Topic starter
02/08/2026 12:22 pm
TL;DR: Lower error rates and improved performance around ages 17 to 20 have allowed KJM to reduce the buffer for Yoti’s facial age estimation from 5 years to 3 years for the highest level of age assurance, according to Yoti. The change shows how identity verification controls are becoming more evidence-driven, but also how regulators will keep testing the boundary between usability, assurance, and exclusion.
Editorial analysis by NHI Mgmt Group, based on content published by Yoti: “German regulator KJM cuts buffer for Yoti’s Facial Age Estimation for 18+ content checks from 5 to 3 years”.
By the numbers:
- Yoti says its current MAE is 1.1 years for ages 13 to 17.
Key questions
Q: When does a facial age estimation buffer become too narrow for compliance?
A: A buffer becomes too narrow when threshold-adjacent error rates create an unacceptable chance of minors passing or legitimate adults being excluded.
Q: Why do age assurance systems need separate testing near the legal threshold?
A: Because the risk is concentrated around the cutoff.
Q: What breaks when facial age estimation is used without liveness checks?
A: The control becomes vulnerable to replay and impersonation attacks.
Practitioner guidance
- Define threshold policy by use case Set age-assurance thresholds according to the legal and content context, then document why the chosen buffer matches the acceptable error profile for that decision.
- Validate performance near the boundary Review false positive rate, true positive rate, and mean absolute error specifically for users nearest the age threshold, not just overall model performance.
- Pair estimation with liveness checks Require anti-spoofing liveness detection whenever facial age estimation is used to gate access to regulated or age-restricted services.
Bottom line: Germany’s change shows that facial age estimation is maturing into a regulated control with measurable error thresholds, not just a convenience feature.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
02/08/2026 1:22 pm
Facial age estimation is becoming a governance control, not just a model output. Germany’s decision shows that age assurance is now being judged on measurable error tolerance rather than on whether the technology can make a useful prediction. That shifts the centre of gravity from marketing claims to evidence, validation, and threshold policy. For identity programmes, the control question is whether the model can support the legal decision boundary the business is trying to enforce.
A question worth separating out:
Q: How should IDV teams decide between stronger assurance and lower user friction?
A: They should base the decision on the sensitivity of the service, the measured error profile, and the harm caused by both false accepts and false rejects. Higher assurance usually means more friction, but not every use case needs the same balance. The key is to document the policy, test it against real performance, and revisit it as model quality changes.
👉 Read our full editorial: Germany eases facial age estimation buffer as accuracy improves