Age Verification: Digital Age Verification

Digital age verification is one of the most prominent use cases for the EUDI Wallet, enabling users to prove they meet a specific age requirement without revealing their exact date of birth or other personal information. Using the cryptographic technique of selective disclosure, the wallet presents a verifiable yes-or-no answer to an age threshold question, such as "is this person at least 18 years old?" This approach represents a fundamental shift from traditional ID-based age checks, where individuals must expose their full identity document including name, photo, address, and birthdate.

The age verification process begins when a credential issuer, typically a government identity authority, issues a Person Identification Data (PID) credential to the user's EUDI Wallet. This credential contains the user's date of birth among other attributes. The credential is cryptographically signed by the issuing authority, making it tamper-proof and verifiable.

When a merchant or online service requests age verification, the EUDI Wallet does not share the full PID credential. Instead, it uses selective disclosure to derive a proof that the user meets the required age threshold. The wallet calculates whether the user's date of birth satisfies the condition (for example, born before a specific date) and presents only this boolean result, along with a cryptographic proof that this result derives from a validly signed government credential.

The verifier receives a cryptographically signed attestation confirming the age threshold is met, without ever learning the user's actual birthdate. The verifier can independently validate the cryptographic proof to ensure it was derived from a genuine government-issued credential, providing the same legal certainty as checking a physical ID card.

Traditional age verification methods have significant privacy shortcomings. Showing a physical ID card to a shop clerk reveals your full name, exact date of birth, address, ID number, and photograph. Online age verification often requires uploading ID documents to third-party verification services, creating databases of sensitive personal information that become targets for data breaches.

EUDI Wallet age verification eliminates these risks through the data minimization principle embedded in the eIDAS 2.0 regulation. The verifier learns only the single fact they need: whether the person meets the age requirement. No name, no photo, no address, no exact birthdate. This makes the EUDI Wallet approach fully GDPR-compliant by design, as it collects and processes the absolute minimum amount of personal data required for the transaction.

Furthermore, the wallet does not create a tracking record. Each verification transaction uses unique cryptographic proofs, making it impossible for merchants to correlate multiple age verification requests to the same individual unless the user explicitly chooses to share identifying information.

The eIDAS 2.0 regulation establishes age verification as a mandatory use case that all EUDI Wallet implementations must support. This means a German citizen can use their EUDI Wallet to verify their age at a French online shop, and the verification carries the same legal weight as showing a German passport. The cross-border interoperability is achieved through standardized credential formats (ISO 18013-5 for mDL and SD-JWT VC for other attestations) and a common trust framework.

Several EU member states have already piloted age verification use cases. Italy's IT-Wallet includes age verification for online purchases, Germany's AusweisApp supports age verification using the national ID card's eID function, and France's France Identite app has tested age verification for alcohol and tobacco purchases at retail locations.

Large-scale relying parties, including social media platforms, online marketplaces, and content providers, are required under eIDAS 2.0 to accept EUDI Wallet age verification as a valid method. This creates a standardized, privacy-preserving alternative to the patchwork of proprietary age verification solutions currently in use across Europe.

• •Alcohol and tobacco purchases at retail stores via NFC tap
• •Online age-gated content access (streaming, gaming platforms)
• •Casino and gambling platform entry verification
• •Car rental and vehicle sharing services (minimum age requirements)
• •Social media account creation with age compliance