As last captured

Ofcom: guidance on highly effective age assurance (Part 3) · The technical accuracy criterion

The technical accuracy criterion accuracy criterion?

accuracy criterion · in force: unknown

Captured source text (L5)

The technical accuracy criterion accuracy criterion?

Ensure the method(s) has been evaluated against appropriate metrics and the results indicate that the method(s) is able to correctly establish whether or not a particular user is a child
4.11To understand the technical accuracy of an age assurance method, service providers should ensure it has been evaluated against appropriate metrics to assess the extent to which they can correctly determine the age or age range of a person under test lab conditions.
4.12Age assurance methods either produce:
• A binary result (for example, categorising users as either over or under the age of 18). • A continuous result (for example, providing an estimation of the user’s age).17
4.13In the case of methods that produce a binary result, examples of appropriate metrics include but are not limited to; the True Positive Rate (TPR), False Positive Rate (FPR), and False Negative Rate (FNR).18
4.14In the case of methods that produce a continuous result, examples of appropriate metrics include but are not limited to the Standard Deviation, Mean Absolute Percentage Error (MAPE), and Cumulative Score (CS).19
4.15Service providers should be satisfied that the results indicate that the age assurance method(s) is able to correctly establish whether or not a particular user is a child.
Use a challenge age approach for age estimation methods
4.16Where the age assurance process used on the service involves the use of age estimation, the provider should use a challenge age approach.
4.17A challenge age approach is widely used offline when selling age-restricted products in retail environments, for instance, through the retailing strategy ‘Challenge 25.’ In this approach, anyone who appears to the provider of restricted products to be under the age of 25 should be challenged to provide acceptable ID proving that they are over the age of
18 if they wish to buy alcohol. The ‘challenge age’ in this scenario would be 25.20
4.18In an online age assurance process, a challenge age approach refers to where a user who is estimated as being under a given challenge age must then undergo a second age assurance step (for example, a different age assurance method) to confirm that they are over the required age.21
4.19The challenge age should be set at an appropriate level according to the limits of the technical accuracy of that method, for example, where system testing suggests that there is a significant risk of incorrectly estimating a 17-year-old’s age by 7 years above or below. To
17 The estimation of the user’s age will usually be accompanied by a confidence interval or range, which conveys the algorithm’s level of uncertainty regarding the prediction. For example, where an age estimation method predicts that a user is 25 years old with a confidence interval of ±2 years, this means that the method estimates the user’s age to fall within the range of 23 to 27 years.
18 We define each of the metrics set out in the technical glossary in Annex 1 of this document.
19 We define each of the metrics set out in the technical glossary in Annex 1 of this document.
20 Drink Aware, Challenge 25.
21 ACCS, 2022. Measurement of Age Assurance Technologies. 13
manage this risk a buffer can be set above the age by 8 years, so if the relevant age is 18 then the Challenge Age would be 25. For users estimated to be over the age of 25, no additional verification will be required. Where the method estimates that the user’s age is under the challenge age, the user could be required to undergo another age check by a second method that is more technically accurate for that age group.
4.20Using a challenge age approach helps to improve the overall effectiveness of the age assurance process by preventing or minimising borderline cases where the age estimation method incorrectly assesses a user as being an adult when they are a child.
Periodically review the technical accuracy of the age assurance method(s) and make changes where necessary
Full captured verbatim text
Ensure the method(s) has been evaluated against appropriate metrics and the
results indicate that the method(s) is able to correctly establish whether or not a
particular user is a child

4.11 To understand the technical accuracy of an age assurance method, service providers should
ensure it has been evaluated against appropriate metrics to assess the extent to which they
can correctly determine the age or age range of a person under test lab conditions.

4.12 Age assurance methods either produce:

• A binary result (for example, categorising users as either over or under the age of 18).
• A continuous result (for example, providing an estimation of the user’s age).17

4.13 In the case of methods that produce a binary result, examples of appropriate metrics
include but are not limited to; the True Positive Rate (TPR), False Positive Rate (FPR), and
False Negative Rate (FNR).18

4.14 In the case of methods that produce a continuous result, examples of appropriate metrics
include but are not limited to the Standard Deviation, Mean Absolute Percentage Error
(MAPE), and Cumulative Score (CS).19

4.15 Service providers should be satisfied that the results indicate that the age assurance
method(s) is able to correctly establish whether or not a particular user is a child.

Use a challenge age approach for age estimation methods

4.16 Where the age assurance process used on the service involves the use of age estimation,
the provider should use a challenge age approach.

4.17 A challenge age approach is widely used offline when selling age-restricted products in
retail environments, for instance, through the retailing strategy ‘Challenge 25.’ In this
approach, anyone who appears to the provider of restricted products to be under the age
of 25 should be challenged to provide acceptable ID proving that they are over the age of

18 if they wish to buy alcohol. The ‘challenge age’ in this scenario would be 25.20

4.18 In an online age assurance process, a challenge age approach refers to where a user who is
estimated as being under a given challenge age must then undergo a second age assurance
step (for example, a different age assurance method) to confirm that they are over the
required age.21

4.19 The challenge age should be set at an appropriate level according to the limits of the
technical accuracy of that method, for example, where system testing suggests that there is
a significant risk of incorrectly estimating a 17-year-old’s age by 7 years above or below. To

17 The estimation of the user’s age will usually be accompanied by a confidence interval or range, which
conveys the algorithm’s level of uncertainty regarding the prediction. For example, where an age estimation
method predicts that a user is 25 years old with a confidence interval of ±2 years, this means that the method
estimates the user’s age to fall within the range of 23 to 27 years.

18 We define each of the metrics set out in the technical glossary in Annex 1 of this document.

19 We define each of the metrics set out in the technical glossary in Annex 1 of this document.

20 Drink Aware, Challenge 25.

21 ACCS, 2022. Measurement of Age Assurance Technologies.
13

manage this risk a buffer can be set above the age by 8 years, so if the relevant age is 18
then the Challenge Age would be 25. For users estimated to be over the age of 25, no
additional verification will be required. Where the method estimates that the user’s age is
under the challenge age, the user could be required to undergo another age check by a
second method that is more technically accurate for that age group.

4.20 Using a challenge age approach helps to improve the overall effectiveness of the age
assurance process by preventing or minimising borderline cases where the age estimation
method incorrectly assesses a user as being an adult when they are a child.

Periodically review the technical accuracy of the age assurance method(s) and
make changes where necessary

What this provision means

Model summary, checked against the text on the left.

Relevance to Signicat: 3/3 · detailed summary (L4) Status: ok · Stored artifact; current recipe verification unavailable

Service providers must evaluate age assurance methods against metrics and implement a challenge age fallback workflow for age estimation.

4.11 To understand the technical accuracy of an age assurance method, service providers should ensure it has been evaluated against appropriate metrics to assess the extent to which they can correctly determine the age or age range of a person under test lab conditions.
4.16 Where the age assurance process used on the service involves the use of age estimation, the provider should use a challenge age approach.
4.18 In an online age assurance process, a challenge age approach refers to where a user who is estimated as being under a given challenge age must then undergo a second age assurance step (for example, a different age assurance method) to confirm that they are over the required age.21
Under 4.11 and 4.15, service providers should ensure age assurance methods are evaluated against appropriate metrics under test lab conditions to establish whether a user is a child. Under 4.16, where age estimation is used, providers should apply a challenge age approach. Under 4.18 and 4.19, users estimated below the challenge age must undergo a second age assurance step to confirm they are over the required age. The challenge age should be set at an appropriate level according to technical accuracy limits, such as managing a risk of estimating a 17-year-old's age by 7 years by setting a buffer of 8 years so that if the relevant age is 18, the Challenge Age would be 25.
age_assurance.estimationage_assurance.document_or_eid_basedorchestration.workflow_risk_decisioning

Refers to

No captured references.

Referred to by

No captured references.

Part summaries

0 of 0 parts have a verified summary.

L1 unavailable for current verification: the overall summary needs every part verified. Provisions and the verified summaries remain readable.

Verification findings (79)

synthesis coverage: missing/unverified L2 guidance-on-highly

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#guidance-on-highly

synthesis coverage: missing/unverified L2 effective-age-assurance

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#effective-age-assurance

synthesis coverage: missing/unverified L2 for-part-3-services

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-3

synthesis coverage: missing/unverified L2 contents

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#section

synthesis coverage: missing/unverified L2 1-overview

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-5

synthesis coverage: missing/unverified L2 2-introduction

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#2-introduction

synthesis coverage: missing/unverified L2 background-to-the-guidance

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#children-s-access-assessment

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#protection-of-children-codes

synthesis coverage: missing/unverified L2 navigating-the-guidance

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-9

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#section-3-age-assurance-methods

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#section-4-criteria-to-ensure-an-age-assurance-process-is-highly

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#effective

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#section-5-privacy

synthesis coverage: missing/unverified L2 3-age-assurance-methods-and

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#3-age-assurance-methods-and

synthesis coverage: missing/unverified L2 processes

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-15

synthesis coverage: missing/unverified L2 kinds-of-age-assurance-that-are-capable-of-being-highly

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#kinds-of-age-assurance-that-are-capable-of-being-highly

synthesis coverage: missing/unverified L2 effective

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-17

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-22

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-23

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-24

synthesis coverage: missing/unverified L2 kinds-of-age-assurance-that-are-not-capable-of-being

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#kinds-of-age-assurance-that-are-not-capable-of-being

synthesis coverage: missing/unverified L2 highly-effective

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-19

synthesis coverage: missing/unverified L2 4-criteria-to-ensure-an-age

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#4-criteria-to-ensure-an-age

synthesis coverage: missing/unverified L2 assurance-process-is-highly

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#assurance-process-is-highly

synthesis coverage: missing/unverified L2 the-technical-accuracy-criterion

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#what-is-technical-accuracy

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#why-is-technical-accuracy-important

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#how-can-service-providers-have-regard-to-the-technical

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#accuracy-criterion

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#accuracy-criterion-2

synthesis coverage: missing/unverified L2 the-robustness-criterion

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#what-is-robustness

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#why-is-robustness-important

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#how-can-service-providers-have-regard-to-robustness-when

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#implementing-age-assurance

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#implementing-age-assurance-2

synthesis coverage: missing/unverified L2 the-reliability-criterion

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#what-is-reliability

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#why-is-reliability-important

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#how-can-service-providers-have-regard-to-reliability-when

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#implementing-age-assurance-3

synthesis coverage: missing/unverified L2 the-fairness-criterion

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#what-is-fairness

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#why-is-fairness-important

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#how-can-service-providers-have-regard-to-fairness-when

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#implementing-age-assurance-4

synthesis coverage: missing/unverified L2 additional-principles-for-providers-to-consider

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-43

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#accessibility-principle

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#interoperability

synthesis coverage: missing/unverified L2 5-privacy-and-data-protection

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-46

synthesis coverage: missing/unverified L2 the-data-protection-regime

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-47

synthesis coverage: missing/unverified L2 ico-guidance-on-data-protection-and-age-assurance

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-48

synthesis coverage: missing/unverified L2 having-regard-to-privacy-under-the-act

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-49

synthesis coverage: missing/unverified L2 6-technical-glossary

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#metrics-used-to-measure-the-accuracy-of-age-assurance

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#metrics-used-to-measure-the-accuracy-of-age-assurance-2

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#additional-terms-used-in-this-guidance

Instrument tier unavailable

Change history as published

No captured publisher history.

Pending effects amendments not yet applied to this text

No captured pending effects.

Provenance

Every claim the system makes about this text is traceable to these identifiers.

Instrument
uk:ofcom/heaa-guidance-part3
Part
The technical accuracy criterion
Version
eb000eee3d25f24ca2bee58c…
Content hash
sha256 f49e8d0a0bb9be68c5ac59df…
Source
ofcom.org.uk/siteassets/resources/documents/consultations/category-1-10-weeks/statement-protecting-children-from-harms-online/main-document/guidance-on-highly-effective-age-assurance-part-3-guidance-.pdf?v=396471