Age Verification ID: California Bill Could Force Face Scans

To prove you're an adult online, you might soon have to hand a social network a photo of your government I.D., or let it scan your face. Not for a bank. Not for a bar. Just to scroll through the same feed you use today. And in California, a bill that could make that happen is sitting on the edge of becoming law.

If you've ever opened a social media app, this

If you've ever opened a social media app, this story is about you. Here's what's happening. California lawmakers passed a bill called A.B. 1709. It would require social networks to check whether their users are adults. It's set to take effect on 1/1/2027. The Electronic Frontier Foundation, a digital rights group known as the E.F.F., has asked California's governor to veto it. So why would a group that fights for online freedom oppose a child-safety bill? That's the knot at the center of this.

Start with what the bill actually says. A.B. 1709 doesn't spell out that companies must collect your I.D. Instead, it lets them use, in its own words, any means to verify your age. That sounds flexible. But the E.F.F. argues it pushes companies toward the most invasive option. Why? Because platforms get penalized for letting kids slip through. So they'll pick whatever proves age with the fewest mistakes. That usually means a government I.D. upload, or a face scan. For you, that means the safest option for the company becomes the least private option for you.

Now, why does handing over your I.D. actually carry risk? Look at what happened to Discord. The company reported that a breach exposed roughly seventy thousand government I.D. photos. Those weren't even stolen from Discord directly. They leaked through an outside vendor that handled age checks. Seventy thousand I.D.s. That's the E.F.F.'s core warning. Every time a platform collects your I.D., it builds a bigger pile of personal data, a pile that becomes a target. The document you hand over to prove you're an adult can end up in a hacker's hands.

This isn't just a California story

And this isn't just a California story. According to reporting from C.N.B.C., about half of U.S. states have passed or are advancing laws to block underage users. That pulls millions of adults into age-check gates, many of them powered by A.I. The person this affects most isn't a child. It's the grown adult now asked to verify themselves just to log in.

There's one more wrinkle. California already passed a different, lighter-touch law, A.B. 1043. That one asks device makers to collect your birth date during setup. Then the device sends apps a coded signal, just your age range, not your identity. So California now has one law that protects privacy and another that may quietly erode it. Same goal. Opposite methods.

And there's a free-speech thread here too. The E.F.F. points out these gates apply to protected speech, ordinary posts and conversations. That's different from checking I.D. to buy alcohol or cigarettes. A verification wall on speech raises First Amendment questions courts haven't fully settled.