Legislators in Europe, North America and Australia are embedding mandatory digital identity checks into upcoming online safety laws nationally. The rules require users to prove they are over a certain age by submitting a government‑issued ID or a live face scan before they can post, comment or even view content. Proponents frame it as child protection; critics say it creates a universal biometric registry.

The verification process does more than answer a yes‑or‑no question. Vendors store the document number, birthdate and a 3‑D facial template, data that can be reused for law‑enforcement checks or potentially sold to third‑party advertisers. Breaches of similar databases have exposed passwords and SSNs; a facial template cannot be reset, turning a simple login into a permanent identifier.

Activists argue the only way to stop the system is collective massively refusal: boycotting platforms that demand scans, deleting accounts and demanding data deletion. Without near‑universal compliance the databases never reach critical mass, rendering the legal requirement ineffective. As long as the market depends on user‑generated content, platforms will continue to effectively pressure users to surrender their faces today.