The Paradox of Age Assurance

Global regulatory trends are increasingly mandating age restrictions for social media to protect children. However, these laws rely on age assurance technologies that inherently require data collection, creating a paradox: to protect children from the surveillance capitalism of social media, states are mandating new, extensive data processing layers that potentially expose users to further surveillance. Without proactive regulatory enforcement, these technologies risk violating privacy, security, and non-discrimination principles, as outlined in the UN Convention on the Rights of the Child.

The Shift to Technical Standards as Quasi-Regulation

Because government enforcement of age assurance guidelines is often reactive—typically occurring only after security breaches—technical standards are becoming the primary mechanism for governing these tools. Standards bodies, such as ISO, are increasingly incorporating social requirements like 'privacy-preserving' and 'fairness' into their technical specifications.

This shift presents a significant risk of 'rights-washing,' where vendors adopt human rights terminology to signal compliance without substantive protection. Historically, standard-setting processes have been dominated by engineers and computer scientists, with minimal participation from human rights, legal, or social science experts. This lack of diversity in the drafting process creates a power imbalance, risking regulatory capture by industry interests.

A Call for Institutional Engagement

To ensure age assurance tools are truly privacy-preserving and in the best interests of the child, human rights and children’s rights organizations must participate in national standards-making bodies. This is a resource-intensive process requiring sustained, long-term input, which is often difficult for underfunded rights groups. The authors argue that:

  • Donors should prioritize funding for digital rights groups, particularly in the Global South, to enable their participation in these processes.
  • Human rights expertise must be integrated into the architecture of age assurance tools during the design phase, not just as an afterthought.
  • Technical standards cannot replace robust government regulation. Standards are a tool for implementation, but they must be supported by clear, enforceable legal frameworks that prioritize constitutional and human rights protections.