Data Protection: Age Assurance
The question
To ask the Secretary of State for Science, Innovation and Technology, whether Ofcom is taking steps to ensure that companies involved in age verification do not (a) retain and (b) misuse personal data.
Answered by Kanishka Narayan
The Online Safety Act requires providers to protect users’ right to privacy when implementing age assurance. UK GDPR and the Data Protection Act requires data to be processed fairly, lawfully, and transparently. Where Ofcom is concerned that a provider has not complied it may refer the matter to the ICO.
Under the Act, regulated services that are likely to be accessed by children must implement highly effective age assurance to prevent exposure to harmful content. There are cost-effective compliant methods available.
Highly effective age assurance must be robust, and services must take appropriate steps to mitigate against circumvention.
Verbatim has judged this answer against the question that was actually asked — answered, partly answered, or evaded. Sign in to see the verdict →