Comment on EU age verification app to ban any Android system not licensed by Google

UnfortunateShort@lemmy.world ⁨3⁩ ⁨days⁩ ago

• gian@lemmy.grys.it ⁨2⁩ ⁨days⁩ ago

  Edit: German eID works on any Android btw., flawless actually. I sure hope I can use that for verification

  Same in Italy… I mean, I can pay taxes with that application but I cannot be verified for my age ? Seriously EU ?

  source
• boonhet@sopuli.xyz ⁨2⁩ ⁨days⁩ ago

  EID and equivalents are great for a lot of things, but do you want your porn site to know who you are? The new app is supposed to verify your age but not give out your PII. Not sure eID can do that?

  source

  • tribut@infosec.pub ⁨2⁩ ⁨days⁩ ago

    EID can be used for anonymous age verification. It doesn’t even need to give out your birthday and can attest to any “over the age of X” requirement.

    Ref: www.bfdi.bund.de/DE/…/Der_Personalausweis.html

    source

    • boonhet@sopuli.xyz ⁨2⁩ ⁨days⁩ ago

      Ah, better than what we have in Estonia then

      source
    • Hawk@lemmy.dbzer0.com ⁨2⁩ ⁨days⁩ ago

      “Government issued app can be used for anonymous age verification.”

      Doesn’t sound like the most trustworthy statement…

      source
• SaharaMaleikuhm@feddit.org ⁨2⁩ ⁨days⁩ ago

  Yes and the PC app you connect the Android app too also works on Linux. It’s even on flathub. Pretty nice, can’t complain.

  source

  • UnfortunateShort@lemmy.world ⁨2⁩ ⁨days⁩ ago

    That Flathub app is unofficial afaik, which is why I don’t use it. Normally I wouldn’t care, but this seems important enough to not use a repackaged version

    source
• General_Effort@lemmy.world ⁨2⁩ ⁨days⁩ ago

  violates the GDPR.

  I wouldn’t be too sure. Data protection mainly binds private actors. Any data processing demanded by law is legal. You’d really have to know the finer points of the law to judge if this is ok.

  source

  • UnfortunateShort@lemmy.world ⁨1⁩ ⁨day⁩ ago

    The GDPR also applies to public institutions as far as I’m aware - but most importantly the concern here is Google and data collected by Google. This data collection is in no way necessary to provide the age verification service. Most of it is not even related to it. The state legally cannot force you to agree to some corporations (i.e. Google’s) terms, even if we completely ignore the GDPR.

    source

    • General_Effort@lemmy.world ⁨1⁩ ⁨day⁩ ago

      Data processing mandated by law is legal. Governments can pass laws, unlike private actors. Public institutions are bound by GDPR, but can also rely on provisions that give them greater leeway.

      I don’t see how that this is in any way necessary, either. But a judge may be convinced by the claim that this is industry standard best practice to keep the app safe. In any case, there may be some finer points to the law.

      The state legally cannot force you to agree to some corporations (i.e. Google’s) terms,

      I’m not too sure about that, either. For example, when you are out of work, the state will cause you trouble if you do not find offered jobs acceptable.

      It’s another question, if not having access to age-gated content is so bad as to force you to do anything. Minors nominally have the same rights as full citizens, and they are to be denied access, too.

      source