In Section 3. Given existing authentication methods, this process may also be automated in the client's browser software without any awareness of the content provider, so would not mean that the person using the browser was in fact the person being authenticated. Information such as the address of the applicant and credit card details serve no purpose in age verification and reduce the anonymity of any person seeking registration. This proposal will lead to the creation of databases of private information that may be marketed without the users' consent, that have no formal controls by the consumer, and that may lead to potential abuses of sensitive data for spam, fraud or blackmail. If these details are to be recorded there is no indication of how long the information should be stored and who may have access to it.
Consumers have no recourse for removal of details over time, including access and log data.
Potential abuse of this information is unlimited. The requirement for credit card details assumes that the content provider is charging for material. There is no presumption that restricted material will require credit card payment and the collection of credit card details only seeks to reduce the anonymity of persons seeking registration. It is also not current bank policy to permit details of credit-card owners to be released, so the details cannot be used for personal authentication or age verification. Digital certificates are proposed as an alternative proof of identity, however minors are not restricted from obtaining digital certificates, so they cannot be used for age verification.