This is exactly the same mechanism required as is used for token authorization.
The entity verifying your identity needs to be trusted to do so, and it gives you a proof of age category (doesn’t need to be exact age, so it shouldn’t give that), that the service then can validate.
A government service that already knows who you are, can validate your identity and hand out these tokens, which are then used to access said restricted services. Done correctly and neither need to know who accessed what.
But, this isn’t done that way. Because, this isn’t about protecting children. It’s about collecting data and building profiles.
Of course you can.
This is exactly the same mechanism required as is used for token authorization.
The entity verifying your identity needs to be trusted to do so, and it gives you a proof of age category (doesn’t need to be exact age, so it shouldn’t give that), that the service then can validate.
A government service that already knows who you are, can validate your identity and hand out these tokens, which are then used to access said restricted services. Done correctly and neither need to know who accessed what.
But, this isn’t done that way. Because, this isn’t about protecting children. It’s about collecting data and building profiles.
Exactly this.
Doing it this way however prevents Palantir getting their hands on the data and slinging their kickbacks