In the early days of the Internet, it was common to have age verification sites, meaning you could only view the site if you’ve verified your age by proving your 18 with your credit card. France had decided that won’t work for them.

French digital authorities have officially barred pornography websites from using credit card data for age verification, mandating more privacy-conscious methods under newly enforced national regulations.

The French audiovisual and digital regulator, Arcom, announced on Thursday that all pornographic websites accessible to users in France—whether based domestically or outside the EU—must now adopt “double-anonymous” age verification systems to prevent minors from accessing adult content. The rule follows a three-month grace period for compliance, stemming from a 2023 law passed by the Assemblée Nationale to tighten protections for minors online.

Double-anonymous (or double-blind) age verification, supported by France’s data protection authority CNIL, allows platforms to confirm a user’s age without identifying them or retaining personal data. These systems rely on cryptographically signed age assurance certificates, issued by third-party verifiers, ensuring websites only receive proof of age—not personal identity.

“Sites must implement solutions that guarantee both age verification and the privacy of users,” said an Arcom spokesperson, reaffirming that credit card checks are no longer compliant under France’s framework due to their insufficient privacy protections and potential misuse.

The policy applies to France-based porn platforms and non-EU sites with French user traffic. Non-compliant platforms could face legal and regulatory action under Arcom’s enforcement powers.

The French model aligns with the EU’s broader vision for online safety. The euCONSENT initiative, a pan-European age assurance effort, is currently piloting its tokenized “AgeAware” verification system, which also emphasizes minimal data retention and anonymity.

Other European countries are considering parallel approaches. Spain’s AEPD, for instance, has recommended device-based age verification, citing concerns over child predator risks in age-check systems.

France’s move to prohibit credit card-based verification highlights the growing consensus among regulators that effective child protection must be balanced with strong privacy safeguards. Arcom said it will continue monitoring implementation and may issue additional guidance to platforms navigating the new compliance landscape.