Meanwhile, privacy campaigners argue the legislation has opened a space for unscrupulous companies purporting to provide age assurance services to gather and misuse reams of personal data.

“Creating databases to store data used to determine people’s age will act as a honeypot for hackers and malicious actors because they’re compiling valuable information that can be sold afterwards,” said David Frautschy, a senior director at the Internet Society, an advocacy group. “This is not the way to make the internet more secure. This is not what the law was intended for.”

https://www.ft.com/content/09c88dde-687e-47c7-ba9d-7ad5048e2bc7