A website asks you to look at a camera, then says you appear old enough to enter. There may be no date of birth to type, no passport to upload and no human checking the photograph. Facial age estimation uses software to infer an approximate age or age band from an image. For users it can feel quick and less intrusive than showing a document, but that convenience raises a deceptively simple question: what happens when the machine guesses wrong?
In Britain, Ofcom's guidance on age assurance recognises facial age estimation as one method capable of meeting requirements for effective age checks on relevant online services. It also lists alternatives such as digital identity services, credit-card checks and photo-identification matching. Capability is not a guarantee that every deployment is effective or lawful. Services must address accuracy, reliability, fairness and data protection. The public debate can lose these important distinctions when every new camera prompt is treated as either an infallible safeguard or an automatic privacy disaster.
What facial age estimation can and cannot know
An algorithm analyses visible features in a photograph and produces an estimate based on patterns learned from training and evaluation data. It is not reading a hidden number that nature stamped on the person’s face. Age-related facial appearance varies with many factors, including genetics, lighting, camera angle and ordinary differences between people. A teenager may look older than somebody in their twenties. A tired adult may appear older in one image than another. Even a technically sophisticated system remains an estimator.
This distinction matters at the threshold. If a service needs to distinguish a minor from an adult, getting close to a person’s exact birthday is less useful than making the relevant classification reliably. A system that performs reasonably across broad adult ages could still make consequential errors near a legal boundary. Regulators therefore care not just about average accuracy but about how a method behaves for people near the cutoff and whether the way it is implemented handles uncertainty appropriately.
The US National Institute of Standards and Technology's published evaluation examines face age estimation and verification systems under varied conditions. It examines performance differences across datasets, changes in pose and image conditions, alongside other technical factors. The existence of comparative results is itself a warning against one-size-fits-all claims: products and test environments differ. A company’s impressive headline result on one dataset does not establish how reliably its application will work for every child or adult in a bathroom, a classroom or a badly lit room.
Why a selfie sometimes feels more private
Showing a face to prove adulthood can appear less invasive than sending a copy of an identity document that includes a full name, address or date of birth. In some designs, a service may need only a yes-or-no answer about whether the person is over a threshold. That could minimise the information ultimately shared with the website. Yet privacy cannot be judged from the final answer alone. Somebody must capture the image and process it, even if only briefly, and the flow may involve a separate technology provider.
A meaningful privacy explanation should say which organisation receives the image, why the information is collected, how long it is retained, whether it is used for unrelated purposes and how a user can exercise applicable rights. An on-screen label saying private does not answer those questions. Ofcom also notes that providers must comply with data protection law as well as online safety obligations. Protecting children and protecting personal information are not opposing ambitions that require choosing only one.
There can be practical differences between estimating age and verifying identity. A service may only need to know that an account holder belongs in an age group, not who that person is. That is why asking for a full document may sometimes be an unnecessarily broad approach to a narrow eligibility question. On the other hand, an image-only system could face attempts to deceive it with borrowed pictures or other tricks. A safe design has to balance privacy, resistance to circumvention and treatment of users who are wrongly classified.
The difficult cases sit near the boundary
Imagine somebody legally old enough to access a service being repeatedly rejected because the system estimates them as younger. The immediate harm could be inconvenience, but it may also exclude people from information or services they are entitled to use. Now reverse the situation: a child is accepted as an adult because their face is estimated to be older. The protection the system was introduced to provide may fail. Neither outcome can be solved merely by proclaiming that the model is accurate on average.
This is why effective age assurance involves operational decisions beyond the model’s output. There must be thought given to confidence levels, alternative routes, review, accessibility and the experience of users whose appearance does not fit a system’s expectations. Children and families deserve usable safeguards rather than a barrier that simply looks technological. LiveAIWire has looked at the questions children raise when interacting with AI toys, where designing for the intended age group also needs more than a marketing promise.
A service may use several methods rather than insist on a single route. Ofcom’s framework allows different techniques, subject to the relevant standards and duties. The actual arrangement a user encounters can depend on the service, the law and the available provider. A camera check at one website cannot be taken as a description of how every British service performs age assurance. Claims that a single algorithm has become a universal identity system are therefore misleading.
The difference between safety and surveillance
An age check is justified by a specific purpose: deciding whether an online service should permit access or apply a different set of protections. That purpose does not automatically justify building a permanent identity database or tracking the same face across unrelated services. The smaller the amount of information required to make the decision, the stronger the case for collecting and retaining only what is necessary. A sensible design should explain how it avoids turning an entry check into a new way of monitoring people.
There is also a wider question about children becoming used to face scans as an ordinary condition of being online. The more widely a technology is deployed, the more important understandable notices, clear alternatives and accessible challenge routes become. Parents considering how AI technologies affect children's development may reasonably support safeguards while still wanting details about how their family’s images are handled. Those positions are not contradictory. It is possible to favour age-appropriate access without offering a blank cheque for data collection.
Another privacy risk comes from assumptions rather than storage. A person may be refused because the estimated age was wrong, while the service knows nothing else about them. A technically temporary decision can still have a real effect. That is a reminder that privacy protection and decision accuracy are related but separate: not retaining a photo is good practice, yet it does not make a mistaken rejection fair. Equally, perfect age accuracy would not excuse improper reuse of a user’s data.
What to look for when a site asks for your face
Read the explanation beside the check rather than the company’s general privacy slogan. Find out whether the service is estimating age or verifying identity, whether a third party is involved, whether the image is retained and what alternative is available. Where the process fails, use the site’s stated challenge route. If an adult account is blocked, repeatedly uploading different photographs may not be as productive as asking for another approved method. Requirements and remedies vary, so rely on the service’s actual policy and local rules.
It helps to think about this alongside the wider ways AI can infer personal information. A photograph is not a passport, yet it still carries information about an individual. Good regulation and competent engineering should limit what is inferred and retained to the question that genuinely needs answering. The aim of age assurance is not to make people disappear behind an algorithm. It is to establish an appropriate boundary for content and services without creating unnecessary new risks.
The best outcome would be almost uneventful: children encounter age-appropriate protections, eligible adults can proceed, personal data are handled responsibly and mistakes can be corrected without a battle. Facial age estimation could be one useful tool in that system. But a fast selfie cannot be its own proof of fairness. Accuracy, privacy and clear recourse are what turn the technology from a clever demonstration into a trustworthy public service.
About the Author
Stuart Kerr is Technology Correspondent at LiveAIWire, covering artificial intelligence, cybersecurity and the social impact of emerging technology. LiveAIWire is an independent, human-led technology publication using AI-assisted research, editorial production and original AI-assisted editorial illustrations under his direction.