Let’s talk about the app your government is being asked to put in everyone’s pocket before the end of this year.
It’s called the EU age verification app. On paper it does one thing. It lets a person prove they’re over eighteen without telling the website anything else. No ID upload. No selfie. No name. Just a yes.
And the Commission has a point. Right now, if a site wants to check your age, you’re handing a porn site your driver’s licence. That’s insane. A clean “yes, I’m old enough, nothing more” is a real improvement.
So the design is good. Hold that.
Here’s what I want you to look at instead.
The Commission has adopted a recommendation urging Member States to accelerate the rollout and make the age app available by the end of 2026. It’s already feature-ready — since April. Seven countries are piloting it: Cyprus, Denmark, France, Greece, Ireland, Italy, Spain. In September it put the EU Kids Act on the table — safe-by-default digital services and fifteen as the minimum age to hold an independent account. On the second of October it opened that proposal up for feedback.
None of this is hidden. It’s all published. That’s exactly why it’s worth reading properly.
Because the thing described as a children’s safety tool is built on the same rails as the European Digital Identity Wallet. The Commission says so itself. The age checker is a “mini wallet,” compatible with the wallets every Member State is meant to have live by the end of the year. Same specs. Same trust framework. Same issuers.
Which means the question was never really about age.
Age is the first attribute. It’s the easiest one to justify. Nobody marches for the right of a twelve-year-old to buy whisky online. But once the rail exists — once your phone can produce a verified, government-backed attestation about you — the only thing standing between you and the next attribute is a product decision. Over 18 today. Over 65 tomorrow, so you can claim the pension discount. Resident of this province. Licensed to drive. Eligible for that benefit. Verified employee.
The app doesn’t change. The questions do.
Think about how this feels from the inside. A woman opens a site. A little panel slides up. Verify. She does it once, it takes seven seconds, she moves on with her evening. She never learns that the rail she just used is the rail that will later be pointed at her bank, her clinic, her tenancy application, her feed. She doesn’t see a system being built. She sees one polite prompt. And every prompt after this one, she’ll approve too — because she already trusted this.
That’s how infrastructure gets installed. One reasonable request at a time.
Now, I’m not going to tell you the EU secretly wants a surveillance state. That’s lazy, and it’s usually wrong. The people who built this wrote privacy into the spec. They did the work. The tech is genuinely better than the hosing it replaces.
But privacy in the architecture is not the same as restraint in the governance. Two things decide whether this ends well.
First: unlinkability has to be enforced, not promised. If the site you verify with and the issuer that vouches for you can be joined up by anyone sitting in the middle, then “prove one thing, reveal nothing else” is a slogan, not a property.
Second, and this is the one nobody is watching: the trusted provider list. The Commission is building a scheme that names who is allowed to issue proof-of-age attestations and which solutions count as trusted. That list is the real chokepoint. Whoever is on it decides who can speak for you. Whoever is off it doesn’t get to play.
So the operator lesson is simple, and it applies whether you’re in Brussels or building software in Johannesburg. When someone hands you a system that asks for less, ask what it’s capable of asking for later. The scoped version and the universal version are the same build. The only difference is a policy choice — and policy choices can change after you’ve already onboarded.
Read the spec, not the press release. Check whether the proof travels alone. And check who’s allowed to be an issuer, because that list is where sovereignty actually lives.
The principle worth keeping is small and old. You should be able to prove one true thing about yourself and hand over everything else untouched. Not to a company. Not to a state. To no one.
Your age is not the beginning of your record. It’s a fact, and it should be able to walk out the door the moment you’re through it.
You’ve got this.