EFF and 18 Organizations Urge UK Policymakers to Prioritize Addressing the Roots of Online Harm

Key Takeaways

• Age‑gating could force identity checks for every internet user
• Mandatory verification risks data breaches and expanded surveillance
• Restrictions may fragment the web into jurisdictional silos
• Bill could empower app stores as dominant gatekeepers
• Coalition urges accountability for platform profit‑driven design

Pulse Analysis

The UK’s Children’s Wellbeing and Schools Bill has sparked a rare coalition of digital‑rights organisations, including the Electronic Frontier Foundation, Mozilla and the Tor Project. Their joint letter warns that the bill’s proposed age‑gating and universal identity‑verification mandates would compel every visitor – from social‑media users to VPN providers – to prove their age before accessing basic web content. Such systems are notoriously inaccurate and rely on invasive data collection, exposing users to heightened risk of breaches and state‑level surveillance. By treating children’s safety as a technical problem rather than a design issue, the legislation threatens fundamental privacy norms.

Beyond privacy, the proposed mandates could fracture the open internet into a patchwork of age‑restricted zones. Enforcing verification at scale would give app stores and platform ecosystems de‑facto control over who can reach which services, consolidating power among a few gatekeepers. Such fragmentation undermines interoperability, limits access to information, and erodes the global public‑goods character that has driven innovation for decades. Moreover, the surveillance infrastructure required to police age compliance could be repurposed for broader monitoring, raising concerns for civil liberties groups across Europe and beyond.

The coalition’s alternative vision focuses on holding platforms accountable for the business models that amplify harmful content. By mandating transparent data‑use policies, limiting algorithmic amplification of extremist or abusive material, and requiring robust age‑appropriate design by default, regulators can address the root drivers of online risk without resorting to blanket bans. Such rights‑by‑design approaches preserve the internet’s educational and expressive value for young people while safeguarding privacy. If UK policymakers adopt these recommendations, the legislation could become a template for balanced, evidence‑based regulation that other democracies might emulate.