Here are Apple’s claims:
- The selfie “isn’t accessible to anyone, not even Apple.”
- “Once your age is confirmed, your selfie is deleted and isn’t retained in any form.”
- Apple says PCC data is encrypted in transit and deleted afterward.
However, a user’s picture is sent to Apple’s cloud servers to be processed, where the data points remain. The picture is not needed at that point and can be deleted.
Governments can now mandate that Apple turn the feature on regardless of which apps are installed on the phone. Secondarily, governments can mandate that the apps access the feature before granting to access to their services. ⁃ Patrick Wood, Editor.
When Apple released iOS 27.2 on Sunday, it crossed a threshold no major operating system had crossed before: embedding a government-compelled biometric age gate directly into the OS layer itself — not inside an app, not inside a browser, but in the platform that every app runs on top of.
South Korea is also part of the five-country rollout, but Apple’s selfie-based facial scan is not available there — South Korean users face annual carrier-verified identity checks instead. Adults who fail or decline the facial scan do not get a different app or a competing service; they get a permanently restricted device — or they get a different phone.
That architectural choice — OS-level rather than app-level — is the fact that makes iOS 27.2’s biometric gate different from every prior age-verification rollout in the industry, and it is the fact Apple’s public documentation downplays. Once this plumbing is baked into the operating system, every future government mandate that wants to require it will find Apple’s infrastructure already installed. That is not a side effect. It is the point.
Apple’s own support documentation describes the process as a liveness check more than an identity interrogation. Users are instructed to perform a deliberate four-angle head rotation — right, left, up, down — capturing their face from multiple perspectives. Apple advises removing anything that might obscure a result: masks, hats, sunglasses. The company calls the underlying technology an “age-estimation model,” not a facial recognition or identity-matching system, which is a meaningful distinction: estimation predicts a probabilistic age range from facial geometry rather than matching the face to a database record.
Apple promises the selfie “isn’t accessible to anyone, not even Apple,” and that “once your age is confirmed, your selfie is deleted and isn’t retained in any form” per its selfie verification support page. Users who are not cleared as adults are directed to try again with a fresh selfie, or to use an alternative: a credit card on file, Apple ID account-history signals, or a government-issued ID scan.
What distinguishes Apple’s implementation is architectural: not inside a single app or website, but embedded in the operating system itself. A user who dislikes Meta’s video selfie requirement can stop using Facebook. A user who dislikes Apple’s iOS 27.2 age scan cannot stop using the App Store without giving up iOS. The failure mode at this level is not correctable by switching apps; it is correctable only by switching platforms.
No comments:
Post a Comment