Discord’s Age Verification: Chirag Goswami Questions Data Privacy Trade-offs

In a recent LinkedIn post, Chirag Goswami delves into Discord’s new mandatory age verification policy, raising critical questions about data privacy and the trade-offs involved in enhanced online safety measures.

Goswami highlights the implications of the verification process, noting that failure to comply results in users being placed into a “teen account.” This status restricts access to mature servers and channels, keeps sensitive content blurred, limits certain voice and chat features, and locks safety settings by default.

“Nothing wrong with protecting minors. That part makes sense.”

While acknowledging the validity of protecting younger users, Goswami pivots to the core concern: data handling.

The Data Dilemma: Biometrics and IDs on the Line

The journalist points out that if age cannot be confirmed through AI, Discord may resort to requesting more sensitive personal information. This could include a video selfie for facial age estimation or a government-issued ID.

Goswami expresses skepticism regarding the assurances provided by platforms about data security. He states:

“They say facial scans are processed locally. They say IDs are deleted after verification. They say they only retain your age group. But we’ve heard ‘we delete it’ before from tech platforms.”

This leads to a series of pressing questions about potential misuse, third-party vendor access, and the consequences of a data breach. As Goswami probes, “Can it be misused? Can third-party vendors access it? What happens if there’s a breach?”

Encryption and Verification: A Risky Combination?

Adding another layer to the privacy concern, Chirag Goswami points out a crucial detail about Discord’s messaging system: the absence of default end-to-end encryption.

He frames this as a significant point of consideration:

“So now we have: No E2EE Plus biometric or ID verification. Is that trade-off worth it?”

Goswami emphasizes that this is not an exercise in fear-mongering but rather an effort to foster a deeper understanding of what users exchange for perceived safety. He argues that as platforms increasingly implement stringent age checks, the fundamental conversation must shift towards the architecture of privacy itself.

The Future of Digital Identity and Privacy

The discussion by Goswami prompts users to consider their comfort level with sharing sensitive identification on social platforms. He concludes his analysis by posing a direct question to his audience:

“Would you upload your ID to a social platform for full access?”

Chirag Goswami’s post serves as a vital reminder for users and the tech industry alike to critically examine the balance between safety features and the fundamental right to digital privacy, especially as more personal data is collected and stored by online services.