Captured source text (L5)
effective
criteria than others. For example, one age assurance method could produce a highly
reliable result due to limited variance, but it may provide greater opportunities for children
to circumvent, therefore reducing its robustness. We expect to see that, when determining
which age assurance method(s) to implement, service providers have satisfied themselves
that the age assurance process as a whole fulfils each of the criteria.
4.5Throughout the guidance, we refer to the importance of testing. Testing plays a key role in
how service providers can evidence that they have had regard to the four criteria. Where
we suggest that service providers should consider testing, in all instances, metrics and
results could be derived from testing by the service provider internally (if feasible), by their
third-party age assurance provider(s), or by an independent third party. Where testing has
been carried out by third parties, providers should understand what tests have been
conducted and what metrics have been used to measure the results.
4.6Service providers may choose to implement age assurance methods provided by services
that are certified against a standard or scheme, such as the UK Digital Identity and
Attributes Trust Framework (“the trust framework”).16 The trust framework is a set of rules
and standards governing the provision of digital verification services across the UK
economy. Using a service certified against the trust framework (or any other standard or
scheme) is not an automatic means of compliance, but it may help to evidence that a
service provider has had regard to the four criteria to ensure that its approach is highly
effective.
4.7We give more details about each criterion below, including why the criteria are important,
and steps service providers can take to have regard to them.
Full captured verbatim text
criteria than others. For example, one age assurance method could produce a highly reliable result due to limited variance, but it may provide greater opportunities for children to circumvent, therefore reducing its robustness. We expect to see that, when determining which age assurance method(s) to implement, service providers have satisfied themselves that the age assurance process as a whole fulfils each of the criteria. 4.5 Throughout the guidance, we refer to the importance of testing. Testing plays a key role in how service providers can evidence that they have had regard to the four criteria. Where we suggest that service providers should consider testing, in all instances, metrics and results could be derived from testing by the service provider internally (if feasible), by their third-party age assurance provider(s), or by an independent third party. Where testing has been carried out by third parties, providers should understand what tests have been conducted and what metrics have been used to measure the results. 4.6 Service providers may choose to implement age assurance methods provided by services that are certified against a standard or scheme, such as the UK Digital Identity and Attributes Trust Framework (“the trust framework”).16 The trust framework is a set of rules and standards governing the provision of digital verification services across the UK economy. Using a service certified against the trust framework (or any other standard or scheme) is not an automatic means of compliance, but it may help to evidence that a service provider has had regard to the four criteria to ensure that its approach is highly effective. 4.7 We give more details about each criterion below, including why the criteria are important, and steps service providers can take to have regard to them.