Asking the FTC to approve facial age estimation for verifiable parental consent

profile picture Yoti 3 min read
Father and son using devices together

Together with the Privacy Certified program of the Entertainment Software Rating Board (ESRB) and Kids Web Services Ltd, a wholly owned Epic Games subsidiary, we are asking the Federal Trade Commission (FTC) for approval to implement facial age estimation as an authorised method for verifiable parental consent (VPC). The Children’s Online Privacy Protection Act (COPPA) requires companies to ensure they are not collecting personal data from children under the age of 13 without a parent’s consent. Currently, the COPPA Rule enumerates seven, non-exhaustive methods that enable parents to verify their consent. These include verification by government ID, credit card transaction, and a method that involves facial recognition, which is different from what we propose in our application.

We’d like the FTC to authorise facial age estimation as another VPC method to give parents and operators more choice in how parents can prove their age and grant consent. We are not seeking approval to implement this technology to check if children are old enough to purchase, download, and/or play a video game. Children are not involved in the age estimation process at all, which is designed to confirm that parents are adults, as required under COPPA.

We’d like to explain how the FTC application seeks to implement the technology in a way that is consistent with COPPA’s requirements for data minimisation, confidentiality and security.

  • Facial age estimation provides an accurate, reliable, accessible, fast, simple and privacy-preserving method to ensure that the person providing consent is an adult.
  • Facial age estimation is not facial recognition; it estimates a parent’s age without identifying them. It does so by converting the pixels of a facial image into numbers and comparing the pattern of numbers to patterns associated with known ages.
  • Facial age estimation does not create a database of faces. It doesn’t learn the user’s name, identity or anything about them. It does not scan their face against a database.
  • The technology is inclusive; it requires no collection of identity or payment card information.
  • It is accurate and does not show material bias among people of different skin tones. We have done extensive testing based on millions of facial scans and publish the accuracy levels transparently.
  • In our proposed application, facial age estimation is always presented as an option to parents alongside other approved methods of verification, providing the parent with a choice of methods.

If you have any questions about our FTC application, please get in touch.

Keep reading

Defining age verification and age assurance

Age is becoming an increasingly important focus for governments globally, with legislation being enacted across multiple states and countries. Our latest report looks at: The difference between age verification and age estimation Why self declaration is not age assurance The importance of balancing proportionality and privacy Download

1 min read
Woman buying knife online

Age assurance for online knife sales

At the end of January, the UK Government announced they will introduce stricter age checks for online knife sales. Buyers will need to submit a copy of their photo ID, such as a driving licence, as well as proof of address, such as a utility bill. The same person who bought the knife will have to show ID again on delivery, and no knife packages can be left on the doorstep. These measures are part of the upcoming Crime and Policing Bill, expected to be introduced in Parliament this Spring. While knife crime is a key focus of the

7 min read
Illustration of email based age estimation to determine if user is over 18

Verifying age with email address age estimation

As legislation increasingly serves to protect children online, businesses and platform operators require efficient and privacy-conscious methods to verify user ages. Email address verification is just one of these methods, leveraging email metadata to estimate a user’s age without collecting further personal information. This guide explores how email age estimation works, its reliability, regulatory compliance, and how it performs as a tool for businesses that wish to balance user experience and risk.   What is email address age verification? Email address age verification is a method of age assurance used by websites and online operators to determine

5 min read