> If you suspected you had underage users using your service illicitly. Could you not use such methods to find them?
You could use something like that and it would be counted as “legitimate interest” under GDPR, but:
- you wouldn't need (and then would be forbidden) to do segmentation between more categories than “too young”/“old enough”. This is not what they are doing here.
- you'd still need to tell the users that you're doing it, and provide a way for the users to modify that data upon request
> Under age users aren't going to just tell you their age honestly, so you'd have to use some method to derive their age.
You don't have a legitimate interest of knowing their age, only for knowing if they are underage or not.
I wonder at what point analytics, queries, or ML to determine age gets in the way of actually keeping them from getting into things they shouldn't...
Under age users aren't going to just tell you their age honestly, so you'd have to use some method to derive their age.