Throughout history, the invocation of “child protection” has served as one of the most potent political tools for expanding state power. During the 1930s, the first drug czar, Harry Anslinger, ignited a draconian crusade against marijuana by warning that the drug would turn innocent youths into violent maniacs. In the 1970s and 1980s, a grassroots movement of concerned parents mobilized against the normalization of cannabis, inadvertently laying the political groundwork for a staggering expansion of the carceral state that disproportionately locked up marginalized communities. Time and again, legitimate anxieties over the well-being of the young have been weaponized to justify sweeping regimes of social control.
Today, this exact historical dynamic is playing out globally as governments rush to regulate the internet. Driven by genuine concerns over cyberbullying, predatory algorithms, and the deterioration of adolescent mental health, lawmakers are demanding that tech companies strictly age-gate their platforms. Australia recently made headlines by advancing the Online Safety Amendment Act of 2024 to restrict social media access for children under 16. In the United States, 25 states—comprising more than 40 percent of the population—have passed laws mandating digital age verification to gate access to social media and adult content.
However, beneath the virtuous rhetoric of child safety lies a catastrophic threat to digital freedom. By mandating age verification, lawmakers are not simply protecting minors; they are fundamentally rearchitecting the internet from an open forum into a “permissioned” digital checkpoint society.
The problem lies in the technical reality of how age verification actually works. To effectively block underage users, platforms cannot rely on a simple honor-system birthdate entry; they must implement systems capable of verifying identity. This forces users to hand over highly sensitive information—such as government-issued IDs, credit card numbers, or biometric facial scans—to third-party verification companies simply to browse the web.
Lawmakers often defend these systems with a simple real-world analogy: it is no different than a bartender checking your ID before serving you a drink. But recent research from the Georgia Institute of Technology and UC Irvine reveals that the reality is starkly and terrifyingly different. The researchers examined Yoti, a London-based verification company that services an estimated 60 percent of websites requiring age checks, including major platforms like Meta, TikTok, Sony PlayStation, and OnlyFans. They found that rather than just glancing at an ID, the process is akin to a bartender photocopying your license and immediately distributing it to their food vendors and business partners. When a user attempts to verify their age, their highly sensitive data—including facial images, IP addresses, and device fingerprints—is frequently broadcast to third- and fourth-party entities, including credit card companies and data brokers.
This mandatory data harvesting creates a privacy and security nightmare. By requiring users to surrender identifying documents to access the internet, age-gating laws construct a massive, centralized “honeypot” of private information that is highly vulnerable to leaks, hacks, and cyberattacks.
Furthermore, this infrastructure perfectly serves the surveillance needs of the modern state. The post-9/11 national security apparatus explicitly relied on creating physical “checkpoints or portals” and standardizing biometric identifiers to track the movement of bodies across borders. Now, that architecture is being extended to the digital realm. The multi-billion-dollar data broker industry that absorbs age-verification data is the very same industry that federal law enforcement uses to bypass the Fourth Amendment. Agencies like Immigration and Customs Enforcement (ICE), Customs and Border Protection (CBP), and the FBI routinely purchase commercial location data and advertising profiles from data brokers to warrantlessly track individuals. Forcing users to authenticate their identities online feeds directly into this surveillance-industrial complex.
The most profound casualty of the age-verification crusade is the death of online anonymity. Since the dawn of the internet, anonymity and pseudonymity have been foundational to free expression. Critics of privacy often deploy the authoritarian fallacy that “if you have nothing to hide, you have nothing to fear”. But anonymity is not merely a shield for wrongdoers; it is essential for journalists, political dissidents, whistleblowers, and vulnerable individuals discussing sensitive topics. In a world where authoritarian movements increasingly criminalize marginalized identities—such as state-level efforts to target LGBTQ+ youth and parents providing gender-affirming care—the ability to access information without leaving a permanent, state-accessible digital footprint is a matter of survival.
The Electronic Frontier Foundation (EFF) has urgently warned that handing governments and tech monopolies the keys to online identity verification guarantees expanded censorship and surveillance. When digital participation requires an identity-linked credential, the internet becomes Balkanized and heavily policed, leaving users vulnerable to having their access revoked at the whim of the state or a corporation.
There are genuine, serious issues regarding how social media algorithms exploit children, but age-gating the entire internet is a disproportionate and destructive response. Less intrusive, highly effective alternatives exist, including robust parental control tools built into devices, digital literacy education, and targeted regulations against the harmful algorithmic conduct of the platforms themselves.
We must recognize age verification laws for what they truly are: a Trojan horse. They leverage our natural desire to protect the vulnerable in order to normalize a society where every citizen must show their papers to participate in public discourse. Ultimately, stripping away privacy, anonymity, and freedom of expression does not save children; it merely condemns them to inherit a flawlessly constructed surveillance state.