Reddit steps into the cycle of personal data breaches with the commencement of identity verification to comply with the Online Security Act (OSA). As AI is being leveraged in tech, so are the liabilities.
Let’s be honest, we are all aware of how children are becoming addicted to digital devices. From breakfast to dinner, they remain entangled with mobile phones. In this period, they interact with inappropriate content on social media including pornography, misguided ideas about identity, suicidal attempts, gender inequality and whatnot.
There’s no doubt that children adapt what they see. The case of Sewell is a live example of how a child gets addicted to these tools; he became obsessed with the chatbot named Character.AI, and finally committed suicide to reunite with said chatbot.
The Online Safety Bill draft was introduced in May 2021, highlighting the urgent need for legal steps to protect children and tackle violence on social media, which was accepted as the Online Safety Act in 2023, following multiple revisions. It aims to conduct checks and balances in user-to-user services, search services, and inappropriate content inspection.
In the most recent update, it has rolled out new rules like age verification, asking users to verify their identity using government-issued documents. So, to comply with these rules, Reddit announced it will be relying on a third-party system for identity verification, like other social media platforms.
However, with the verification system, liabilities come too, as they are asking for an identity card issued by the government or a live picture; these records require an extra layer of safety.
Some of the third-party software often turns a blind eye to data safety, resulting in severe breaches. One such case is reported by 404 Media, in which the ID verification system for TikTok, X (formerly Twitter), and Uber exposed driver’s licenses. An Israel-based company, AU10TIX, on which they relied, had exposed administrative credentials for more than a year.
A researcher gained access to the company’s logging credentials, containing users’ names, driving licences, date of birth, and identification numbers. It’s an alarming matter that goes unnoticed by users on a regular basis.
Lawmakers are implementing new rules of child protection, but they should also consider these reports. Age verification systems are a form of surveillance, forcing websites to collect highly sensitive information like government-issued identity cards. Then, they hand it to third parties, giving access to hackers. This requirement puts every user at risk, not only the vulnerable ones.
Therefore, many companies are bringing this issue to the table, opposing the new rules imposed by the Online Safety Act. It’s a matter that requires the attention of authorities, as cyberattacks have increased worldwide. According to recent reports, cybercrime is expected to cost $10.55 trillion in 2025. With the rise of such incidents, the age verification system will be like adding fuel to the fire.
Not just the UK’s Online Safety Act (OSA), but all countries need to address the growing issue of social media’s impact on children, while also focusing on data privacy and implementing strong safety measures. They should focus on introducing a system that will verify the users without demanding their authenticated documents, or they can work towards improving the security systems to ensure the safety of personal data.
