Image: A9 STUDIO / shutterstock.com

Anyone who wants to use social media or video platforms in Austria in the future may soon be required to verify their identity. What at first sounds like something out of a science fiction movie is now the subject of very concrete discussions. The Austrian federal government is planning to introduce mandatory age and identity verification for certain online services. The goal is to better protect children and adolescents from harmful content and to curb anonymous hate comments.

But as soon as the plan became public, a heated debate erupted. Some call it a long-overdue step toward greater online security. Others warn that it sets a dangerous precedent that could permanently alter the privacy of all Internet users.

What exactly is Austria planning?

Under the government's plans, users of certain social networks and video platforms will be required to reliably verify their identity or, at the very least, their age. Among other things, the use of government-issued digital identity solutions or other recognized methods of age verification is being discussed.

This would primarily affect platforms where content can be published or consumed—such as social networks or major video portals. The goal is to make it more difficult for minors to access inappropriate content while also taking more effective action against illegal content and anonymous insults.

The government argues that the Internet has changed significantly in recent years. While social networks used to serve primarily as a means of communication, they now influence political discussions, social debates, and the daily lives of millions of people. Accordingly, new protective measures are also necessary.

Between the Protection of Minors and Data Protection

This is precisely where the real discussion begins. After all, mandatory identity verification inevitably means that significantly more personal data will have to be processed than before.

Data protection advocates point out that any additional data collection creates new risks. If such information falls into the wrong hands or is misused, the consequences can be significant. Furthermore, the question arises as to whether private platform operators are even the right entities to manage their users’ identity data.

There is another aspect to consider: Many people deliberately use the Internet under a pseudonym. This is by no means necessarily for criminal reasons. Journalists, political activists, victims of stalking, or people in sensitive professions often have no choice but to keep their identities private online. Critics therefore fear that a general requirement to identify oneself could also infringe on freedom of speech.

Europe is seeking a common solution

Austria is not alone in its deliberations. Several European countries are currently discussing how to better protect children and adolescents from problematic online content. At the same time, the European Union is also working on new guidelines for digital platforms and on standardized solutions for age verification.

However, this isn't just about social media. Video platforms, online games, and other digital services are also increasingly coming under scrutiny. The question of how to reliably verify users' ages without unnecessarily disclosing a large amount of personal data is being raised more and more frequently.

From a technical standpoint, various models are being discussed. One possibility, for example, is digital proof of age, in which platforms are simply informed that a user is old enough—without receiving the user’s full name or other personal information. Such solutions are considered more privacy-friendly, but in many places they are still in the development stage.

It sounds simple—but putting it into practice is much more complicated

At first glance, the idea seems reasonable: If you want to better protect children, you have to prevent them from easily accessing inappropriate content. But in practice, this raises numerous questions.

How can we ensure that stored data is adequately protected? Who is liable in the event of data breaches? What happens to people who do not have digital proof of identity or who do not wish to use it? And how can we prevent technical barriers from causing users to avoid legitimate services and instead turn to less-regulated platforms?

Companies, too, face major challenges. They would have to make technical adjustments to their platforms, integrate new verification procedures, and at the same time comply with data protection requirements. This could place a significant burden on smaller providers in particular.

One thing is already clear: The discussion about digital identities will continue to gain importance in the coming years. As digitalization advances, so does the desire for greater security. At the same time, this desire must not lead to the gradual erosion of fundamental rights and freedoms.

Security must not become a form of constant surveillance

Protecting children and adolescents is undoubtedly an important goal. Equally legitimate is the desire to take more effective action against illegal content and hate speech on the Internet. Nevertheless, the current debate shows just how difficult it has become to strike the right balance between security and freedom.

A functioning Internet depends on people being able to exchange information, engage in discussion, and express their opinions. At the same time, rules are needed to prevent abuse. The key challenge is to find solutions that balance these two interests without losing users’ trust.

A Look Behind the Scenes: What That Really Means

The reasoning behind the proposed ID requirement is understandable: children should be protected, and criminals should be easier to identify. But good intentions alone do not make for good legislation. Requiring proof of identity for nearly every major platform creates an infrastructure that could be used far beyond its original purpose. Today, the focus is on protecting minors—tomorrow, it might be on entirely different areas. That is precisely why lawmakers must be extremely cautious. Security is important. But a free Internet also depends on people not feeling like they have to constantly prove their identity with every click. The real challenge isn’t in collecting more and more data, but in achieving as much protection as possible with as little data as possible. All political plans should be measured against this standard.