Illinois lawmakers this week advanced HB 5511, legislation mandating age verification for online platforms and services, prompting the Electronic Frontier Foundation to call on Governor J.B. Pritzker to veto the measure. The bill would require companies to verify user age through methods including government-issued ID scans, copies of which could be retained in company databases. The legislation targets protecting minors from age-restricted content, but digital rights advocates argue the verification infrastructure creates significant privacy vulnerabilities. Similar age-verification laws have raised red flags across the tech industry, with platforms warning that mandatory ID storage increases breach risk and potential misuse of sensitive biometric data.
The EFF's opposition centers on concrete harms documented elsewhere. When British Airways and other companies implemented age-verification systems, data breaches exposed customers' government ID copies and personal information. Additionally, age-verification databases have become targets for identity theft and fraud schemes. The bill lacks explicit protections requiring encryption, deletion timelines, or restrictions on secondary data use. Governor Pritzker has not publicly committed to a veto position, leaving the bill's fate uncertain as the legislative session continues. The state faces a decision point that will either advance or restrict a verification model already spreading to other jurisdictions.
Age-verification legislation has gained momentum in multiple states targeting online pornography and age-restricted gaming access. Texas, Utah, and Kentucky have passed similar bills, though implementation remains limited due to privacy concerns and legal challenges. The broader pattern reveals tension between child protection goals and individual privacy rights. Illinois' HB 5511 will test whether states can require comprehensive age verification without creating surveillance infrastructure vulnerable to exploitation. The governor's decision will likely influence other states considering comparable legislation, making this a pivotal moment for determining the role of government-mandated identity verification in online regulation.