Beyond the OSA/DSA: Age Assurance as a Data Privacy Obligation
Beyond the OSA / DSA: Age Assurance as a Data Privacy Obligation
10 min listen
Incoming social media bans and ongoing OSA and DSA actions in the UK and EU are shining a spotlight on the age assurance compliance of in-scope organisations. However, the data protection regime requires a much larger range of organisations to implement age assurance.
These obligations have been underlined in the UK in recent months as the Data (Use and Access) Act 2025 has introduced a new child-focused design duty and the ICO has intensified its work on age assurance.
Our latest article and podcast focus on age assurance as a UK GDPR compliance obligation, looking at the practical steps organisations, including retailers, events companies and sports brands, should be taking now. We explore the ICO's evolving enforcement posture, the "death of self-declaration", the data protection risks inherent in age assurance technologies and the key principles organisations should apply when selecting and implementing a proportionate solution.
Read our article and listen to the accompanying podcast for practical guidance on navigating this fast-moving area.
