Massive TikTok Fine Threat Advances Europe’s Digital ID Agenda

A familiar storyline is hardening into regulatory doctrine across Europe: frame social media use as addiction, then require platforms to reengineer themselves around age segregation and digital ID.

The European Commission’s preliminary case against TikTok, announced today, shows how that narrative is now being operationalized in policy, with consequences that reach well beyond one app.

European regulators have accused TikTok of breaching the Digital Services Act by relying on what they describe as “addictive design” features, including infinite scroll, autoplay, push notifications, and personalized recommendations.

Officials argue these systems drive compulsive behavior among children and vulnerable adults and must be structurally altered.

What sits beneath that argument is a quieter requirement. To deliver different “safe” experiences to minors and adults, platforms must first determine who is a minor and who is not. Any mandate to offer different experiences to minors and adults depends on a reliable method of telling those groups apart.

Platforms cannot apply separate algorithms, screen-time limits, or nighttime restrictions without determining a user’s age with a level of confidence regulators will accept.

Commission spokesman Thomas Regnier described the mechanics bluntly, saying TikTok’s design choices “lead to the compulsive use of the app, especially for our kids, and this poses major risks to their mental health and wellbeing.” He added: “The measures that TikTok has in place are simply not enough.”

The enforcement tool behind those statements is the Digital Services Act, the EU’s platform rulebook that authorizes Brussels to demand redesigns and impose fines of up to 6% of global annual revenue.

Keep reading

EU Targets VPNs as Age Checks Expand

Australia’s under-16 social media restrictions have become a practical reference point for regulators who are moving beyond theory and into enforcement.

As the system settles into routine use, its side effects are becoming clearer. One of the most visible has been the renewed political interest in curbing tools that enable private communication, particularly Virtual Private Networks. That interest carries consequences well beyond “age assurance.”

A January 2026 briefing we obtained from the European Parliamentary Research Service traces a sharp rise in VPN use following the introduction of mandatory age checks.

The report notes “a significant surge in the number of virtual private networks (VPNs) used to bypass online age verification methods in countries where these have been put in place by law,” placing that trend within a broader policy environment where “protection of children online is high on the political agenda.”

Australia’s experience fits this trajectory. As age gates tighten, individuals reach for tools that reduce exposure to monitoring and profiling. VPNs are the first port of call in that response because they are widely available, easy to use, and designed to limit third-party visibility into online activity.

The EPRS briefing offers a clear description of what these tools do. “A virtual private network (VPN) is a digital technology designed to establish a secure and encrypted connection between a user’s device and the internet.”

It explains that VPNs hide IP addresses and route traffic through remote servers in order to “protect online communications from interception and surveillance.” These are civil liberties functions, not fringe behaviors, and they have long been treated as legitimate safeguards in democratic societies.

Keep reading

Nine Bureaucracies Walk Into Your Browser and Ask for ID

By the time you’re reading this, there’s a decent chance that somewhere, quietly and with a great deal of bureaucratic back-patting, someone is trying to figure out exactly how old you are. And not because they’re planning a surprise party.

Not because you asked them to. But because the nine horsemen of the regulatory apocalypse have decided that the future of a “safe” internet depends on everyone flashing their ID like they’re trying to get into an especially dull nightclub.

This is the nightmare of “age assurance,” a term so bloodlessly corporate you can practically hear it sighing into its own PowerPoint.

This is a sprawling, gelatinous lump of biometric estimation, document scans, and AI-ified guesswork, stitched together into one big global initiative under the cheery-sounding Global Online Safety Regulators Network, or GOSRN. Catchy.

Formed in 2022, presumably after someone at Ofcom had an especially boring lunch break, GOSRN now boasts nine national regulators, including the UK, France, Australia, and that well-known digital superpower, Fiji, who have come together to harmonize policies on how to tell whether someone is too young to look at TikTok for adults.

The group is currently chaired by Ireland’s Coimisiún na Meán.

This month, this merry band of regulators released a “Position Statement on Age Assurance and Online Safety Regulation.”

We obtained a copy of the document for you here.

Inside this gem of a document is a plan to push shared age-verification principles across borders, including support for biometric analysis, official ID checks, and the general dismantling of anonymity for the greater good of child protection.

Keep reading

Government-Controlled Digital ID is Not the Optional Convenience It Is Being Sold As

The UK government has pledged to introduce a digital ID system for all UK citizens and legal residents by the end of the current Parliament (so no later than 2029). The integration of digital ID into government services, though already under way, has hitherto been largely voluntary. However, it is becoming steadily less optional, as the government has said it will now be required as a precondition for work in the UK, and a version of it (GOV.UK One Login) is already being imposed unilaterally upon company directors throughout the UK.

Chief Secretary to the Prime Minister Darren Jones has suggested in a recent interview (19/11) that digital ID is completely optional and will simply make government services more accessible and convenient. But this is a rather disingenuous sales pitch. On the one hand, Starmer himself insists that digital ID will be required as a precondition to work legally in the UK; on the other hand, like any new technology, there will be a transition period, but voluntariness is unlikely to last forever. 

Keep reading

Congress Revives Kids Off Social Media Act, a “Child Safety” Bill Poised to Expand Online Digital ID Checks

Congress is once again positioning itself as the protector of children online, reviving the Kids Off Social Media Act (KOSMA) in a new round of hearings on technology and youth.

We obtained a copy of the bill for you here.

Introduced by Senators Ted Cruz and Brian Schatz, the bill surfaced again during a Senate Commerce Committee session examining the effects of screen time and social media on mental health.

Cruz warned that a “phone-based childhood” has left many kids “lost in the virtual world,” pointing to studies linking heavy screen use to anxiety, depression, and social isolation.

KOSMA’s key provisions would ban social media accounts for anyone under 13 and restrict recommendation algorithms for teens aged 13 to 17.

Pushers of the plan say it would “empower parents” and “hold Big Tech accountable,” but in reality, it shifts control away from families and toward corporate compliance systems.

The bill’s structure leaves companies legally responsible for determining users’ ages, even though it does not directly require age verification.

The legal wording is crucial. KOSMA compels platforms to delete accounts if they have “actual knowledge” or what can be “fairly implied” as knowledge that a user is under 13.

That open-ended standard puts enormous pressure on companies to avoid errors.

The most predictable outcome is a move toward mandatory age verification systems, where users must confirm their age or identity to access social platforms. In effect, KOSMA would link access to everyday online life to a form of digital ID.

That system would not only affect children. It would reach everyone. To prove compliance, companies could require users to submit documents such as driver’s licenses, facial scans, or other biometric data.

The infrastructure needed to verify ages at scale looks almost identical to the infrastructure needed for national digital identity systems. Once built, those systems rarely stay limited to a single use. A measure framed as protecting kids could easily become the foundation for a broader identity-based internet.

Keep reading

TSA Proposes MyTSA PreCheck Digital ID, Integrating Biometrics and Federal Databases

The Transportation Security Administration is reshaping how it verifies the identities of US air travelers, proposing a major update that merges biometric data, mobile credentials, and government authentication platforms into one expanded framework.

Published in the Federal Register, the notice outlines a new form of digital identification, the MyTSA PreCheck ID, which would extend the agency’s existing PreCheck program into a mobile environment requiring more detailed data from participants.

Under the plan, travelers who want to activate the new digital ID on their phones would have to provide additional biographic and biometric details such as fingerprints and facial imagery, along with the information already collected for PreCheck enrollment.

The proposal appears alongside TSA’s recently finalized ConfirmID program, a separate fee-based service designed for passengers who arrive at checkpoints without a REAL ID or another approved credential.

Keep reading

Discord Expands Age Verification ID System to More Regions

Discord is pressing forward with government ID checks for users in new regions, even after a major customer-support breach in October 2025 exposed sensitive identity documents belonging to tens of thousands of people.

The expansion of its age-verification system reflects growing pressure under the United Kingdom’s Online Safety Act, a law that effectively compels platforms to collect and process personal identification data in order to comply with its censorship and content-control mandates.

The October 2025 incident highlighted exactly why such measures alarm privacy advocates.

Around 70,000 Discord users had images of government-issued IDs leaked after attackers gained access to a third-party customer service system tied to the company.

The hackers claim to have extracted as much as 1.6 terabytes of information, including 8.4 million support tickets and over 100 gigabytes of transcripts.

Discord disputed the scale but admits the breach stemmed from a compromised contractor account within its outsourced Zendesk environment, not its own internal systems.

Despite the exposure, Discord continues to expand mandatory age-verification. The company’s new “privacy-forward age assurance” program is now required for all UK and Australian users beginning December 9, 2025.

Users must verify that they are over 18 to unblur “sensitive content,” disable message-request filters, or enter age-restricted channels.

Verification occurs through the third-party vendors k-ID and, in some UK cases, Persona, which process either a government ID scan or a facial-analysis selfie to confirm age.

Keep reading

Florida’s “App Store Accountability Act” Would Deputize Big Tech to Verify User IDs for App Access

In Florida, Senator Alexis Calatayud has introduced a proposal that could quietly reshape how millions of Americans experience the digital world.

The App Store Accountability Act (SB 1722), presented as a safeguard for children, would require every app marketplace to identify users by age category, verify that data through “commercially available methods,” and secure recurring parental consent whenever an app’s policies change.

The legislation is ambitious. If enacted, it would take effect in July 2027, with enforcement beginning the following year.

Each violation could carry penalties of up to $7,500, along with injunctions and attorney fees.

On its surface, this is a regulatory measure aimed at strengthening parental oversight and protecting minors from online harms. Yet it hits up against a larger philosophical and rights struggle.

For much of modern political thought, the relationship between authority and liberty has revolved around who decides what constitutes protection. Florida’s proposal situates that question in the hands of private corporations. The bill effectively deputizes Big Tech app store operators, such as Apple and Google, as arbiters of digital identity, compelling them to verify user ages and manage parental permissions across every platform.

Millions of Floridians could be required to submit identifying details or official documents simply to access or update apps. This process, while justified as a measure of security, reintroduces the age-old tension between the protective role of the state and the autonomy of the citizen.

By making identity verification the gateway to digital access, the law risks creating an infrastructure in which surveillance becomes a condition of participation. It is a move from voluntary oversight to systemic authentication, merging the roles of government and corporation in a single mechanism of control.

The proposal may collide with long-established constitutional principles. One of the objections lies in the concept of prior restraint. By conditioning minors’ ability to download or continue using apps on verified Big Tech platforms, the bill requires permission before access, effectively placing all expressive content behind a regulatory gate.

Apps today are not mere entertainment; they are conduits of news, art, religion, and political discourse. Restricting that access risks transforming a parental safeguard into a systemic filter for speech.

The burden falls most heavily on minors, whose First Amendment protections are often ignored in public debate.

Keep reading

The Great Grok Bikini Scandal is just Digital ID via the Backdoor.

wo days ago, the British government announced a U-turn on their proposed digital identity, and that the much-anticipated “BritCard” would no longer be mandatory to work in the UK.

This was welcomed as a victory by both fake anti-establishment types whose job is to Pied Piper genuine opposition, and some real resistance who should know better.

The reality is that reports of the death of digital identity have been greatly exaggerated. All they said was that it would no longer be mandatory.

Having a bank account, a cellphone, or an internet connection is not mandatory, but try functioning in this world without them.

As we said on X, anybody who understands governments or human nature knew any digital ID was likely never going to be gun-to-your-head, risking-prison-time mandatory.

All it has to be is a little bit faster and/or a little bit cheaper.

Saving you half an hour when submitting your tax return, faster progress through customs, lower “processing fees” for passport or driver’s license applications.

An hour of extra time and 50 pounds saved per year will do more coercion than barbed wire and billy clubs ever could.

Running alongside this is the manufactured drama around Grok’s generation of images of bikini-clad public figures, something which it suited the press and punditry class to work up into “sexual assault” and “pornography” whilst imploring us all to “think of the children!”

Inside a week, X has changed its policy, and Sir Keir Starmer’s government has promised a swift resolution of the issue using legislation that was (conveniently) passed last year but has yet to be enforced (more on that in the next few days).

This issue became a “problem”, had an hysterical “reaction” and was supplied a ready-made “solution” all inside two weeks. A swifter procession of the Hegelian dialectic would be hard to find.

So, we have the reported demise of mandatory digital identity occurring alongside the rise of the “threat” of AI “deepfakes”.

Nobody in the mainstream press has actually linked these stories together, but the connection is as obvious as the next step is inevitable.

This next step is the UK introducing its own version of the Australian “social media ban” for under-16s. In effect, age-gating all online interaction on major platforms and ending online anonymity.

Keep reading

UK drops plans for mandatory digital ID for workers in latest U-turn, media reports

Britain is set to drop plans to make it mandatory for workers to hold a digital identity document, The Times newspaper, the BBC and other media reported on Tuesday, potentially marking another policy U-turn for the Labour government.

Prime Minister Keir Starmer announced in September last year that his government would require every employee to hold a digital ID in an attempt to tackle illegal migration and reduce the threat from the populist Reform UK party.

The government said the digital ID would be held on people’s mobile phones and become a mandatory part of checks employers must make when hiring staff.

The plan drew criticism from political opponents, with some arguing it would not deter illegal migration and others warning it could infringe on civil liberties.

The Times said the government abandoned the plan amid concerns it could undermine public trust in the scheme, noting that when introduced in 2029, digital IDs would be optional rather than mandatory.

Other forms of documentation, such as an electronic visa or passport, would still be valid, The Times said.

“We are committed to mandatory digital right to work checks,” a government spokesperson said. “We have always been clear that details on the digital ID scheme will be set out following a full public consultation which will launch shortly.”

The spokesperson said current checks rely on a “hodgepodge” of paper-based systems, with no record of whether they were ever carried out, leaving the process open to fraud and abuse.

If plans for a mandatory digital ID are dropped, it would mark another policy climbdown for Starmer.

In December, the government scaled back a plan to raise more tax from farmers, months after it backed down on cuts to welfare spending and scaled back a proposal to reduce subsidies on energy bills for the elderly.

Keep reading