EFF urges California governor to veto age verification bill over privacy and free speech concerns

Background of California’s age verification legislation

In early 2024 the California State Legislature passed Assembly Bill 1709, a measure that would require websites to confirm a user’s age before allowing access to content deemed inappropriate for minors. The bill targets platforms that host pornographic material, gambling sites, and other services that the state classifies as harmful to children. Proponents argue that the law fills a gap left by existing age‑restriction tools, which often rely on self‑declaration and are easily bypassed.

Critics, however, contend that the approach imposes a broad surveillance regime on all internet users, regardless of age. The Electronic Frontier Foundation (EFF) has entered the debate by filing a formal request for Governor Gavin Newsom to veto the bill before it can become law.

Key provisions of A.B. 1709

The text of the legislation, available on the official California Legislative Information site, outlines several mandatory steps for online operators:

Implementation of a verification system that checks a user’s date of birth against a government‑issued ID or a third‑party database.
Retention of verification data for a period not less than twelve months.
Display of a clear notice to users indicating that age verification is required before access.
Imposition of civil penalties up to $5,000 per violation for non‑compliant platforms.

These requirements apply to any website that can be accessed by California residents, regardless of where the company is headquartered. The bill’s broad reach raises questions about jurisdiction, data security, and the practical feasibility of enforcing such checks at scale.

EFF’s legal and privacy arguments

EFF’s official request, published on its website, frames the debate as a clash between public safety goals and fundamental civil liberties. The organization highlights three core concerns:

Privacy invasion: Mandatory collection of government‑issued identification forces users to share sensitive personal information with private companies. This data could be vulnerable to breaches, misuse, or unauthorized sharing.
First Amendment risk: By placing a barrier before access, the law could deter lawful speech, especially for adults seeking content that is legal but age‑restricted.
Disproportionate burden: Small businesses and independent creators may lack the resources to implement robust verification systems, potentially stifling innovation and competition.

EFF cites a privacy analysis by the Electronic Privacy Information Center, which warns that large‑scale identity checks create a single point of failure for personal data security. The analysis notes that “centralized repositories of age verification data become attractive targets for cyber‑attackers.”

First Amendment considerations

The United States Constitution protects freedom of speech and expression. Legal scholars, including those at Cornell Law School, have argued that any prior restraint on lawful content must be narrowly tailored. By requiring verification before any content can be viewed, A.B. 1709 may constitute a prior restraint that fails the strict scrutiny test applied to speech‑related regulations.

Furthermore, the bill does not differentiate between content that is illegal for minors and content that is merely adult‑oriented. This lack of nuance could suppress legitimate artistic, educational, or political expression, a concern echoed by civil liberties advocates.

Potential impact on online ecosystems

If enacted, the law would reshape how websites interact with users in California. The following outcomes are plausible:

Increased use of third‑party verification services, raising questions about data sharing agreements.
Potential migration of adult‑oriented platforms to jurisdictions without such requirements, reducing California’s digital market share.
Heightened user friction, leading to lower engagement and possible loss of revenue for content creators.

Stanford research on age verification effectiveness suggests that even well‑designed systems can be circumvented by determined users, especially when verification relies on simple document uploads. The study emphasizes that technical solutions alone cannot guarantee compliance without broader educational and parental‑involvement strategies.

Alternative approaches to protecting minors online

EFF proposes several less intrusive methods that balance safety with privacy:

Enhanced parental control tools built into browsers and operating systems, allowing families to set age‑appropriate filters.
Voluntary industry standards for age verification that rely on privacy‑preserving technologies such as zero‑knowledge proofs.
Targeted education campaigns that inform minors about safe internet practices and the risks of certain content.
Strengthened enforcement of existing laws against the distribution of illegal child sexual abuse material, rather than broad age checks.

These alternatives avoid the creation of a centralized database of personal identifiers while still providing mechanisms for protecting young users.

Political response and next steps

Governor Newsom has not yet announced a position on the veto request. In public statements, the governor’s office has emphasized a commitment to child safety online, while also acknowledging the need to protect civil liberties. Lawmakers supportive of the bill argue that the veto would send a mixed message to constituents who demand stronger protections.

The legislative calendar indicates that a veto could be exercised before the end of the current session. If the governor allows the bill to become law, the state will likely face legal challenges from civil rights groups, technology companies, and privacy advocates.

Stakeholders are watching closely, as the outcome may set a precedent for other states considering similar age verification mandates. The balance between protecting minors and preserving constitutional rights remains a contentious and evolving policy arena.