The Electronic Frontier Foundation has called on Illinois Governor J.B. Pritzker to veto HB 5511, newly passed legislation that mandates age verification systems for online platforms. The bill requires companies to implement age-gating mechanisms but crucially fails to establish privacy-preserving standards for how that verification occurs. The EFF's primary concern centers on data retention: the bill doesn't restrict companies from collecting and storing personal identifying information—including government IDs, biometric data, or detailed personal records—beyond what's necessary for age confirmation. This creates a secondary privacy risk where age verification infrastructure becomes a de facto identity database accessible to platforms.
The bill represents a growing trend of state-level age verification mandates, though approaches vary significantly. Texas, Florida, and other states have passed similar requirements, but differ on whether to permit privacy-protective methods like zero-knowledge proofs or age assurance tokens that verify age without transmitting identifying details. HB 5511 doesn't explicitly ban such methods, but its vague language doesn't mandate them either, leaving implementation decisions to companies with financial incentives to collect maximum data. Privacy advocates argue this creates a regulatory void where the most invasive verification methods become standard practice simply because they're easier to deploy at scale.
Governor Pritzker has not yet publicly stated his position on the veto, though his office faces competing pressures from child safety advocates supporting the bill and digital rights organizations opposing its implementation framework. The EFF has emphasized that effective age verification doesn't require sacrificing privacy, stating that 'age gating can be accomplished without creating permanent records that put young people at risk of identity theft and predatory targeting.' The bill's ambiguity on data deletion timelines and third-party sharing represents the core policy failure—leaving millions of Illinois residents vulnerable while addressing a legitimate regulatory concern through blunt instrumentation rather than thoughtful technical standards.