Australia Identity Verification Mandate: Age and Identity Checks for Online Access

Australia moved forward with mandatory age verification for social media platforms and identity verification requirements for various online services, raising concerns about the creation of digital identity infrastructure that could enable surveillance. The government passed legislation banning children under 16 from social media, requiring platforms to implement age verification systems. Privacy experts warned that effective age verification necessarily involves identity verification, creating records of every adult who accesses social media platforms. The proposed Digital ID system, while framed as voluntary, became increasingly necessary for interacting with government and commercial services. Critics argued that mandatory identity verification for online access creates a framework where anonymous internet use becomes impossible, chilling free speech and creating databases linking real identities to online activities. The Australian Human Rights Commission raised concerns about the surveillance potential and disproportionate impact on vulnerable groups who may have difficulty with digital identity systems.

The ramifications of this incident extend beyond the immediate data exposure. Privacy regulators in multiple jurisdictions have opened investigations, and affected individuals are organizing collective action to demand accountability and meaningful remediation. The case highlights systemic weaknesses in how organizations handle personal data and the gap between corporate privacy promises and operational reality.

For impacted individuals, immediate action is critical. Filing a data subject access request forces the company to disclose exactly what data they hold about you, providing the foundation for deletion requests, regulatory complaints, and potential legal action. Below, we outline the specific data types at risk and the concrete steps you can take to protect yourself.