In SN1035 Steve states "we clearly need a privacy preserving age assertion system..." implying that there is none and contemplating various technical schemes to achieve it. However, having nor read relevant TX law he failed to grasp that problem have already been solved by legislators in legal, not technical way. TX law should be commended for detailed and precise solution of this conundrum. So, what does TX law mandate? First, it explicitly states that whatever method have been used for age assertion, ALL INFO&DOCS involved in the process MUST BE IMMEDIATELY DESTROYED and only binary "of age or not" result kept. But, there is more! TX does not stop at mandate but explicitly criminalizes any info retention from this process. And, there is more! TX explicitly assigns the harshest business criminal violation and process it has for this violation.
Hence, prove your age using any method service wants with any info it feels confident that the task is accomplished but, aside of binary yes or no, all other info must immediately be destroyed or the service becomes criminal with known harsh penalties. Privacy preserved by legal, not technical means.
Hence, prove your age using any method service wants with any info it feels confident that the task is accomplished but, aside of binary yes or no, all other info must immediately be destroyed or the service becomes criminal with known harsh penalties. Privacy preserved by legal, not technical means.
