Online age checks expose personal data ^{CEFR A2}

Researchers from Georgia Institute of Technology and the University of California, Irvine presented new findings at the IEEE Symposium on Security and Privacy in San Francisco. They studied a London company called Yoti that many websites use for age verification.

The team found that a single verification attempt can send more than an age check. Sites often transmit a user’s facial image, online address and device fingerprint to other companies. The researchers said recipients include credit card firms, geolocation services and data brokers. Laws in 25 US states require digital age checks, but many covered sites do not enforce them.