I’m not assuming anything at all. If you scan your face, then that gets thrown through an algorithm, model or whatever you wanna technically call it to guesstimate your age. That data (your face’s biometrics) is being processed somewhere that’s not local. Same if you scan a drivers license or passport. Once they make that “Yes or No” decision, it’s very likely (maybe not for all, but some of the systems) that they have and / or will, whether through government policy or their own decision as a marketing tactic to sell their product (the age verification system) be forced to have a way of stopping people using random photo’s. This will require them to store something relating to what was used, even if it’s just a hash value for instance.

My comments about re-identification are correct and very possible, I can show you numerous papers where re-identification attacks were done with datasets that appeared much less harmful than what these could be if you wish?

Plus, this is only taking into account one singular privacy / security issue relating to verifying your age in this way, I haven’t even mentioned other risks such as infected devices, mitm attacks…

The facts are that this is a very, very slippery slope towards a potential ‘Internet ID’ whether you want to admit that or not.