Summary
Tech Policy Press analysis (Dec 2025) connecting the Supreme Court’s November 2025 decision blocking trans-identifying passport documents to the rise of automated Age Verification regimes. Researchers and digital-rights advocates document why facial-recognition and ID-based age-assurance systems are systematically biased against trans users (mismatched IDs, banking gaps, hormone-affected facial features, biometric misclassification), and how the resulting “leaky data ecosystem” — illustrated by the Discord and Tea app breaches — is uniquely dangerous to LGBTQI+ people in a post-Roe, second-Trump-administration US.
Key Points
- Supreme Court trans-passport ruling (Nov 2025): SCOTUS overturned a stay that had allowed trans people to obtain passports matching gender identity; plaintiffs were forced to out themselves to TSA agents. Sets the legal context: same identity-verification logic now being automated online via age verification.
- Os Keyes (UMass Lowell) research: automated image-recognition systems systematically misclassify trans people; age verification builds on this same flawed gender-coded infrastructure.
- Hormone replacement therapy changes facial soft tissue in ways biometric “age estimation” systems were not trained on — feminizing therapy can make people look younger; masculinizing therapy similarly distorts age estimation.
- UK Online Safety Act rollout (July 2025): Reddit forums for health and advice restricted; X and Reddit blocked posts about Gaza and Ukraine; Open Rights Group’s Jim Killock confirms political content predictably caught up.
- Tea app breach (women’s safety app): 4chan downloaded selfies, drivers licenses, and DM images; maps used address data to pinpoint home locations. Direct precedent for what age-verification breaches will look like.
- Discord verification hack also referenced as recent breach affecting age-verification data flow.
- 19 US states have passed online ID-check laws; the federal SCREEN Act would bring them nationwide.
- VPN surge confirms users are routing around the laws; major porn platforms report significant traffic drops; non-compliant sites gain traffic.
- Yoti spokesperson: company directs unhappy users to “email” to complain — no formal appeal mechanism for misclassification.
Newsletter Angles
- Power / Surveillance: Age verification is a Trojan horse for building national identity-verification infrastructure under the cover of child safety. Trans users are the canary in the coal mine — they hit the failure modes first because their IDs and faces don’t match the system’s assumptions.
- Cross-domain pattern: This connects directly to Killing of Renée Good / Operation Metro Surge / Flock Safety’s ICE collaboration — same infrastructure (biometric + ID + data brokers) being weaponized against marginalized groups across immigration, gender, and reproductive contexts.
- Editorial hook: “Sold as safety, deployed as exclusion.” The story isn’t just that the systems are biased — it’s that the bias is structural, predictable, and the policy was passed knowing this.
- The Tea app breach is the proof of concept for what happens when sensitive verification data is centralized.
Entities Mentioned
- Dia Kayyali — co-author; Tech Policy Press fellow; Christchurch Call Advisory Network
- Jasmine Mithani — co-author; Tech Policy Press fellow
- Os Keyes — UMass Lowell postdoc; misclassification research
- Sara Philips — Fight for the Future campaigner
- Paige Collings — EFF senior speech and privacy activist
- Jim Killock — Open Rights Group executive director
- Fight for the Future — quoted advocacy org
- Electronic Frontier Foundation — quoted advocacy org
- Open Rights Group — UK digital rights org tracking OSA rollout
- Ofcom — UK regulator implementing the Online Safety Act
- Yoti — age-verification vendor; minimal user appeal mechanism
- Discord — verification data hack
- Tea (app) — women’s safety app catastrophic breach
- National Partnership for Women and Families — quoted on data-broker abortion criminalization
Concepts Mentioned
- Age Verification — central topic
- Biometric Surveillance — technical infrastructure under critique
- UK Online Safety Act — primary live case study
- SCREEN Act — proposed US federal age-verification mandate
- Data Broker Loophole — how verification data ends up with law enforcement
- Trans Rights and Documentation — legal context (passport ruling)
Quotes
“Lawmakers pushing legislation that encourages companies to age-gate their sites are actively putting people in danger and are using ‘protecting kids’ as a crutch to obfuscate from the fact that they refuse to truly hold companies that are profiting off our information accountable.” — Sara Philips, Fight for the Future
“What we are really doing is building surveillance infrastructure around accessing information online.” — Paige Collings, EFF
“When these systems are built, as they are, with a minimum age threshold, the result is likely to be trans people disproportionately being blocked from access to services.” — Os Keyes
Notes
Tech Policy Press is a digital-rights-aligned publication; the framing is opinionated but every empirical claim (Tea breach, Discord hack, Open Rights Group findings, Keyes research) is sourced. Includes the rare combination of (a) named researcher with publication record, (b) named advocacy practitioner, and (c) named vendor response. The Tea breach details are the most novel evidentiary contribution — concrete proof of the leakage failure mode.
Pairs naturally with Considering Age Verification and Impacts on LGBTQ+ Youth (Povolny, Tech Policy Press, 2024) — same publication, broader theoretical frame, this one adds the post-2025 surveillance-state context.