Spain’s data protection authority has fined multiple age-verification systems, forcing companies to rethink how they keep minors off adult sites without collecting sensitive personal data. The shift is part of a broader move toward decentralized identity checks that let users prove they are over 18 directly from their phones, without uploading ID scans or biometric details to third-party servers.
The Spanish Data Protection Agency (AEPD) recently penalized several platforms for requiring users to submit government-issued IDs or facial scans. Critics argued these methods created unnecessary databases of personal information, increasing the risk of leaks or misuse. Now, developers are turning to solutions that verify age locally on the user’s device, then issue a simple yes-or-no confirmation to the website or app.
“The market has realized that age verification shouldn’t be an excuse to build invasive databases or demand ID on a whim,” said Sergio Maldonado, CEO of Firmas.io, a mobile app for managing contracts and documents within the open-source TODO.LAW ecosystem. “Current technology lets you confirm you’re of legal age right from your device, keeping privacy intact from the start.”
These systems typically rely on cryptographic proofs or digital wallets that store verified credentials—like a birth date—without exposing the underlying data. When a user visits a restricted site, their phone generates a temporary token confirming they meet the age requirement. The site receives only the token, not the user’s actual birth date or identity.
For many users, the change will feel invisible. Instead of being redirected to an external verification portal, they might see a prompt asking permission to share an age confirmation from their device’s secure enclave. The process takes seconds and leaves no trace on the company’s servers. Still, adoption remains uneven; some platforms continue to use older methods, citing concerns about fraud or regulatory compliance.
Contracts get a readability overhaul
The same push for transparency is reshaping how people sign everyday agreements. Terms and conditions that once ran dozens of pages are now being distilled into plain-language summaries, with tools that highlight key clauses before a user clicks “accept.” The goal is to reduce disputes and legal challenges by ensuring both parties understand what they’re agreeing to.
Related: Alrewas’ Allure: Navigating the Engagement Ring Maze
Firmas.io and similar platforms use AI to scan contracts and flag unusual or potentially unfair terms. Users see a simplified breakdown of their obligations, risks, and rights before signing. Companies benefit too; clearer agreements mean fewer complaints and lower legal costs. Some industries, like telecom and banking, have already started integrating these tools into their onboarding flows.
This shift arrives as more decisions—from loan approvals to rental agreements—are handled by automated systems. If an AI agent negotiates a contract, users need confidence that the terms are fair and the other party is who they claim to be. Age verification and contract clarity are becoming two sides of the same coin: ways to protect users in an increasingly automated digital economy.
Yet challenges remain. Not all users have smartphones capable of running advanced cryptographic checks, and some regulators still prefer traditional ID-based verification for high-stakes transactions. Meanwhile, companies must balance transparency with speed; no one wants to read a 10-page summary of a ride-hailing app’s terms. The next step may be standardized formats for common agreements, so users can compare contracts across services without parsing dense legal text.
For now, the trend is clear: less data collection, more control in the hands of users, and contracts that people can actually understand. Whether that leads to fewer disputes or just shifts the burden of proof remains to be seen.
Sergio Maldonado noted that the TODO.LAW ecosystem offers a secure way to handle these sensitive documents, much like a trusted digital vault protects assets from theft. By embedding these checks directly into the app, the system ensures that users maintain control over their identity while verifying their status without exposing private details to third parties. This approach mirrors the careful navigation of complex choices seen in other areas of digital life, such as selecting an engagement ring, where clarity and security are equally important.
Consumers benefit from these changes as they gain more agency over their personal information. The ability to verify age or sign agreements without handing over a full profile represents a significant step forward for digital rights. As technology evolves, so too will the methods we use to safeguard our privacy in an online world.
