How social media platforms must verify users’ ages
Social media platforms operating in the UAE are now legally required to verify their users’ ages. Any age verification system must:
-
Be accurate – it must reliably confirm or estimate a user’s age with a high level of accuracy, making it difficult to bypass or trick
-
Limit data collection – platforms can only collect the bare minimum personal data needed to verify age, with no unnecessary expansion of what’s gathered
-
Follow data protection principles – the system must comply with data minimisation, purpose limitation, and processing security rules. Biometric data and official documents must not be kept any longer than is strictly necessary to complete the verification
-
Be non-discriminatory – the system must not unfairly disadvantage or technically exclude any category of user
-
Integrate with national systems – it must be capable of connecting with officially approved national age verification systems when requested
-
Be open to regulatory audit – the Telecommunications and Digital Government Regulatory Authority (TDRA) must be able to review and audit how the system works at any time
-
Be transparent to users – clear and easy-to-understand information about how the age verification works must be made available to all users
-
Be subject to additional standards – the Child Digital Safety Council may approve further standards on the recommendation of the TDRA
What age verification methods are allowed?
Platforms can use one or more of the following approved methods, provided they meet the standards above:
-
Government or official ID verification – this includes verifying through a digital government identity, scanning an official identity document, or using an official document combined with biometric matching (such as a face scan)
-
AI-based age estimation – using artificial intelligence technologies, including biometric means, to estimate a user’s age
-
Licensed third-party verification providers – using an age verification service provider that is officially approved and licensed to operate within the UAE
-
Any other method approved by the Child Digital Safety Council on the recommendation of the TDRA
Simply typing in your date of birth will no longer be accepted. Self-declaration of age, or any other method not officially approved under this resolution, will not be recognised as valid.
