You are correct, but i’d like to expand a bit on how it could be solved.
It requires that all major social networks use BankID for all traffic from Norway.
Bypassing it would require a VPN, which is a simple hurdle.
But the major win here is that parents will enforce this. Parents can point to this law and say that they have to be old enough. As long as enough parents enforce this law and the VPN requirement is there, then it will probably be effective enough
I mean… the government already has all your information. If you distrust them with your information, you have an odd problem to overcome. The corpos, however, shouldn’t have all this data on you.
As far as I understand, BankID actually abstracts away those numbers. FB have to use an API, and more or less receive a true or false on their query.
They recently opened up for using BankID to prove your age at bars and such, and I think they only get to know if person is old enough or not. Not even a number, just old enough.
This is the right way to protect privacy. Auditable government departments have your data anyways. They don’t provide the data to companies, but they answer questions like “old enough to drink?” With yes no answers.
That’s true, but the government is auditable by citizens though. We can legislate them to not keep logs and most importantly we can see if they’re sharing data with advertisers.
Enforcing it is virtually impossible.
You are correct, but i’d like to expand a bit on how it could be solved.
It requires that all major social networks use BankID for all traffic from Norway.
Bypassing it would require a VPN, which is a simple hurdle.
But the major win here is that parents will enforce this. Parents can point to this law and say that they have to be old enough. As long as enough parents enforce this law and the VPN requirement is there, then it will probably be effective enough
So you need a BankID to open an account on the covered platforms? That seems like a privacy nightmare.
In Scandinavia every citizen has a registration number and the government has deployed state-enforced online digital identity system.
It’s not a privacy nightmare if you can trust the government. And in Scandinavia you generally can.
I mean… the government already has all your information. If you distrust them with your information, you have an odd problem to overcome. The corpos, however, shouldn’t have all this data on you.
Depends on where you live. Many places you can’t trust the government and they know almost nothing about you.
Everyone in Norway has one, well like 99,99% or something. It is a requirement for banking.
It is used for all banking services in Norway. When you get your own bank account at 13 or something you also get BankID.
We have SmartID and MobiilID in Estonia too, but you don’t need it to log onto social media. You only need it
Right. But Facebook shouldn’t have that number.
As far as I understand, BankID actually abstracts away those numbers. FB have to use an API, and more or less receive a true or false on their query.
They recently opened up for using BankID to prove your age at bars and such, and I think they only get to know if person is old enough or not. Not even a number, just old enough.
This is the right way to protect privacy. Auditable government departments have your data anyways. They don’t provide the data to companies, but they answer questions like “old enough to drink?” With yes no answers.
The government can keep a log of what sites asked for such a proof though, and better assume they do.
That’s true, but the government is auditable by citizens though. We can legislate them to not keep logs and most importantly we can see if they’re sharing data with advertisers.