Age Verification Laws Create ID-Linked Account Infrastructure in 20+ US States and EU DSA

Twenty-three US states plus the EU and Australia have passed age verification rules since 2022 that require platforms to match user accounts to state-issued IDs or biometric data. These statutes explicitly authorize disclosure of verified identity data to law enforcement upon request without individualized warrants in many cases. The mechanism replaces prior subpoena processes that needed probable cause and platform cooperation.

Primary data from state legislative trackers and the EU's 2024 DSA implementation reports show identity linkage fields now stored in platform compliance databases. Once stored, these fields support bulk queries rather than per-account investigations. Existing OSINT and VPN circumvention barriers are bypassed by design because the identifier is attached at account creation.

Operational effect is the shift from human-scale attribution to queryable registries. Speech on platforms becomes attributable at machine speed once a threshold percentage of accounts are verified. Historical precedents with RIAA notice-and-takedown systems demonstrate how automated disclosure letters scale once the identifier layer exists.

Next phase requires only API integration between verification providers and state systems. Full automation of attribution for designated speech categories becomes feasible once verification coverage exceeds 60 percent of active accounts, projected in multiple jurisdictions by 2027.