Biometric research: Ireland probes X facial age data

When you set up a new account for your kid on X, the app never shows you the parental controls. They exist. But they're buried so deep, most parents never find them. And Ireland's media regulator just decided that's a problem worth investigating.

If you've ever handed a phone to a child and

If you've ever handed a phone to a child and trusted the safety settings, this story is about you. Because a regulator is now asking a question nobody's really tested, do those settings actually work? Ireland's media commission, Coimisiún na Meán, has opened its first-ever investigation under the country's new Online Safety Code. The target is X, the platform formerly known as Twitter. The regulator says X may have failed to properly check the ages of its users and failed to protect children from things like pornography and violence. So the real question threading through all of this, when a company says it protects kids, who's checking whether that's true?

Let's start with how X says it figures out your age. According to the company, it uses signals it already has. Things like when your account was created. Whether you were verified years ago. Your past age checks. The regulator's position is blunt. Any age check based only on someone typing in their own birthday isn't good enough. Think about how easy that is. A twelve-year-old picks a birth year. Done. That's the gap regulators are now refusing to accept. Up next: Social Media Identity Verification Macron Eyes Id Scanning P.

Then there's the parental controls themselves. The regulator says on X, they're hard to find. They have no minimum standards. And new users never see them at sign-up. Picture a smoke detector sold with no batteries and no instructions, hidden in a drawer. It technically exists. It protects no one. For a parent, that means the tool you assumed was guarding your kid may have been switched off the whole time.

Why does X suddenly care what a regulator in

Now, why does X suddenly care what a regulator in Ireland thinks? Money. Under this code, non-compliance can cost up to twenty million euros. Or ten percent of the company's global yearly revenue, whichever is larger. That's real financial weight. It turns a suggestion into a demand.

And this isn't just one regulator's hunch. Academic researchers have tested age verification across major social platforms, including X. They found systematic gaps, the checks routinely fail to catch underage users. For the rest of us, that means the "you must be thirteen" screen is often just a formality.

Here's the shift that changes everything. For years, platforms offered parental controls as proof they'd done their part. If a kid saw something awful, well, the tools were right there. This investigation flips that. The regulator isn't asking whether the settings exist. It's asking whether they actually work. That moves the blame off the parent and back onto the company that built the tool.