This week, UK politicians advanced plans for what would become one of the world's strictest social media age restrictions, requiring platforms to prevent anyone under 16 from accessing services. The proposed legislation delegates enforcement authority to Ofcom, the UK's communications regulator, which would have powers to fine non-compliant platforms up to 5% of global revenue. However, the government has not yet published detailed specifications for how age verification would function, leaving a critical gap between ambition and implementation. Industry observers and privacy advocates have flagged this uncertainty as a fundamental problem: platforms must somehow verify age without requesting invasive personal data or creating centralized identity databases.

The proposed mechanisms under consideration include biometric scanning, government ID upload systems, and third-party age verification services—none of which have been formally mandated. Privacy advocates point to Australia's failed age verification experiment, which the government abandoned in 2022 after concluding that no technology could reliably verify age without creating unacceptable privacy risks or excluding legitimate users. Similar concerns emerged during the GDPR implementation across Europe, where age verification for under-13 services created compliance nightmares. The Internet Watch Foundation and other child safety groups acknowledge the tension: robust age verification typically requires data collection that conflicts with GDPR and UK data protection principles. "We're being asked to solve a problem that technology hasn't solved anywhere," said one Ofcom stakeholder during recent consultations, according to parliamentary records.

Ofcom would face extraordinary enforcement challenges. Determining non-compliance requires proving age verification failures at scale, yet platforms could claim good-faith efforts using imperfect technologies. The precedent matters globally: Australia's abandoned approach and the EU's cautious handling of age verification suggest that prescriptive enforcement without technological solutions creates liability without protection. If the UK proceeds without detailed specifications, platforms may face fines for failing to meet undefined standards, while young users simply migrate to unregulated services lacking any safety infrastructure. The legislation thus risks creating worse outcomes than the problem it aims to solve.