Peter Thiel-backed age assurance provider Persona conducts extensive surveillance

Discord has ended its partnership with identity verification firm Persona following a backlash over privacy concerns during a UK-based age-assurance test. The decision follows reports that researchers discovered exposed frontend code from Persona on a server, which revealed the extent of the company's data processing capabilities.

The exposed files indicated that Persona's software performed hundreds of verification checks, including facial recognition scans against watchlists, screening for adverse media, and generating risk scores for users. The code suggested that the platform could analyse IP addresses, device fingerprints, and government identification, with data retained for up to three years. These findings prompted significant public concern regarding the potential for extensive surveillance and the implications of sharing biometric data with a third-party vendor.

Discord has since clarified that it will not continue using Persona, noting that the UK test lasted less than a month and involved only a small number of users. The platform reiterated that it does not require all users to provide government IDs or perform facial scans, maintaining that most adults can be verified through existing account information. Discord continues to face broader scrutiny over its global implementation of age-assurance policies.

Training Announcement: The IAPP Certified Information Privacy Technologist (CIPT) is a privacy-focused professional IT certificate from the IAPP that addresses data protection requirements and controls within complex technological environments. It explores the data lifecycle, privacy risk models and frameworks, the principles of Privacy by Design, and the role of privacy-enhancing technologies within the organisation. Find out more.