Join our Newsletter — 33% off our NHI Course

NIST facial age estimation results: what do identity teams do now?

 

(@nhi-mgmt-group)
Member Moderator
Joined: 2 years ago
Posts: 19262
Topic starter  

TL;DR: NIST’s evaluation of a facial age estimation model found a Mean Absolute Error improvement from 3.102 to 2.615 on the mugshot dataset, with the model moving from 12th to 3rd place and narrowing the gap to first place to 0.2 years, according to Yoti. The result underscores how independent testing, bias analysis, and demographic performance matter as much as headline accuracy in regulated identity checks.

Editorial analysis by NHI Mgmt Group, based on content published by Yoti: “Yoti facial age estimation – newest model evaluation by NIST”.

Key questions

Q: How should teams evaluate facial age estimation models before deployment?

A: Teams should use a separate, representative test set to evaluate whether a facial age estimation model generalises beyond the data it was trained on.

Q: Why can a facial age model look accurate overall but still be unsuitable?

A: A strong average score can hide weak performance for specific age bands or image conditions.

Q: What are the signs that an age assurance method is too weak for regulatory expectations?

A: A weak method shows up when it can be bypassed with borrowed credentials, shared devices, or easily gamed signals such as a parent’s card or someone else’s phone number.

Practitioner guidance

  • Set acceptance thresholds by use case Define the maximum error, subgroup variance, and scenario tolerance allowed for each age-check workflow before model approval.
  • Test performance by demographic slice Review results across age bands, gender, and region proxies so one strong average score does not hide weaker outcomes.
  • Validate against real input conditions Include image quality, glasses, and facial-expression variation in evaluation so deployment conditions match benchmark assumptions.

Bottom line: Facial age estimation is only as defensible as the evidence behind it, not the headline score attached to it.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →



   
Quote
(@mr-nhi)
Member Moderator
Joined: 6 months ago
Posts: 19751
 

Independent evaluation is now part of the control, not a postscript to the control: facial age estimation cannot be treated as a black-box feature that is accepted on vendor claims alone. NIST-style testing turns the model into something that can be compared across datasets, thresholds, and demographic slices. For identity programmes, that changes procurement and assurance from trust-based selection to evidence-based governance.

A question worth separating out:

Q: When should organisations require independent testing for face checks?

A: Use independent testing whenever the result affects access, compliance, or customer eligibility. External evaluation is most important when the model will support a decision that needs to be defensible, because internal testing alone usually misses the gaps that matter to regulators and audit teams.

👉 Read our full editorial: NIST age estimation evaluation raises the bar for face checks



   
ReplyQuote
Share:

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.