As last captured

Ofcom: guidance on highly effective age assurance (Part 3) · The reliability criterion

The reliability criterion implementing age assurance?

implementing age assurance 3 · in force: unknown

Captured source text (L5)

The reliability criterion implementing age assurance?

Ensure that methods with a degree of variance have been suitably tested and that ongoing performance is measured and monitored
4.43Age assurance methods that rely on machine learning or artificial intelligence, such as facial age estimation and photo-ID matching, are likely to produce outputs with a degree of variance. There are several reasons for this, including data variability and model complexity.
4.44In addition, the performance of these specific methods may degrade over time due to ‘model drift’. This is where the data the method has been trained on becomes less representative of the population using the age assurance method. For example, population demographics may shift over time, resulting in a greater degree of variance.
4.45Where service providers implement age assurance methods that rely on artificial intelligence or machine learning, we expect them to take steps to ensure that it has been suitably tested during the development process to ensure it produces reproducible results, i.e. to ensure that outputs are consistently produced when the method is presented with the same inputs.
4.46There should be regular monitoring and measurement of key performance indicators of the system once the age assurance process has been deployed.27 Where necessary, root cause analysis and retraining should also be carried out where unexpected or unreliable predictions are being observed, particularly where such predictions may risk children being able to access harmful content.
4.47For other kinds of age assurance methods, including credit card age checks, open banking, and MNO age checks, outputs do not generally exhibit any variance of the type described above. In these cases, identical outputs should be produced when the method is presented with the same inputs. While reliability is less relevant for these methods, the service provider should still ensure that they fulfil the criteria of technical accuracy, robustness, and fairness.
Ensure that the evidence used is derived from a trustworthy source
4.48We expect service providers to have confidence in the evidence that the age assurance method is relying on by considering, for example:
• the nature and properties of any identity documents, profiles, accounts, data, etc. used as part of the age assurance process; and
• the source of the underlying data or documents.
27 For example:
1) Age Verification Accuracy Rate (AVAR): the percentage of users correctly identified as belonging to the appropriate age group;
2) Age Verification Efficiency (AVE): the time taken to complete the age verification process;
3) Drift Threshold: establish predefined thresholds for AVAR and AVE beyond which significant model drifting is considered to have occurred. 17
4.49In assessing the nature and properties of the relevant evidence, service providers should identify features that they would expect to see in a trustworthy source. When deploying photo-ID matching, for example, these features might include that:
• the evidence has originated from a country or organisation that is recognised as trustworthy;
• the positioning of the photographs on the evidence does not suggest they have been edited or replaced;
• the layout or any logos look as expected; and/or • the visible security features are genuine.28
4.50Certification against the trust framework indicates that the evidence used by a third-party digital identity or attribute service provider should be reliable.29
Full captured verbatim text
Ensure that methods with a degree of variance have been suitably tested and
that ongoing performance is measured and monitored

4.43 Age assurance methods that rely on machine learning or artificial intelligence, such as facial
age estimation and photo-ID matching, are likely to produce outputs with a degree of
variance. There are several reasons for this, including data variability and model complexity.

4.44 In addition, the performance of these specific methods may degrade over time due to
‘model drift’. This is where the data the method has been trained on becomes less
representative of the population using the age assurance method. For example, population
demographics may shift over time, resulting in a greater degree of variance.

4.45 Where service providers implement age assurance methods that rely on artificial
intelligence or machine learning, we expect them to take steps to ensure that it has been
suitably tested during the development process to ensure it produces reproducible results,
i.e. to ensure that outputs are consistently produced when the method is presented with
the same inputs.

4.46 There should be regular monitoring and measurement of key performance indicators of the
system once the age assurance process has been deployed.27 Where necessary, root cause
analysis and retraining should also be carried out where unexpected or unreliable
predictions are being observed, particularly where such predictions may risk children being
able to access harmful content.

4.47 For other kinds of age assurance methods, including credit card age checks, open banking,
and MNO age checks, outputs do not generally exhibit any variance of the type described
above. In these cases, identical outputs should be produced when the method is presented
with the same inputs. While reliability is less relevant for these methods, the service
provider should still ensure that they fulfil the criteria of technical accuracy, robustness, and
fairness.

Ensure that the evidence used is derived from a trustworthy source

4.48 We expect service providers to have confidence in the evidence that the age assurance
method is relying on by considering, for example:

• the nature and properties of any identity documents, profiles, accounts, data, etc. used
as part of the age assurance process; and

• the source of the underlying data or documents.

27 For example:

1) Age Verification Accuracy Rate (AVAR): the percentage of users correctly identified as belonging to
the appropriate age group;

2) Age Verification Efficiency (AVE): the time taken to complete the age verification process;

3) Drift Threshold: establish predefined thresholds for AVAR and AVE beyond which significant model
drifting is considered to have occurred.
17

4.49 In assessing the nature and properties of the relevant evidence, service providers should
identify features that they would expect to see in a trustworthy source. When deploying
photo-ID matching, for example, these features might include that:

• the evidence has originated from a country or organisation that is recognised as
trustworthy;

• the positioning of the photographs on the evidence does not suggest they have been
edited or replaced;

• the layout or any logos look as expected; and/or
• the visible security features are genuine.28

4.50 Certification against the trust framework indicates that the evidence used by a third-party
digital identity or attribute service provider should be reliable.29

What this provision means

Model summary, checked against the text on the left.

Relevance to Signicat: 3/3 · detailed summary (L4) Status: ok · Stored artifact; current recipe verification unavailable

Service providers must test, monitor, and retrain variable age assurance methods and verify the trustworthiness of evidence sources.

4.45 Where service providers implement age assurance methods that rely on artificial intelligence or machine learning, we expect them to take steps to ensure that it has been suitably tested during the development process to ensure it produces reproducible results, i.e. to ensure that outputs are consistently produced when the method is presented with the same inputs.
4.46 There should be regular monitoring and measurement of key performance indicators of the system once the age assurance process has been deployed.27 Where necessary, root cause analysis and retraining should also be carried out where unexpected or unreliable predictions are being observed, particularly where such predictions may risk children being able to access harmful content.
4.50 Certification against the trust framework indicates that the evidence used by a third-party digital identity or attribute service provider should be reliable.29
Under 4.45, where service providers implement age assurance methods relying on artificial intelligence or machine learning, they are expected to take steps to ensure suitable testing during development to produce reproducible results. Under 4.46, there should be regular monitoring and measurement of key performance indicators once deployed, including root cause analysis and retraining when unexpected or unreliable predictions are observed. Under 4.47, for methods like credit card age checks, open banking, and MNO checks, providers should ensure they fulfil technical accuracy, robustness, and fairness. Under 4.48 and 4.49, providers are expected to have confidence in evidence trustworthiness.
age_assurance.estimationage_assurance.document_or_eid_basedidentity_proofing.data_verificationtrust_framework.dvs_certification

Refers to

No captured references.

Referred to by

No captured references.

Part summaries

0 of 0 parts have a verified summary.

L1 unavailable for current verification: the overall summary needs every part verified. Provisions and the verified summaries remain readable.

Verification findings (79)

synthesis coverage: missing/unverified L2 guidance-on-highly

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#guidance-on-highly

synthesis coverage: missing/unverified L2 effective-age-assurance

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#effective-age-assurance

synthesis coverage: missing/unverified L2 for-part-3-services

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-3

synthesis coverage: missing/unverified L2 contents

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#section

synthesis coverage: missing/unverified L2 1-overview

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-5

synthesis coverage: missing/unverified L2 2-introduction

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#2-introduction

synthesis coverage: missing/unverified L2 background-to-the-guidance

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#children-s-access-assessment

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#protection-of-children-codes

synthesis coverage: missing/unverified L2 navigating-the-guidance

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-9

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#section-3-age-assurance-methods

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#section-4-criteria-to-ensure-an-age-assurance-process-is-highly

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#effective

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#section-5-privacy

synthesis coverage: missing/unverified L2 3-age-assurance-methods-and

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#3-age-assurance-methods-and

synthesis coverage: missing/unverified L2 processes

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-15

synthesis coverage: missing/unverified L2 kinds-of-age-assurance-that-are-capable-of-being-highly

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#kinds-of-age-assurance-that-are-capable-of-being-highly

synthesis coverage: missing/unverified L2 effective

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-17

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-22

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-23

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-24

synthesis coverage: missing/unverified L2 kinds-of-age-assurance-that-are-not-capable-of-being

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#kinds-of-age-assurance-that-are-not-capable-of-being

synthesis coverage: missing/unverified L2 highly-effective

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-19

synthesis coverage: missing/unverified L2 4-criteria-to-ensure-an-age

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#4-criteria-to-ensure-an-age

synthesis coverage: missing/unverified L2 assurance-process-is-highly

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#assurance-process-is-highly

synthesis coverage: missing/unverified L2 the-technical-accuracy-criterion

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#what-is-technical-accuracy

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#why-is-technical-accuracy-important

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#how-can-service-providers-have-regard-to-the-technical

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#accuracy-criterion

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#accuracy-criterion-2

synthesis coverage: missing/unverified L2 the-robustness-criterion

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#what-is-robustness

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#why-is-robustness-important

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#how-can-service-providers-have-regard-to-robustness-when

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#implementing-age-assurance

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#implementing-age-assurance-2

synthesis coverage: missing/unverified L2 the-reliability-criterion

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#what-is-reliability

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#why-is-reliability-important

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#how-can-service-providers-have-regard-to-reliability-when

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#implementing-age-assurance-3

synthesis coverage: missing/unverified L2 the-fairness-criterion

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#what-is-fairness

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#why-is-fairness-important

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#how-can-service-providers-have-regard-to-fairness-when

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#implementing-age-assurance-4

synthesis coverage: missing/unverified L2 additional-principles-for-providers-to-consider

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-43

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#accessibility-principle

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#interoperability

synthesis coverage: missing/unverified L2 5-privacy-and-data-protection

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-46

synthesis coverage: missing/unverified L2 the-data-protection-regime

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-47

synthesis coverage: missing/unverified L2 ico-guidance-on-data-protection-and-age-assurance

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-48

synthesis coverage: missing/unverified L2 having-regard-to-privacy-under-the-act

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-49

synthesis coverage: missing/unverified L2 6-technical-glossary

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#metrics-used-to-measure-the-accuracy-of-age-assurance

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#metrics-used-to-measure-the-accuracy-of-age-assurance-2

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#additional-terms-used-in-this-guidance

Instrument tier unavailable

Change history as published

No captured publisher history.

Pending effects amendments not yet applied to this text

No captured pending effects.

Provenance

Every claim the system makes about this text is traceable to these identifiers.

Instrument
uk:ofcom/heaa-guidance-part3
Part
The reliability criterion
Version
eb000eee3d25f24ca2bee58c…
Content hash
sha256 8da7398de2665c2137cd4b71…
Source
ofcom.org.uk/siteassets/resources/documents/consultations/category-1-10-weeks/statement-protecting-children-from-harms-online/main-document/guidance-on-highly-effective-age-assurance-part-3-guidance-.pdf?v=396471