X, the social media platform formerly known as Twitter, has rolled out new age verification measures aimed at aligning with online safety regulations in Ireland, the United Kingdom, and the European Union.
The move comes in response to growing regulatory scrutiny, particularly under Ireland’s recently enacted Online Safety Code, which requires video-sharing platforms that host adult content to implement effective age assurance systems. The Irish media regulator, Coimisiún na Meán, confirmed that it had received an explanation from X on Friday following an earlier request for details on its compliance efforts.
“We will assess whether these measures, and those taken by other platforms, are sufficient to comply with the Online Safety Code as part of our ongoing supervision,” the regulator said in a statement.
According to a post in X’s help centre, the company’s approach to age verification will include multiple steps. Initially, X will rely on existing data points such as past age verification records, legacy verified accounts, and the dates when accounts were created. If such information is unavailable, X will assess age using indirect indicators like email addresses and user social connections.
The platform also plans to introduce two direct user verification options in the coming weeks. One involves uploading a live selfie to be analyzed using AI-driven facial recognition to estimate age. The second allows users to submit a government-issued ID for age verification. X stated that these options are designed to be “secure and privacy-respecting.”
For users under 18, or those whose age cannot be verified, access to sensitive media will be restricted by default. Users who believe they have been misclassified will be able to appeal the decision by contacting X.
X also committed to updating its data handling policies. It said third-party service providers involved in the verification process would be subject to stringent data protection requirements.
Ireland’s Data Protection Commission (DPC) responded cautiously to the development, welcoming the focus on child safety but urging balance. “Age assurance should be implemented in a risk-based and proportionate manner,” a DPC spokesperson said. “The methods used must be the least intrusive possible, and any data processed should be necessary and proportionate.”
As X works to comply with a growing web of online safety regulations across Europe, the effectiveness and privacy implications of its new age verification systems are likely to remain under close scrutiny by both regulators and digital rights advocates.
