Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:
uropean Commission Freezes Austria’s Under-14 Social Media Ban Pending EU Kids Act
The European Commission has postponed the implementation of Austria’s proposed social media ban for children under 14 for 12 months, freezing national legislative drafts that overlap with incoming European Union regulations on minors’ digital platform access. Enacted under standard EU notification frameworks to prevent conflicting national thresholds that could compromise single-market regulatory enforcement, the hold aligns regional policy with the proposed EU Kids Act, which seeks to prohibit social media access for children under 13 while enforcing supervised permissions up to age 15. The standstill directive applies specifically to Austria because its statutory review window concluded after the European Commission introduced the unified framework, leaving earlier submissions from France and Greece’s approved under-15 ban unaffected while negotiations proceed with member states and the European Parliament.
99 Adds Unico Face Checks for Periodic Verification of 2.5 Million Drivers
Brazilian ride-hailing and logistics platform 99 has expanded its identity assurance architecture by deploying Unico facial biometrics for periodic driver verification, establishing automated recurring identity audits across an active fleet exceeding 2.5 million couriers, drivers, and motorcyclists. Supported by a R$145 million corporate safety allocation for 2026, the updated verification pipeline runs background facial matching and biometric liveness checks to intercept account handoffs, identity sharing, and AI-generated synthetic profiles without disrupting standard onboarding workflows. The integration deepens an established technical deployment with Unico, which currently provides transaction-level facial authentication and liveness validation for more than 28 million digital account holders using the integrated 99Pay financial services ecosystem.
Socure Appoints Former Confluent Finance Leader Rohan Sivaram as CFO
Digital identity and fraud prevention provider Socure has appointed former Confluent finance executive Rohan Sivaram as chief financial officer, positioning the enterprise for disciplined public-market scale following an August funding round led by Summit Partners at a $5.2 billion valuation. Sivaram brings extensive corporate scaling and capital markets background from previous roles steering Confluent through its initial public offering, consumption-tier transition, and eventual $11 billion acquisition by IBM, alongside senior executive tenure managing finance operations at Palo Alto Networks. The executive hiring follows Socure’s acquisition of the Fravity agentic orchestration platform—now operating as RiskOS_Agents—and aligns with third-quarter operational milestones reporting $42.7 million in bookings and $34.2 million in renewals as the company scales RiskOS to govern identity risks across consumer profiles and autonomous AI agents.
Telesign Joins Microsoft Security Store as SMS and Voice MFA Provider for Entra ID
Global communications authentication platform Telesign has listed its telecom verification service on the Microsoft Security Store to supply SMS and voice multifactor authentication for Microsoft Entra ID, giving enterprise organizations a migration path to preserve telephone-based verification ahead of native platform retirements. Microsoft plans to deprecate first-party SMS and voice authentication across Entra ID workforce tenants starting February 1, 2027, to drive organizational adoption toward phishing-resistant FIDO2 passkeys while advising enterprise clients requiring legacy or hybrid workflows to route carrier delivery through verified third-party telecom integrations. Accessible via unified Azure billing models, Telesign’s carrier infrastructure provides enterprise administrators with continuous authentication delivery across more than five billion monthly validated mobile numbers while IT departments execute phased transitions toward passwordless standards.
Connecticut Sets Nov. 18 Launch for TSA-Accepted Mobile ID App
The Connecticut Department of Motor Vehicles has scheduled a statewide rollout of Connecticut Mobile ID for airport identity verification on November 18, releasing a voluntary smartphone app that provisions digital driver’s licenses, state IDs, and learner’s permits secured by on-device biometric locks. Designed to complement physical credentials rather than replace them during roadside traffic stops or voting procedures, the platform requires residents to authenticate using Face ID, Touch ID, or a secure PIN to inspect and approve credential requests before transmitting attributes over local verifier connections. The digital credential will launch with acceptance at Transportation Security Administration airport checkpoints nationwide—including Bradley International Airport and Tweed New Haven Airport—with commercial verifying businesses directed to compatible scanning solutions such as IDEMIA’s Mobile ID Verify engine.
Armenia Approves Rules for Biometric Passports and ID Cards Issued Through Private Partner
The Cabinet of Armenia has formalized executive regulations establishing public-private issuance workflows for biometric passports and national identity cards, setting an official launch date of November 1 to satisfy critical European Union visa liberalization benchmarks. Under the operational procedures outlined by Interior Minister Arpine Sargsyan, citizens must complete online pre-registration and electronic fee payments through the Migration and Citizenship Service and service partner Haypass, followed by state validation against the State Population Register before booking appointments at 14 regional offices or self-service capture kiosks. The overhaul transitions national credential issuance away from legacy municipal passport departments, establishing standardized biometric capture fees—5,950 drams for identity cards and 28,650 drams for passports—while implementing automated gate readers at Zvartnots Airport to facilitate unassisted border crossings.
Moldova E-Government Chief Resigns After Hack Exposed Data Tied to 750,000 ID Numbers
Nicoleta Colomeeț, the director of Moldova’s e-Government Agency, has resigned following a widespread cyberattack that compromised personal data linked to 750,000 state identification numbers across national public sector databases between October 19 and October 23. Threat actors exploited unauthenticated endpoints within legacy public services to query roughly one million identity codes, extracting नागरिक records including birth details, family ties, vehicle registrations, pensions, and MPay transaction histories before defensive teams disconnected 82 online services and 30 administration portals. Prime Minister Vasile Tofan indicated that state security agencies are investigating potential foreign state-sponsored involvement in the campaign, while interim appointee Artiom Cociu assumes operational oversight of national administrative platforms amid severe agency staffing shortages.
New York Law Requires Age Verification Before AI Chatbots Offer Restricted Features
New York Governor Kathy Hochul has signed legislative statute S.9051B/A.10379C into law, enacting mandatory age verification for AI chatbot platforms to prevent autonomous systems from deploying manipulative, synthetic emotional, or adult interactions with minors. Sponsored by State Senator Kristen Gonzalez and Assemblymember Alex Bores alongside the state attorney general’s office, the mandate bars commercial AI developers from offering romantic, synthetic authority, or self-harm capabilities to users under 18, requiring operators to implement multiple age assurance options, including at least one privacy-preserving verification mechanism that does not rely exclusively on government-issued IDs. Enforced by Attorney General Letitia James, the law mandates the immediate deletion of captured age data upon verification, while imposing civil penalties reaching $25,000 per violation and requiring the destruction of unlawfully collected training datasets.
CCIA Sues to Block Alabama’s App Store Age Verification Law
The Computer & Communications Industry Association has initiated federal litigation seeking to enjoin Alabama’s app store age verification statute, alleging that mandatory age-gating and parental consent rules violate First Amendment protections governing digital application marketplaces, developers, and internet users. Enacted under legislation sponsored by State Representative Chris Sells, the statute compels platform distributors to verify user age brackets, bind minor profiles to parental accounts, secure verifiable parental authorization, and provide software developers with real-time account status updates while barring the enforcement of digital contracts against minors. CCIA contends that conditioning access to expressive software behind mandatory digital credential checks unconstitutionally restricts online communication across protected educational, cultural, and political applications, mirroring legal disputes surrounding comparable app store mandates in Texas.
Ofcom Identifies Four Age Check Methods for UK’s Under-16 Social Media Ban
United Kingdom communications authority Ofcom has published an evaluation outlining four approved age assurance methods capable of enforcing the nation’s upcoming social media prohibition for children under 16, scheduled to take effect in March across ten major digital platforms. Conducted at the request of the Secretary of State, the regulatory assessment approves photo ID document matching against live selfie captures, financial institution banking data checks, facial age estimation, and certified digital identity services as defensible age verification standards. Ofcom Chief Executive Dame Melanie Dawes clarified that social networks bear statutory compliance liability under the Online Safety Act to implement robust age gating and monitor VPN circumvention, rejecting tech industry proposals to transfer verification obligations entirely to mobile device operating systems and hardware app stores.
ICASA Proposes Biometric Home Affairs Checks for SIM Activations, Swaps and Existing Subscribers
The Independent Communications Authority of South Africa has published draft numbering plan regulations in the Government Gazette mandating biometric Home Affairs verification for SIM card activations and SIM swaps to dismantle telecommunications fraud and account takeover schemes. The proposed framework requires mobile network operators to validate subscriber fingerprints or facial biometrics directly against national Department of Home Affairs databases during new activations, while giving carriers a 24-month window to re-verify an existing subscriber base of 117.3 million active mobile accounts. Enforcing a strict cap of five mobile numbers per subscriber and setting fines between R1 million and R4 million per compliance breach, the rules compel operators to deny SIM swaps that fail biometric matching to protect mobile banking customers from intercepted one-time passcodes.
–
By the ID Tech Editorial Team