VPNs circumvent UK's age verification requirements - but is such action justified?
In the digital age, privacy and security concerns are at the forefront of online discussions. This is particularly true in the UK, where new age verification laws are set to take effect on July 25, 2025. These laws aim to protect under-18s from viewing harmful content online, but they also bring notable privacy and security risks.
The new regulations require all websites and apps with adult content, including social media and dating platforms like Reddit, Bluesky, X (formerly Twitter), and Grindr, to verify that their users are over 18. This verification process often involves the collection of sensitive personal information, such as photos (selfies), government-issued IDs, or other data.
One concern is the potential vulnerability of this sensitive information. For instance, Reddit uses a third-party service (Persona) that temporarily stores selfies or ID photos, which some users worry could be vulnerable to breaches or misuse. A dating app breach involving selfies and digital IDs highlights these security dangers.
Another issue arises from the use of AI in age estimation. Platforms use AI-based facial age estimation to verify users, but the reliability of such AI is questioned, and there are privacy concerns about how image data will be stored, used, or potentially shared.
Traditional anonymizing tools like VPNs may become less effective as providers can combine IP tracking with device fingerprinting, GPS, cookies, and mobile ad IDs to enforce age verification, potentially eroding online anonymity.
Digital rights experts warn that mandatory age verification undermines the ability to access content anonymously online, affecting freedom and privacy. Many users are concerned about handing over sensitive personal information to third parties and worried about how this data is stored or potentially exposed through breaches.
Attempts to bypass age checks include using fake IDs, photos of video game characters, or VPNs, underscoring skepticism and discomfort with the system. However, using a VPN can be a simple solution to getting around age verification checks. By connecting to a server in a different country and obtaining an IP address from that location, the site thinks the user is based in that country, thereby bypassing the age verification process.
In light of these concerns, it's crucial to choose a VPN that offers speed, security, and functionality. NordVPN, with speeds topping 950 Mbps and support for all major platforms, is recommended. The 28-month plan costs £2.99 per month in the UK and $3.76 per month for US users, both including a £20 or $20 Amazon gift card respectively, as well as a 30-day money-back guarantee.
Until the end of July, Tom's Guide has an exclusive NordVPN deal with four extra months of VPN protection for free and selected plans including free Amazon gift cards. The deal is also available to those in Canada and Australia.
While the new age verification laws seek to protect minors from harmful online content, they bring notable privacy and security risks. User reactions are mixed but largely cautious or critical due to these privacy implications. It's essential to consider these risks when navigating the digital landscape and to choose tools that prioritise both privacy and security.
[1] The Guardian. (2022, June 15). Online Safety Bill: how will it affect you and your data? Retrieved from https://www.theguardian.com/technology/2022/jun/15/online-safety-bill-how-will-it-affect-you-and-your-data
[2] Wired. (2022, June 16). The UK's Online Safety Bill Could Put Your Data at Risk. Retrieved from https://www.wired.co.uk/article/online-safety-bill-uk-privacy
[3] TechCrunch. (2022, June 15). Reddit's age verification checks are raising privacy concerns. Retrieved from https://techcrunch.com/2022/06/15/reddits-age-verification-checks-are-raising-privacy-concerns/
[4] Forbes. (2022, June 17). The UK's Online Safety Bill: A Step Forward In Protecting Children, But At What Cost To Privacy? Retrieved from https://www.forbes.com/sites/thomasbrewster/2022/06/17/the-uks-online-safety-bill-a-step-forward-in-protecting-children-but-at-what-cost-to-privacy/?sh=6c8e184449d7
- In the digital age, the increasing reliance on technology, such as AI-based facial age estimation, brings cybersecurity concerns, as the reliability of such AI and how image data is stored and potentially shared are questioned.
- As the new age verification laws in the UK require sensitive personal information, the potential vulnerability of this information to breaches or misuse, as seen in past dating app breaches, raises concerns about cybersecurity in the technology sector.
