ntr40-C_202505519EN.000101-E0040
(40) The service provider only needs to know whether the user is over or under an age threshold. This should be implemented by a tokenised approach based on the participation of a third-party provider, in which the service provider only sees the functional result of the age assurance process (e.g. ‘over’ or ‘under’ the age threshold). A third-party provider performs an age check and provides the user with an ‘age token’ that the user can present to the service provider without needing to prove their age again. The age token may contain different user’s attributes and information about when, where or how the age check was performed. See also EDPB statement 1/2025 on Age Assurance. Available: https://www.edpb.europa.eu/our-work-tools/our-documents/statements/statement-12025-age-assurance_en.
Source: EUR-Lex (Cellar) · retrieved 2026-09-25 · Text as adopted (Official Journal); later amendments are not incorporated in this text.