Captured source text (L5)
effective
Open banking
3.7This works by accessing the information a bank has on record regarding a user’s age, with
the user’s consent. Confirmation of whether or not the user is over 18 is shared with the
relying party.11 The user’s date of birth is not shared with the relying party, nor is any other
information.
Photo-identification (photo-ID) matching
3.8This works by capturing relevant information from an uploaded photo-ID document and
comparing it to an image of the user at the point of ID upload to verify that they are the
same person.
Facial age estimation
3.9This works by analysing the features of a user’s face to estimate their age.
Mobile-network operator (MNO) age checks
3.10Each of the UK’s MNOs have agreed to a code of practice whereby they automatically apply
a content restriction filter (CRF), which prevents children from accessing age-restricted
websites over mobile internet on pay-as-you-go and contract SIMs. Users can remove the
CRF by proving they are an adult.12 MNO age checks rely on checking whether the CRF on a
user’s mobile phone has been removed. If the CRF has been removed, this indicates that
the recorded user of the device is over 18. Confirmation of whether or not the recorded
user is over 18, based on the status of the CRF, is shared with the relying party.
Credit card checks
3.11In the UK, individuals must be 18 or over to obtain a credit card, therefore, credit card
issuers are obliged to verify the age of applicants before providing them with a credit
10 Age tokens are reusable digital tokens that act as a digital proxy or representation of a completed age check.
They can be shared by users across multiple services over a defined period of time as evidence that an age
check has been completed.
11 ‘Relying party’ refers to the service that is trying to establish the age of the user. In this context, the relying
party is likely to be the regulated service.
12 There are several ways to remove a CRF, depending on the MNO.
8
card.13 Credit-card based age checks work by asking a user to input their credit card details,
after which a payment processor sends a request to check the card is valid by the issuing
bank. Approval by the issuing bank can be taken as evidence that the user is over 18.14
Email-based age estimation
3.12These are solutions that estimate the age of a user by analysing the other online services
where that user's provided email address has been used. This could include where an email
address has been associated with financial institutions such as mortgage lenders.
Digital Identity Services
3.13A digital identity is a digital representation of a person which enables them to prove who
they are during interactions and transactions online and in person. Reusable digital
identities are those which can be used multiple times for different interactions and
transactions. This includes digital identity wallets which enable users to verify and securely
store their attributes (such as age) in a digital format. This verification may take place using
a variety of methods, including those listed above. Once their identity or an attribute of
their identity has been verified and stored in the wallet, a user may choose to share
individual attributes, such as their age, or their status as an adult, with a relying party.
Full captured verbatim text
Open banking 3.7 This works by accessing the information a bank has on record regarding a user’s age, with the user’s consent. Confirmation of whether or not the user is over 18 is shared with the relying party.11 The user’s date of birth is not shared with the relying party, nor is any other information. Photo-identification (photo-ID) matching 3.8 This works by capturing relevant information from an uploaded photo-ID document and comparing it to an image of the user at the point of ID upload to verify that they are the same person. Facial age estimation 3.9 This works by analysing the features of a user’s face to estimate their age. Mobile-network operator (MNO) age checks 3.10 Each of the UK’s MNOs have agreed to a code of practice whereby they automatically apply a content restriction filter (CRF), which prevents children from accessing age-restricted websites over mobile internet on pay-as-you-go and contract SIMs. Users can remove the CRF by proving they are an adult.12 MNO age checks rely on checking whether the CRF on a user’s mobile phone has been removed. If the CRF has been removed, this indicates that the recorded user of the device is over 18. Confirmation of whether or not the recorded user is over 18, based on the status of the CRF, is shared with the relying party. Credit card checks 3.11 In the UK, individuals must be 18 or over to obtain a credit card, therefore, credit card issuers are obliged to verify the age of applicants before providing them with a credit 10 Age tokens are reusable digital tokens that act as a digital proxy or representation of a completed age check. They can be shared by users across multiple services over a defined period of time as evidence that an age check has been completed. 11 ‘Relying party’ refers to the service that is trying to establish the age of the user. In this context, the relying party is likely to be the regulated service. 12 There are several ways to remove a CRF, depending on the MNO. 8 card.13 Credit-card based age checks work by asking a user to input their credit card details, after which a payment processor sends a request to check the card is valid by the issuing bank. Approval by the issuing bank can be taken as evidence that the user is over 18.14 Email-based age estimation 3.12 These are solutions that estimate the age of a user by analysing the other online services where that user's provided email address has been used. This could include where an email address has been associated with financial institutions such as mortgage lenders. Digital Identity Services 3.13 A digital identity is a digital representation of a person which enables them to prove who they are during interactions and transactions online and in person. Reusable digital identities are those which can be used multiple times for different interactions and transactions. This includes digital identity wallets which enable users to verify and securely store their attributes (such as age) in a digital format. This verification may take place using a variety of methods, including those listed above. Once their identity or an attribute of their identity has been verified and stored in the wallet, a user may choose to share individual attributes, such as their age, or their status as an adult, with a relying party.