Ofcom sets out four ways social media can check users are 16

Ofcom has identified four ways social media platforms could reliably check whether users are aged 16 or over, setting out a technical foundation for planned UK age restrictions. The regulator says photo ID matching, digital identity services, banking-based checks and facial age estimation can meet its standard for highly effective age assurance.

The assessment is intended to inform parliamentary consideration of the government’s proposed restrictions, rather than announce an immediate requirement for every user to complete a particular check. Ofcom is developing guidance for platforms and says it will consult after draft regulations are laid before Parliament.

The distinction between checking someone is 16 and checking they are 18 matters because not all existing age-checking options work for younger users. Ofcom’s existing guidance identifies seven methods potentially suitable at 18, while its new assessment identifies four capable of meeting the standard at 16.

Photo ID matching checks information on an identity document and compares its photograph with a live image of the person seeking access. Digital identity services offer a related route, allowing users to establish their age once and then reuse that verified information rather than repeatedly presenting the original document.

Banking-based checks use information a financial institution holds about a customer’s age, with that person’s consent. Ofcom’s guidance for users explains that such checks can securely obtain confirmation from a bank about whether someone meets an age threshold, offering an alternative to submitting identity documents directly during each check.

Facial age estimation takes a different approach, analysing facial features to estimate age rather than confirming a date of birth from records. Existing Ofcom guidance says services should use a higher challenge threshold where relevant, alongside measures such as liveness detection, to strengthen the reliability of age decisions.

Implementation will be as important as the technology selected. Ofcom’s broader age-assurance guidance tells services to consider offering different checking methods, repeat checks where appropriate and provide an appeals process, helping address situations in which a legitimate user receives an incorrect age assessment.

Privacy is another central consideration because age assurance involves processing personal information. Ofcom’s assessment says the available methods can be deployed in ways that protect users’ privacy and comply with data protection law. Separately, the Information Commissioner’s Office says services should clearly explain how age-assurance data will be processed and how users can challenge inaccurate assessments.

The regulator also examines ways to reduce the risk of children circumventing checks, making clear that selecting a verification method is only one part of a wider system. For platforms, the next stage is translating the assessment into practical access controls once the government’s detailed rules are available, with Ofcom’s consultation expected to shape how those duties are implemented.