal information processing policies. This is to ensure the protection of minors in digital environments without violating their fundamental rights regarding data protection.
The Spanish Data Protection Agency (AEPD) has been working for some time on developing an age verification system that complies with the GDPR and facilitates this process for companies in a secure and privacy-friendly manner. Some details about this system are:
- Attribute-based method: It will not require user identification, but rather age will be verified through attributes such as date of birth without associating it with a real identity.
- Temporary data storage: The information entered by the user will be temporarily stored on the device and will not be retained on servers. Only the result of the age difference will be saved.
- Blockchain technologyThis technology will be used to generate a unique identifier per session that certifies age verification anonymously and securely.
- Integration with cl@ve: The system will allow the user to be identified through their personal password if they so wish and expressly consent.
- Control by the AEPD: The agency will exercise oversight as the data controller to ensure regulatory compliance.
- Free service: It will be a public, non-profit system to facilitate its implementation among companies.
The Spanish Data Protection Agency (AEPD) finalizes The age verification system that will limit minors' access to inappropriate content, such as pornography, and to internet services designed for older people. The director of the Spanish Data Protection Agency, Mar España, has confirmed that the system's criteria will be presented on December 14, the 30th anniversary of the AEPD.
The AEPD, the Ministry of the Interior, the National Commission for Markets and Competition (CNMC), the National Mint and Stamp Factory, the General Secretariat for Digital Administration of the Ministry of Economic Affairs and Digital Transformation and the National Cybersecurity Institute of Spain are working on this system, Efe reported. The system will have an application that will allow the age of the Internet user to be verified by scanning physical documents such as the DNI, the driver's license or health card.
Thus, the system will allow verification of age so that people over 18 can access content intended for that age (or activities such as purchasing alcohol online) and will also screen access to internet services designed for those over 14, such as social networks.
Don't miss all the latest news on Data Protection & Regulatory Compliance from the best professionals in the sector in our Professional Master in Compliance & Data Protection Management.
