Age assurance without ID: are your age checks collecting too much?

TL;DR: Age verification can be done without uploading or storing identity documents, according to OneID, using methods such as open banking, on-device facial age estimation, mobile network checks and reusable digital credentials. The governance question is no longer whether age can be confirmed, but whether the check collects only the threshold signal and nothing else.

Editorial analysis by NHI Mgmt Group, based on content published by OneID: “Can you prove your age without handing over your ID?”.

By the numbers:

• The ICO wrote an open letter to technology firms in March 2026 to strengthen age checks and protect children’s data at the same time.

Key questions

Q: How should identity teams implement privacy-preserving age verification?

A: Start by keeping biometric inference on the device and limiting server-side collection to the smallest possible integrity signal set.

Q: Why does repeated ID collection increase the risk of age assurance programmes?

A: Because each copy of a passport, licence or selfie creates another retention point and another exposure path.

Q: When is a reusable age credential better than uploading a document every time?

A: When the relying party needs a simple eligibility confirmation rather than the underlying identity record.

Practitioner guidance

• Define the minimum age assertion Document whether each use case needs only an over-threshold result, a reusable credential, or a full identity check, and reject any design that stores more evidence than the decision requires.
• Prefer attested thresholds over document copies Use bank attestations, mobile network checks or reusable credentials where the service only needs to know that the user clears the threshold, not who they are in full.
• Constrain retention at the point of verification Set retention rules so that images, document scans and derived data are discarded when the age proof has been completed unless a specific regulatory duty requires otherwise.

Bottom line: Age assurance can be effective without turning every check into a document collection exercise.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →