Spain to mandate digital ID for age verification online

Spain will implement an internet age verification system this summer using electronic IDs or digital certificates. The access logs spark debate...

English · Original discussion in Spanish · Published

Spain to mandate digital ID for age verification online
Spain to mandate digital ID for age verification online

The government is preparing a pioneering online age verification system for the summer. According to El País, users will need to prove they are adults with an electronic DNI (Spanish national ID) or a digital certificate to access certain content. While presented as child protection against prono, the technical design raises an uncomfortable question: who safeguards the record of what every adult browses?

Digital certificates turn every access into an identifiable trail, and that is where the problem begins. A system requiring identification before entering a website does not just filter ages; it links a specific identity to specific content. Whoever manages these records—operators, verification gateways, or the administration—will possess a detailed map of private habits of millions.

What we know about the age verification system

The announcement comes labeled as pioneering, with a timeline: summer. Verification would rely on the electronic DNI and digital certificates, tools already widespread among adults. The official logic is simple: if the user proves adulthood, the site lets them in; if not, it blocks them.

The issue lies in the fine print. Most adult content sites are hosted outside Spain. Requiring foreign portals to implement a verification gateway using Spanish certificates is practically unfeasible. The alternative is placing control on internet operators, who would have to decide what constitutes prono on each connection.

This mixes two distinct things: filtering ages and classifying content. The former is a procedure. The latter is censorship, whatever you call it.

Why is the sole focus on porn questioned?

Much skepticism points not at porn, but at what trinc. Once infrastructure identifying users before web access is built, the catalog of content subject to verification can expand without new approvals. Today it is adult content; tomorrow, any site disagreeing with the official narrative.

The suspicion is unfounded. The system creates a centralized access log that did not exist. That record, in whoever's hands, has obvious value for anyone interested in knowing what people read, watch, and search. Those with nothing to hide have nothing to antiestéticar, says the loyal subject's manual. The skeptical citizen's manual says otherwise.

Parental controls versus state control

A technical alternative exists and is cheaper: device-based parental controls. This is what most concerned families do. It installs on phones, tablets, or computers, filtering without requiring identification to a third-party server.

The difference is scale and ownership. Parental control is exercised by parents. State control is exercised by an administration that also accumulates data. A system demanding IDs to view certain websites does not protect minors: it surveils adults.

Circulating alternatives: VPNs and local fiber

IP blocking is easy to implement and easy to bypass. A VPN—some browsers offer free versions—redirects traffic, dodging operator blacklists. Users wanting blocked content will access it with two clicks, making the system useful only for collecting data and causing nuisance, not prevention.

Some propose switching operators. Local companies, they argue, have less spying infrastructure, fewer clients justifying selective censorship, and reinvest locally. The problem is most buy connections from national wholesalers who execute filtering. Own fiber exists but is rare and expensive.

What happens to content hosted outside Spain?

Nothing. A site hosted in Russia won't implement a Spanish certificate verification gateway. Blocking, if it occurs, will be via IP by operators. Operators must decide, connection by connection, what is porn. This classification isn't done by officials but by algorithms, with known error rates.

The likely result is a system hindering average users, failing to stop VPN-savvy ones, and leaving an unwanted trail of personal data. The question isn't if it will work, but who benefits from its existence.

Also available in: Deutsch

Summary of a discussion on Burbuja.info - Foro de economía, actualidad y política., translated from Spanish and reviewed before publication. Read the full discussion (115 replies).

More summaries

All summaries in English →

-
Back