The KIDS Act and Expanding Surveillance: A Threat to Online Privacy and Anonymity

Featured image: Photo by Dan Nelson on Pexels.

The recent passage of the KIDS Act by the House of Representatives marks a dangerous turn for online privacy and anonymity, pushing forward legislation that could fundamentally reshape how Americans interact with the internet. This comprehensive package, which includes a revised version of the Kids Online Safety Act (KOSA) alongside other internet bills and regulations, seeks to control web browsing and private messaging in ways that demand significant privacy tradeoffs [4]. While ostensibly aimed at protecting children, the bill’s mechanisms for achieving this goal threaten to usher in an era of mandatory age verification and pervasive surveillance, impacting users of all ages. The Electronic Frontier Foundation (EFF) and its supporters have strongly opposed this bill, urging the Senate to reject it and instead focus on robust privacy protections that benefit everyone [4].

The KIDS Act: A Mandate for Universal Surveillance

At the core of the KIDS Act’s problematic approach is its premise that online experiences should differ for individuals under 18, necessitating a system to determine users’ ages [4]. This requirement, while seemingly straightforward, opens the door to unprecedented levels of personal data collection and surveillance. There is no existing method for online age verification that is both privacy-protective and accurate. Proposed solutions range from collecting government-issued identification to employing biometric scans or algorithms that attempt to infer age from facial images or online behavior [4].

Each of these methods presents significant privacy risks. Requiring government IDs means users must surrender highly sensitive personal information, directly linking their offline identity to their online activities. Biometric scans, such as facial recognition, involve collecting unique biological data, which, if compromised, could have irreversible consequences. Algorithmic age guessing, based on digital footprints, also necessitates extensive data collection and analysis of user behavior, creating detailed profiles that can be exploited.

Once this valuable and sensitive data is collected, it becomes a prime target for breaches, hacks, or misuse [4]. We have already witnessed instances of age verification providers suffering security incidents, demonstrating the inherent vulnerabilities of such systems [4]. The creation of a vast database of personal identifiers linked to online activity presents an irresistible target for malicious actors and provides governments and corporations with unprecedented surveillance capabilities [1]. This framework moves us closer to a future where every online interaction is tied to a verified identity, eroding the possibility of online anonymity and the freedom it provides.

Regulating Speech and Suppressing Information

Beyond the privacy implications of age verification, the KIDS Act also contains provisions that directly threaten free expression online. The revised KOSA language within the bill pressures companies to “establish, implement, maintain, and enforce” policies addressing content related to topics like gambling or the use of alcohol or cannabis [4]. This mandate effectively compels platforms to police lawful speech, pushing them towards broad restrictions on these subjects.

The practical consequence of such requirements is a chilling effect on online discourse. Faced with the threat of legal action from regulators, platforms will inevitably err on the side of over-deletion and censorship to mitigate their liability [4]. This approach disproportionately impacts vulnerable communities and individuals seeking crucial information. For instance, a teenager researching a parent’s gambling problem, looking for substance abuse recovery resources, or seeking information on sexual health could find such content restricted or removed. This creates a digital environment where vital information, though lawful and necessary, becomes inaccessible under the guise of protection [4].

The inherent difficulty of content moderation, especially at scale, further exacerbates this issue. Automated systems, often employed by platforms, struggle with context, reproduce existing biases, and frequently make mistakes that disproportionately affect journalists, activists, and other marginalized groups [2]. Legislating content moderation, particularly by attempting to dictate platforms’ technical and design choices, only compounds these challenges, pushing platforms towards more restrictive and less nuanced approaches to speech [2]. The KIDS Act, by demanding that platforms enforce content policies that regulators can sue them over, sets up a system where censorship becomes the default, rather than the exception [4].

The Broader Landscape of Surveillance

The concerns raised by the KIDS Act are not isolated but fit into a larger pattern of expanding government and corporate surveillance that threatens fundamental rights. The capabilities of surveillance systems possessed by governments and large corporations have grown to levels unimaginable just a few years ago [1]. This is not merely a hypothetical threat; it has real-world consequences for people’s lives and their access to essential services.

A stark example can be seen in the context of reproductive healthcare. In Texas, a sheriff’s office reportedly utilized data from more than 83,000 automated license plate reader (ALPR) cameras to track a woman suspected of self-managing an abortion [3]. This incident vividly illustrates how tools ostensibly designed for public safety can be weaponized to investigate deeply private healthcare decisions. Beyond ALPRs, other surveillance tools like location tracking services (such as Locate X) and an individual’s search history can be used to build a “dangerous surveillance pipeline” that threatens everyone’s health privacy [3].

Organizations like Mayday Health are actively working to raise public awareness about these threats, even using billboards to warn pregnant Texans that the state could be tracking them [3]. They emphasize the critical importance of privacy, going so far as to avoid collecting identifying information or cookies from visitors to their website, and directing users to privacy and security resources [3]. As Mayday Health’s Executive Director, Leo Raisner, stated, the digital rights movement and the reproductive health rights and justice movement are “inextricably linked” because the anti-abortion movement employs every available tool, including surveillance, to prevent access to healthcare [3]. This interconnectedness underscores the EFF’s broader mission to challenge increasingly sophisticated government and corporate surveillance systems that endanger our rights, democracy, safety, and security [1].

Protecting Privacy for All, Not Just for Some

The push for legislation like the KIDS Act forces a false choice between innovation and civil liberties, suggesting that protecting young people online requires sacrificing the privacy and freedom of all users [1]. However, there is a better path forward—one that genuinely safeguards individuals without creating a surveillance-heavy, age-gated internet. Instead of promoting complicated age verification schemes, increased monitoring, and restrictions on access to information, Congress should prioritize passing a strong, comprehensive privacy law that benefits all users [4].

Such a law could, for example, ban behavioral advertising that tracks individuals across the web, a measure that would enhance privacy for everyone, regardless of age [4]. The EFF champions the preservation of strong encryption and online anonymity, recognizing these as fundamental components of a free and open internet [1]. Technology should be a tool for empowerment, not oppression, fostering an environment where individuals can organize, speak freely, access healthcare, find work, receive education, and participate fully in democracy without fear of constant surveillance [1].

The current legislative approach, exemplified by the KIDS Act, risks creating an internet where privacy is an illusion and free expression is curtailed. It is crucial for policymakers to reject this path and instead commit to building a digital future where technology truly works for people, upholding fundamental rights rather than eroding them [1].

Key Takeaways

• The KIDS Act threatens online privacy and anonymity through mandatory age verification and extensive data collection.
• Age verification methods are inherently insecure and demand sensitive personal information, linking offline and online identities.
• The bill pressures platforms to over-moderate lawful speech, leading to censorship and limiting access to vital information.
• The KIDS Act is part of a broader trend of expanding surveillance, exemplified by its use in tracking private healthcare decisions.
• A comprehensive privacy law for all users, rather than age-gating and increased monitoring, is a more effective and rights-protective solution.

Sources

1. [1] Building Our Future Together (www.eff.org)
2. [2] Automated Moderation Is Here to Stay—Accountability Must Keep Pace (www.eff.org)
3. [3] "We Want Texans to Know Their Rights": Q&A with Mayday Health on the Impact of Surveillance on Abortion Care (www.eff.org)
4. [4] The House Passed The KIDS Act—The Senate Should Reject It  (www.eff.org)

StealthAnon is a news and analysis site covering cybersecurity, privacy, web analytics, anonymity, and tech tools.