You handed over your ID to prove you're old enough to play a rated-M game or scroll TikTok past bedtime, and now that data might be doing a world tour nobody signed you up for. According to a report covered by Kotaku, Yoti - the age verification service baked into platforms like PlayStation, Meta, and TikTok - is apparently "relying on sharing sensitive user information with several less user-visible fourth parties."
Let that sink in for a second. Not third parties. Fourth parties. We're deep in the DLC of data sharing here, folks, and nobody told you there was a season pass involved.
So what exactly is Yoti?
Yoti is one of those behind-the-scenes services that platforms plug in to comply with age verification laws - the kind that ask you to upload a selfie or scan your ID before you're allowed access to certain content. Sounds reasonable on paper. The problem is that according to the report cited by Kotaku, the chain of who actually sees your data doesn't stop at Yoti itself. It keeps going, quietly, to entities most users have never heard of and definitely didn't consent to.
This is basically the privacy equivalent of handing your house key to a friend, who gives it to their roommate, who lends it to a guy named Steve. You only knew about the friend.
Why this matters for gamers specifically
PlayStation is one of the named platforms using Yoti's service, which means if you've recently gone through an age verification step on PSN, your biometric or identity data may have taken a longer journey than your last online match. And unlike a bad K/D ratio, you can't just reset this one.
With age verification laws tightening globally - especially in the UK and parts of the US - more platforms are being pushed to implement these systems fast. The rush to comply, however, seems to be outpacing the rush to do it in a way that actually respects user privacy. Classic "ship it now, patch it later" energy, except the bug is your face and your passport.
What can you actually do?
Honestly? Not much right now beyond staying informed. The Kotaku report doesn't suggest your data has been outright breached, but the lack of transparency about who handles it is a red flag the size of a loading screen error. Keep an eye on privacy policy updates from any platform that has asked you to verify your age recently - and maybe send a strongly worded support ticket into the void, as one does.
We'll be watching this one. Age verification was supposed to protect users. It probably shouldn't come at the cost of their privacy in the process.
