Reddit and Discord have both faced significant challenges over their use of age verification services designed to protect minors online. Reddit received a £14.5 million fine from the UK’s Information Commissioner’s Office for unlawfully processing children’s personal information, while Discord experienced intense user backlash over privacy concerns related to age verification methods. Both platforms had employed the same third-party verification service to comply with online safety regulations.
According to BBC News, the ICO determined that Reddit failed to adequately verify user ages as required by the UK’s Online Safety Act. The investigation found that the platform’s verification system incorrectly classified many children as adults, exposing minors to potentially harmful content and violating data protection laws concerning children’s personal information.
Controversial Age Verification Service Raises Privacy Concerns
Both platforms utilized Persona, a third-party age verification provider that checks either uploaded selfies or government-issued identification documents. Reddit stated it chose this approach to avoid directly collecting user identity information. However, regulators found this age verification method insufficient to properly protect children using the platform.
The privacy watchdog concluded that these verification checks were inadequate in distinguishing between adult and minor users. Consequently, Reddit was deemed to be illegally processing data from children who should have been prevented from accessing age-restricted content on the platform.
Discord Faces User Backlash Over Data Collection
Meanwhile, Discord encountered immediate resistance from its user base after implementing the same age verification service. According to The Verge, users expressed outrage over concerns that Persona could access government records and other sensitive personal data beyond what Discord initially disclosed.
Social media criticism accused Discord of misrepresenting how the platform would handle face scans and identification uploads. Users cited Persona’s privacy policy, which indicates the company may obtain personal information from third-party databases, government records, and publicly available sources.
In response to the controversy, Discord’s head of product policy, Savannah Badalich, confirmed that the company conducted only a limited test of Persona in the UK and has since discontinued its use. The platform no longer employs this particular age verification provider.
App Store Age Verification Debate Intensifies
The incidents have amplified calls for Apple and Google to assume legal responsibility for age verification within their respective app stores. Proponents argue that centralized age gating at the app store level would be more effective and less invasive than requiring users to verify their age with multiple individual platforms.
Additionally, some US states have already implemented legislation mandating app store-level age verification. California recently passed such requirements, compelling Apple and Google to develop systems for verifying user ages before allowing downloads of age-restricted applications.
Industry observers note that requiring users to submit government identification and biometric data to numerous developers creates substantial privacy risks. A centralized verification system through app stores could reduce these concerns by limiting the number of entities handling sensitive personal information.
However, both Apple and Google have historically resisted assuming this responsibility, citing technical challenges and concerns about managing vast amounts of sensitive user data. The companies have engaged with lawmakers to propose alternative approaches to protecting minors online.
The outcome of ongoing regulatory discussions in the UK and United States will likely determine whether app store operators ultimately become responsible for age verification. Meanwhile, platforms continue seeking compliant verification methods that balance child safety with user privacy concerns, though a definitive industry standard has yet to emerge.