{"id":64526,"date":"2026-02-24T19:30:40","date_gmt":"2026-02-24T18:30:40","guid":{"rendered":"https:\/\/www.apfelpatient.de\/?p=64526"},"modified":"2026-02-24T19:36:12","modified_gmt":"2026-02-24T18:36:12","slug":"reddit-discord-trouble-about-age-verification","status":"publish","type":"post","link":"https:\/\/www.apfelpatient.de\/en\/news\/reddit-discord-aerger-um-altersverifikation","title":{"rendered":"Reddit & Discord: Controversy surrounding age verification"},"content":{"rendered":"

Reddit and Discord are currently at the center of a debate about age verification, data privacy, and legal obligations. Both platforms used a controversial external age verification service \u2013 with significant consequences. While Reddit had to pay a million-dollar fine, Discord faced massive criticism from its own community.<\/strong><\/p>\n\n\n\n

At its core, the issue revolves around a difficult question: How can children be effectively protected on the internet without unnecessarily disclosing personal data or violating data protection laws?<\/p>\n\n\n\n

The starting point for these current developments is the British Online Safety Act (OSA). This law obliges online platforms to verify the age of their users and ensure that children are not exposed to harmful or inappropriate content.<\/p>\n\n\n\n

For platforms like Reddit and Discord, this means they must implement reliable age verification mechanisms. At the same time, they are under pressure to store as little sensitive data as possible themselves. This balancing act between protecting minors and data privacy has now led to significant problems.<\/p>\n\n\n\n

Inadequate controls at Reddit<\/h4>\n\n\n\n

Reddit has been fined \u00a314.47 million (around $19.5 million) by the UK's data protection authority, the Information Commissioner's Office (ICO). The platform was accused of unlawfully processing children's personal data (via BBC News<\/a>).<\/p>\n\n\n\n

According to an investigation by the ICO, Reddit did not properly verify the age of its users. This created a risk that minors could access content that was unsuitable or potentially harmful to them.<\/p>\n\n\n\n

To comply with legal requirements, Reddit contracted the external company Persona to handle age verification. Persona was tasked with checking either uploaded selfies or photos of official identification documents. Reddit explained that this solution was chosen to avoid storing direct information about the users' identities.<\/p>\n\n\n\n

The ICO concluded, however, that these controls were insufficient. Many children were incorrectly classified as adults. Consequently, personal data of minors was processed without a legal basis. This point alone led to the substantial fine.<\/p>\n\n\n\n

This case demonstrates that outsourcing sensitive processes to third-party providers does not absolve a company of responsibility. The obligation to correctly implement age verification remains with the platform itself.<\/p>\n\n\n\n

Discord is experiencing a backlash from users<\/h4>\n\n\n\n

Discord also used Persona for age verification. Unlike Reddit, however, the primary concern here was not a government penalty, but rather a significant backlash from users.<\/p>\n\n\n\n

Discord has faced criticism on social media for not being transparent about its planned use of facial scans and uploaded IDs. The partnership with Persona has been particularly criticized. Persona is used not only by Reddit but also by other platforms like Roblox.<\/p>\n\n\n\n

Users pointed to Persona's privacy policy, which states that the company may obtain personal data from "third-party databases, government registers, and other publicly available sources." This statement heightened concerns that sensitive identity data could be processed more extensively than anticipated.<\/p>\n\n\n\n

Savannah Badalich, Discord's head of product policy, confirmed that there had been a limited test of Persona in the UK. This test was conducted because age verification was already legally mandated there. According to Badalich, the test has now ended, and Discord no longer uses Persona.<\/p>\n\n\n\n

The Online Safety Act as the trigger for the development<\/h4>\n\n\n\n

The British Online Safety Act provides the legal basis for stricter age verification measures. The aim of the law is to effectively protect children from harmful online content.<\/p>\n\n\n\n

However, implementation presents practical and data protection challenges. The stricter the age verification, the more frequently users have to upload sensitive documents such as official photo IDs or video selfies. If such data is shared with numerous app developers or platforms, there is an increased risk of data breaches.<\/p>\n\n\n\n

The current situation illustrates that legal regulations alone do not offer a simple solution. They partially shift the problem to a technical and organizational level.<\/p>\n\n\n\n

Demands for accountability from Apple and Google<\/h4>\n\n\n\n

Given the difficulties faced by platforms like Reddit and Discord, there are increasing calls to shift more responsibility for age verification to the operators of the app stores.<\/p>\n\n\n\n

Specifically, this concerns Apple and Google. The idea is that age verification would be handled centrally through the app stores. Users would only have to prove their age once. Afterwards, age-restricted apps could be automatically blocked.<\/p>\n\n\n\n

Some US states already have similar regulations. Such a solution would have several implications:<\/p>\n\n\n\n