Digital ID and Age Verification in the UK: Will Adults Have to Prove Their Identity to Use Social Media?

Disclaimer: This article is intended for general information, educational purposes and public awareness. It does not constitute legal advice. Legislation, government proposals and regulatory guidance may change. Readers should consult official UK government publications, Ofcom, the Information Commissioner’s Office (ICO) or a suitably qualified legal professional for advice relating to their circumstances. The Domain Name: www.aidigitaltrust.com is for sale!

Is Digital Identity Becoming a Requirement for Everyday Life?

Understanding the Online Safety Act, New Social Media Restrictions, Digital Identity, Consumer Privacy, Disability Rights and the Future of Online Access.

The United Kingdom is entering a new chapter in online regulation, with significant changes proposed to how people access social media platforms and other digital services.

On 29 October 2026, Ofcom published a new assessment examining how social media companies could establish whether users are aged 16 or over.

The announcement follows the UK Government’s decision to introduce restrictions preventing children under 16 from accessing certain social media platforms, with implementation expected in spring 2027.

Although the proposals are primarily intended to protect children, they raise an important question for millions of adults:

Will people over the age of 18 have to prove their identity simply to access social media, communicate with friends, promote their businesses or participate in everyday digital activities?

The answer is that many adults may be asked to verify their age, although this does not necessarily mean providing their full identity or obtaining a government-issued digital ID.

For disabled people, older consumers and those without suitable identification or access to modern technology, these developments also raise important questions about accessibility, discrimination, privacy and digital exclusion.

What Has Ofcom Announced on 29 October 2026?

Ofcom, the UK’s communications and online safety regulator, has identified four methods currently capable of providing highly effective age assurance for determining whether someone is aged 16 or over.

These are:

1. Photographic identification: Checking an official identity document, such as a passport or driving licence, against a live photograph.
2. Digital identity services: Using a digital identity provider to confirm a person’s age or age range.
3. Banking-based checks: Using appropriate banking information to establish whether someone meets an age threshold.
4. Facial age estimation: Using technology to estimate a person’s age from an image of their face.

These methods are intended to help platforms comply with forthcoming age restrictions.

Importantly, Ofcom has not announced that every adult must obtain a digital identity card.

The Government is expected to provide further details of the proposed social media restrictions before the end of 2026.

Will Adults Over 18 Have to Verify Their Age?

Potentially, yes.

Under the Government’s proposals, social media platforms will need reliable ways to distinguish between users who are permitted to access their services and those who fall below the minimum age.

Consequently, adults may be required to demonstrate that they meet the relevant age threshold.

However, the Government has explained that some adults may not need additional checks where platforms already possess sufficiently reliable information about their age.

Examples could include accounts that have existed for more than 16 years, accounts linked to verified payment information, or users who have previously completed an acceptable age check.

The important distinction is that age verification does not automatically require full identity verification.

For example, a service may only need confirmation that an individual is over 18, rather than their name, address, date of birth and other personal details.

Nevertheless, consumers should understand what information is collected, how it is processed and whether third-party verification providers are involved.

What Is the Difference Between Digital ID and Age Verification?

Although the terms are frequently used interchangeably, they serve different purposes.

Digital identity is a method of establishing who someone is electronically. Depending on the system, it may include their name, date of birth, photograph or other verified credentials.

Age verification establishes whether someone meets a particular age requirement.

Facial age estimation uses technology to estimate someone’s age from their facial appearance, rather than necessarily identifying them by name.

Age assurance is the broader term covering methods used to estimate or verify a person’s age.

For instance, an online platform may only need to know whether a user is over 16 or over 18.

It does not necessarily need to know their identity.

This distinction is important because collecting more personal information than necessary can create additional privacy and security risks.

Is the UK Government Introducing Mandatory Digital ID?

The Government has been consulting on a national digital identity system intended to simplify access to public and private services.

Its published proposals describe a system designed to be useful, inclusive and secure.

However, the Government has stated that individuals would not be legally required to possess or present its proposed digital ID.

It has also indicated that national digital ID would not be the only permitted way to establish age online.

This means the proposed national digital identity system should not be confused with the separate age-assurance obligations imposed on certain online platforms.

Nevertheless, consumers may reasonably question whether increasing reliance on electronic identification could make some services difficult to access without digital credentials.

There is an important difference between a system being voluntary in law and a service becoming practically difficult to use without it.

The Online Safety Act 2023: What Does the Law Require?

The Online Safety Act 2023 establishes duties for certain online services to protect users, particularly children, from specified illegal and harmful content.

The legislation gives Ofcom regulatory responsibilities relating to online safety.

Certain services must implement highly effective age assurance to prevent children from accessing pornography and specified categories of content harmful to them.

These requirements are not identical to the Government’s proposed under-16 social media restrictions.

The latter are being developed through further regulations, with implementation expected in 2027.

It is therefore important to distinguish between:

• Existing legal duties under the Online Safety Act 2023.
• Ofcom’s current regulatory guidance.
• Government proposals that have not yet been fully implemented.

There is no general legal requirement for every UK adult to complete identity verification before accessing all lawful internet content.

However, access to particular regulated services or material may depend on completing an appropriate age check.

Why Is the Government Introducing Stronger Social Media Restrictions?

The Government argues that stronger restrictions are necessary to protect children from risks associated with social media.

These include exposure to harmful content, online exploitation, unwanted contact, problematic platform features and potential effects on children’s wellbeing.

According to the Government’s 2026 consultation findings, approximately 90% of responding parents supported a minimum social media age of at least 16.

However, views among young people were more mixed, particularly concerning blanket restrictions.

The Government has also proposed additional safeguards for 16- and 17-year-olds, including restrictions on certain platform features.

Supporters argue that stronger age assurance could help prevent children from accessing unsuitable services.

Others raise concerns about privacy, effectiveness, children’s access to information and the possibility of excluding legitimate adult users.

These competing considerations make proportionality and accessibility especially important.

Could Facial Age Estimation Discriminate Against Disabled People?

Facial age estimation is one of the technologies being considered for online age assurance.

However, automated systems can produce inaccurate results.

For some disabled people, facial differences, involuntary movements, difficulties positioning themselves in front of a camera or an inability to complete required movements may make certain verification processes challenging.

Other people may struggle to use a camera because of visual impairments, limited dexterity, neurological conditions or inaccessible software.

An individual may also have a legitimate privacy objection to submitting a facial image.

This raises questions about how verification systems should accommodate people who cannot complete a particular method.

Under the Equality Act 2010, service providers may have duties to make reasonable adjustments for disabled people.

The appropriate adjustments depend on the circumstances, including the nature of the service and the barriers encountered.

An accessible verification process should therefore consider alternatives rather than assuming every person can complete the same procedure.

Digital Exclusion: What Happens If Someone Does Not Have a Smartphone?

Not every adult owns a smartphone, possesses photographic identification or uses digital banking.

Some people depend on older computers, shared devices or assistive technology.

Others may experience financial hardship, limited internet connectivity or difficulties navigating complex verification systems.

Digital exclusion can affect:

• Disabled people who require accessible technology.
• Older people unfamiliar with newer digital services.
• Individuals without passports or driving licences.
• People unable to access conventional banking services.
• Those who cannot afford modern smartphones.
• People with cognitive or neurological conditions affecting memory, concentration or information processing.
• Individuals who cannot easily complete facial or photographic verification.

For some disabled people, social media is more than entertainment.

It may provide access to support groups, professional networking, educational resources, disability advocacy and opportunities to work from home.

If verification systems prevent legitimate users from accessing these services, the consequences may extend beyond inconvenience.

They could affect social participation, employment opportunities and access to information.

The Equality Act 2010 and Reasonable Adjustments

The Equality Act 2010 provides important protections against disability discrimination in Great Britain.

Section 20 establishes the duty to make reasonable adjustments, while section 29 addresses discrimination in the provision of services.

For example, where a verification process places a disabled person at a substantial disadvantage, a service provider may need to consider reasonable measures to remove or reduce that disadvantage.

Possible measures could include accessible instructions, compatibility with assistive technology or alternative verification methods.

However, reasonable adjustments do not automatically entitle a person to bypass a lawful age restriction or security requirement.

The question is whether the provider has taken appropriate steps to make the service accessible while meeting its legal obligations.

This is an important consideration for technology companies developing automated age-assurance systems.

What About Privacy and the Right to a Private Life?

Article 8 of the European Convention on Human Rights protects the right to respect for private and family life, home and correspondence.

In the UK, Convention rights are given domestic effect through the Human Rights Act 1998.

Article 8 is a qualified right, meaning interference may be justified in specified circumstances where it is lawful, necessary and proportionate.

Protecting children is an important legitimate objective.

Nevertheless, questions remain about how age verification can be implemented without collecting excessive personal information.

The Human Rights Act primarily regulates public authorities, although Convention rights can also influence the interpretation and application of other laws.

Private technology companies are additionally subject to relevant data protection obligations.

UK GDPR and the Data Protection Act 2018

Age-verification systems may involve processing personal data, including photographs, identity documents, account information or banking-related details.

The UK General Data Protection Regulation and Data Protection Act 2018 provide a legal framework governing the processing of personal information.

Important principles include:

• Lawfulness, fairness and transparency: Organisations must have a lawful basis for processing personal information and explain how that information is used.
• Purpose limitation: Information should be collected for specified, explicit and legitimate purposes.
• Data minimisation: Organisations should collect only the personal information necessary for the relevant purpose.
• Storage limitation: Personal information should not be retained for longer than necessary.
• Integrity and confidentiality: Appropriate safeguards must protect information against unauthorised access, loss or misuse.

For consumers, this raises practical questions.

• Does the platform store a copy of their passport?
• Does a third-party provider process their facial image?
• How long is the information retained?
• Can it be used for advertising or profiling?
• What happens if a verification provider experiences a data breach?

These are legitimate questions that organisations should address through transparent privacy information.

Could Digital ID Create New Cybersecurity Risks?

Any system processing personal information must consider cybersecurity.

Identity documents, facial images and other verification records can be attractive targets for criminals.

Potential risks include identity theft, phishing, fraudulent verification websites, account takeover and unauthorised disclosure of personal data.

However, not every age-assurance system requires organisations to retain identity documents or create a central database.

Privacy-preserving approaches may allow a provider to confirm that a person meets an age threshold without disclosing their full identity to the website being accessed.

The security implications therefore depend on the technology, its design and the organisations involved.

Consumers should remain particularly cautious about unsolicited messages claiming that immediate identity verification is required to prevent account suspension.

Before providing personal information, users should check official platform announcements and access verification processes directly through legitimate websites or applications.

Will Digital Age Verification Affect Online Businesses?

The changes may also have implications for entrepreneurs, freelancers, content creators and small businesses.

Social media platforms are widely used for advertising, professional networking, customer communication and publishing.

For disabled entrepreneurs, these platforms may provide opportunities to operate businesses remotely without the accessibility barriers associated with traditional workplaces.

If users encounter problems completing verification, they may temporarily lose access to important accounts.

Businesses should therefore consider maintaining alternative communication channels, secure account recovery arrangements and independent websites.

A business that depends entirely on one social media platform may be particularly vulnerable to account restrictions or verification failures.

The wider question is how online safety requirements can be implemented without unnecessarily restricting lawful business activity.

Are Vaping Laws Connected to Digital Identity?

Changes to tobacco and vaping regulation have also contributed to wider public discussion about age checks.

Age restrictions on the sale of regulated products are not new.

Retailers may request proof of age before completing a sale, and digital age-verification technologies may offer additional ways to establish eligibility.

However, retail age checks and social media age assurance operate within different legal and regulatory frameworks.

A requirement to prove age when purchasing an age-restricted product does not automatically mean consumers must register for a national digital identity system.

The distinction matters because several different policy developments are sometimes grouped together under the broad term ‘digital ID’.

Consumers should examine the specific legal requirement rather than assume that all age-verification systems operate in the same way.

What Can Adults Do If an Age-Verification System Rejects Them?

An adult who is incorrectly identified as underage may experience difficulties accessing a lawful online service.

If this happens, consumers should consider the following steps:

1. Check whether the platform provides another accepted verification method.
2. Review the platform’s official age-verification and appeals procedures.
3. Request an explanation of the decision where appropriate.
4. Explain any disability-related accessibility difficulties and request reasonable adjustments.
5. Avoid uploading identity documents through unsolicited links or unofficial websites.
6. Review the provider’s privacy notice to understand how personal information is processed.
7. Consider exercising relevant data protection rights, including requesting access to personal information or rectification of inaccurate data.
8. If necessary, raise concerns with the Information Commissioner’s Office or seek independent legal advice.

Where a disability-related barrier is involved, consumers should keep a written record of the difficulties encountered and any adjustments requested.

Screenshots, correspondence and dates may be useful if a complaint becomes necessary.

Questions the Government and Technology Companies Should Address

As the UK moves towards stronger online age assurance, several questions deserve continued public scrutiny.

• Will consumers always have a meaningful choice of verification methods?
• Can age be confirmed without revealing someone’s full identity?
• Will verification systems be independently assessed for accuracy and accessibility?
• What safeguards will prevent unnecessary retention of sensitive information?
• How will adults challenge incorrect age assessments?
• What happens when someone cannot complete facial verification because of a disability?
• Will platforms provide reasonable adjustments and accessible appeals procedures?
• How will regulators assess whether the systems are proportionate to the risks they are intended to address?

These questions do not undermine the importance of protecting children.

Instead, they highlight the need to ensure that online safety measures respect the rights of all users.

Cymru Law Partners: Understanding the Relationship Between Technology and Human Rights

As digital technology becomes increasingly integrated into everyday life, understanding the relationship between law, privacy, equality and consumer protection is becoming more important.

Cymru Law Partners is a developing legal research and educational initiative founded by Renata Maziak Barnes, a law student, writer and editor of Disabled Entrepreneur UK.

Through Cymru Law, the mission is to develop legal knowledge, promote public awareness and explore opportunities for legal research and collaboration, particularly in areas affecting disabled and vulnerable individuals.

The project is not currently a regulated law firm and does not provide reserved legal services.

Articles examining developments such as digital identity and age verification form part of a wider commitment to accessible legal education and understanding how legislation affects people in everyday situations.

Conclusion: Protecting Children Without Excluding Adults

The debate surrounding digital identity and age verification is about more than proving someone’s date of birth.

It concerns how society balances child protection, privacy, accessibility, personal autonomy and participation in the digital world.

Ofcom’s announcement on 29 October 2026 confirms that several technologies may be used to establish whether someone is aged 16 or over.

It also confirms that many adults may be asked to verify their age as the Government’s proposed social media restrictions are introduced.

However, this does not mean every adult will be legally required to obtain a national digital identity card.

The Government’s detailed rules are still being developed, and the practical arrangements may evolve before implementation in 2027.

The central challenge is ensuring that protecting children online does not unnecessarily exclude adults, particularly disabled people and those who already experience barriers to accessing digital services.

A safer internet should also be an accessible internet.

Official Resources and Further Reading

• Ofcom: How Age Checks at 16 Can Work to Underpin the UK’s Social Media Ban
• Ofcom: Rapid Assessment of Highly Effective Age Assurance at 16
• Ofcom: Age Assurance Duties Under the Online Safety Act
• UK Government: New Rules to Protect Children Online
• UK Government: Digital Identity Consultation
• Information Commissioner’s Office: Age Assurance Guidance
• Online Safety Act 2023
• Equality Act 2010
• Data Protection Act 2018
• Human Rights Act 1998