Age Verification: Apple Backs EU Plan It Fought in Texas

Apple once warned Texas lawmakers that checking ages at the app store would mean collecting sensitive personal information from every single Texan. Now Apple's C.E.O., Tim Cook, is publicly backing a plan in Europe that puts age checks at the app store too. Same basic idea. Opposite reaction.

If you've ever handed your kid a phone, this story

If you've ever handed your kid a phone, this story is about you. It's also about you if you're an adult who just wants to download a weather app. Age checks are coming. That part's already settled. The real fight is over two questions. Where does the check happen? And what information leaves your family's hands when it does? According to Reclaim The Net, Cook supports the European Union's age verification push, often called the KIDS Act. That plan would make app stores the checkpoint, before you ever open the app. Meanwhile, Apple spent the past two years fighting similar rules in American states. So why does the same company say yes in Brussels and no in Austin?

Picture a parent at the kitchen table, setting up a first phone for their twelve-year-old. Under the laws in Utah and Texas, the app store has to sort that child into one of four age groups. Under thirteen. Thirteen to fifteen. Sixteen to seventeen. And adults. According to Tech Policy Press, those states allow what they call commercially reasonable methods. In plain terms, that can mean uploading a government I.D. or scanning a face. For a lot of families, that means a driver's license or a biometric scan sitting on a company's servers. That's the data Apple said it didn't want to hold.

Apple's answer in the U.S. was a tool for app makers called Declared Age Range. It lets a parent share an age bracket without revealing a child's exact birthday. The app learns "this user is a younger teen." It doesn't learn the date, the name, or anything on an I.D. Apple expanded that tool this year.

Europe's version goes a step further

Europe's version goes a step further. According to the European Commission, its system relies on something called a zero-knowledge proof. That's a cryptographic trick that proves a fact is true without showing the facts behind it. Imagine a bouncer who never sees your license. He just gets a green light that says "over the line." Your proof of age lives in a digital wallet on your phone. When an app asks, the wallet answers yes or no on the age threshold. No name. No birthdate. No I.D. number. The rules also say services can keep only a tiny age signal on your account, so you don't get checked again and again. And they can't use the check to identify you, track you, or target ads at you.

That's likely why Cook can support one and fight the other. The policy design is different, even if the goal looks the same. For lawyers and compliance teams, that's the sharp lesson. The fight was never really about age checks. It was about whether the system collects identity or just an answer. For parents, it means the same tap on "download" could expose very different amounts of your life, depending on where you live.

Of course, a promise on paper isn't the same as a system that holds up. In April, researchers broke into the E.U.'s own age verification app in under two minutes. Scanned I.D. documents were sitting there unencrypted. Two minutes. For the app meant to show how privacy-safe this could be. A strong design only protects you if somebody builds it right.