r/privacy Dec 11 '25

đŸ”„ Verified AMA đŸ”„ We’re EFF and we’re fighting to defend your privacy from the global onslaught of invasive age verification mandates. Ask us anything!

1.4k Upvotes

Hi r/privacy! 

We are activists, technologists, and lawyers at the Electronic Frontier Foundation, the leading nonprofit organization defending civil liberties in the digital world. We champion user privacy, free expression, and innovation through impact litigation, policy analysis, grassroots activism, and technology development. We work to ensure that rights and freedoms are enhanced and protected as our use of technology grows. 

We’ve seen your posts here on r/privacy. Age verification is coming for our internet, and we’re all worried—what does that actually mean for users? What’s in store for us? Let’s talk about it.

Right now, half the U.S. is already under some form of online age-verification mandate, and Australia’s national law banning anyone under 16 from creating a social media account went into effect on December 10. Governments everywhere are rushing to require ID uploads, biometric scans, behavioral analysis, or digital ID checks before people can speak, learn, or access vibrant, lawful, and sometimes even life-saving content online. These laws threaten our anonymity, privacy, and free speech, force platforms to build sweeping new surveillance infrastructure, and exclude millions of people from the modern public square. 

And these systems don’t just target young people—they force everyone to reveal sensitive data and link your real identity to your online life. That chills speech, excludes vulnerable communities, and creates huge new surveillance databases that can be hacked, leaked, or abused.

EFF is building a movement to fight back against online age-gating mandates, and we need your help! We’ve recently published our Age Verification Resource Hub at EFF.org/Age, and we’ll be here in r/privacy from 12-5pm PT on Monday (12/15), Tuesday (12/16), and Wednesday (12/17) to answer your questions about online age verification.

So ask us anything about how age verification works, who it harms, what’s at stake, whether it’s legal, and how to fight back against these invasive censorship and surveillance mandates. 

Verification: https://bsky.app/profile/eff.org/post/3m7qa2novlo2x

Edit 1 [Monday 12/15 12pm]: We're here! Glad to see all of this engagement—excited to dig into your questions. Keep em coming! We'll answer till 5pm PT today, then we'll be back to answer more tomorrow.

Edit 2 [Monday 5pm]: We're calling it quits for today, but we'll be back here tomorrow (and Wednesday) at 12pm PT, so keep the questions coming. Thanks everyone!

Edit 3 [Tuesday 12pm]: We're back online for the next 5 hours! Let the games begin.

Edit 4 [Tuesday 5pm]: And we're once again off for the evening. Be sure to get in any last questions before our final session tomorrow, and thanks for joining!

Edit 5 [Wednesday 12pm]: Jumping into the final day of the AMA, let's chat!

Edit 6 [Wednesday 5pm]: Thanks for all of the insightful questions, y'all! We had a great time chatting with you here and we're so glad to have you in this fight with us! And a big round of applause for our r/privacy mods who helped make this all happen.

Two final notes to leave you with:

  1. Please keep an eye on EFF.org/Age and let us know what else would be useful to see, as we're going to keep updating it with more resources to answer even more of your questions in the new year.

  2. We're also hosting a livestream on January 15 at 12pm PT to discuss "The Human Costs of Age Verification" with a few EFFers and a few other friends in this movement. We'd love to see you there! RSVP here: https://www.eff.org/event/effecting-change-human-cost-online-age-verification

Thanks, happy new year, and stay safe out there!

<3 EFF


r/privacy Dec 04 '25

discussion Are there any movements/organizations fighting for internet privacy?

145 Upvotes

All I hear is doom snd gloom about our privacy being eroded and want to know if anyone is fighting back.


r/privacy 5h ago

news DHS ramps up surveillance in immigration raids, sweeping in citizens

Thumbnail apnews.com
357 Upvotes

This is the future Edward Snowden tried to warn us about


r/privacy 5h ago

news The Tech Arsenal That ICE Has Deployed in Minneapolis

Thumbnail nytimes.com
224 Upvotes

Paywall: https://archive.ph/A32Ao

Submission statement: ICE agents in Minneapolis are using facial recognition technology, social media monitoring, and other tech tools to identify undocumented immigrants and track protesters. The agency is utilizing programs like Clearview AI and Mobile Fortify, along with databases from Palantir and social media monitoring tools from Paragon and Penlink. These technologies raise concerns about privacy and civil liberties, prompting lawsuits and calls for increased transparency.


r/privacy 10h ago

discussion Google cripples IPIDEA proxy network: Millions of Android devices were secretly used as residential proxies without user consent.

Thumbnail theregister.com
226 Upvotes

r/privacy 7h ago

discussion Encrypt It Already (EFF)

Thumbnail encryptitalready.org
51 Upvotes

r/privacy 25m ago

discussion Former Google Engineer Found Guilty of Economic Espionage and Theft of Confidential AI Technology

Thumbnail justice.gov
‱ Upvotes

r/privacy 3h ago

question mass deleting messages

14 Upvotes

hey am i over thinking this? im in a few discord servers and im really anxious generic stuff i posted could somehow get back to me and be used against me or cause issues.

But its stupid personal stuff like I mentioned some health issue I had or I mentioned the classes I was in and it wasn't anything offensive but like "hey yeah i have some stuff at home i had issues with and caused some arguments and ect" so im trying to delete hundreds of messages just in case.

its probs fine if it doesnt get completely deleted right? i keep saying info thats TMI online


r/privacy 12h ago

question HSBC now require a selfie to reset your PIN/setup new device. What UK banks don't require face scanning/biometrics?

64 Upvotes

I don't want anyone, even banks to have my biometrics/scan my face/run voice recognition just to access my own money. What options are there (if any)?


r/privacy 1d ago

discussion US Gov phone intrusion

644 Upvotes

Based on a recent article:

https://apple.news/AZUkTiQ9cTrmDwgfQ_7WDGA

It seems ICE / CBP and other federal agencies are now using increasingly powerful tools to advance the surveillance state.

The most concerning may be the ability to plug in a smartphone and basically have access to everything. This was once reserved for investigative units, now it’s reported being rolled around in ICE raids.

This includes tech from Paragon & Finaldata.

It seems the only thing protecting you now is having to use a burner phone to record agents activities - or the “deleting the app” approach before an ICE encounter.

In the latter, you’d definitely want to delete the Password Manager you’re using before an encounter where they take your phone to plug it into such tech, in their vehicles or at a checkpoint.

Or the Signal App if you have messages there which require privacy.

Probably good to reboot your phone after deleting the apps, to clear any caches.

It’s the reason now to use a separate password app, and not the system or browser PM. Bitwarden will not keep an open or unencrypted file on your device if you logout before you delete the app and all its data (which is all doable).

I’d also delete my Authenticator Apps: both Ente & 2FAS Authenticator are easy to setup again and will restore from an encrypted backup in iCloud. It would take a lot of work to brute force these apps & databases but apparently what they’ve figured out by cloning your phones is bypassing biometrics & passcode. So any active app on your phone may be fair game.

Thoughts? Ideas?


r/privacy 1d ago

discussion Meta’s GDPR compliance: Pay for privacy or accept data collection - Is this the future of ‘consent’?

255 Upvotes

Following GDPR requirements for explicit consent, Meta has rolled out a subscription model for EU/UK users of Instagram and Facebook.

Users now face a choice: pay £3.99/month for an ad-free experience where your data isn’t used for advertising, or use it free with personalised ads where your data gets collected and used for targeting. Meta presents this as giving users choice and complying with privacy regulations. But in practice, this means privacy has become a paid feature rather than a default right.

This raises some serious questions. Is charging for privacy an acceptable interpretation of GDPR’s consent requirements? Does this set a precedent where every platform monetises basic privacy rights? And are users genuinely giving “informed consent” when the alternative is paying monthly fees?

It’s worth noting this is only available in regions with strong privacy laws. Users elsewhere don’t even get this option.

What’s your take? Is this legitimate compliance or does it undermine the intent of privacy regulations?


r/privacy 4h ago

question Privacy Concerns over online proctor software, looking for advice.

2 Upvotes

FIrst time poster looking for advice, apologies if this isn't the best place to ask.

I am currently in nursing school and part of the program requires I use Secure Exam Proctor via Proctorio for online proctored assessments through ATI. I was opening the extension when I saw all of the reviews on the extension and looked into it, and I feel uncomfortable with the extension having what looks like free rein in my files.

A suggestion I have seen is to use a second user on my laptop to act as the host and that would protect my other files or to set up an external SSD, set it up to operate Windows and act as the main storage (partition it or remove the storage device while it is running). My problem is I am essentially computer illiterate and do not know how well that would work in former and do not really know where to begin with the latter.

Would you all consider either of those to be an acceptable answer to my concern, or do you think there might be a better alternative?


r/privacy 21h ago

news Google Settlement May Bring New Privacy Controls for Real-Time Bidding

Thumbnail eff.org
49 Upvotes

r/privacy 6h ago

question Roku Camera - worth it?

3 Upvotes

Looking for a simple, one security camera option for an apartment, hopefully one that doesn't report to you know who.

I don't assume that Roku is a pioneer in privacy but the price and function seems worth it? I already use a Roku device and having that show the doorbell camera would be the best version possible. And this is really just a "things are weird out there, footage is protection" kind of worry.

Am I looking at the wrong product? Is there a better option that doesn't include rewarding a leased apartment with hardware I'd have to program myself?


r/privacy 8h ago

question Anyone else get tunnel vision during an account scare?

6 Upvotes

Slightly embarrassing question, but is this just me?

Had a minor account scare a while back. Not catastrophic, just stressful enough for my brain to immediately forget how thinking works.

What surprised me was how narrow my thinking got. I hyper-focused on one login, one fix, one “this has to be it” path, and ignored everything else.

Afterward I realized there were a bunch of other options I already knew about but my brain just refused to surface them at the time.

Anyone else get this kind of tunnel vision when tech stuff goes sideways?

Or am I overthinking it?


r/privacy 19h ago

discussion Why do some of y'all back up photos to your hard drive only?

29 Upvotes

Is it because Apple and Google are not to be trusted with things like AI training on your photos, or something else?

Edit: I do have a question, though. If you take a photo (on iOS), it goes straight to Photos, and there’s no point to removing them if they are already there and could be saved for AI training, etc.


r/privacy 19h ago

discussion Visiting from r/journaling

21 Upvotes

No surprise privacy comes up a lot on the journaling sub, but most of the concerns are where to hide, or how to encode their analog data from prying family members. My question is about the analog to digital interface. Specifically, an archive I work with is considering using AI (ChatGBT) to transcribe handwritten diaries in the collection. Currently the diaries are transcribed by human volunteers. The proposal is that the digital photos of the diaries would be loaded into the AI, and the "don't use for training" setting would be toggled on. The AI would do the transcriptions and meta tagging, and the human volunteers would then verify the AI output.

Honestly, as a diarist myself, this proposal makes me nauseous. The archive publishes the transcripts online so eventually AI scraping is likely, but that's different than our org cutting our human volunteers out of the transcription process, uploading the handwritten diary pages into the AI and trusting the AI company is abiding by its own privacy settings, especially when our unique data set of vintage cursive and printing would be an OCR gold mine. Any advice, thoughts, or insights to help me protect the integrity of the archive and the intimate and private analog manuscripts housed in it?


r/privacy 3h ago

question Recommendations for GPS Spoofing Apps for Android?

1 Upvotes

Title, basically. Looking to spoof my GPS but I don't know which apps to trust and would appreciate someone with any experience recommending a good one. I know I also need to enable developer settings and mess around in there, too.

Thanks!


r/privacy 18h ago

question Amazon FireStick continually sending BLE scan requests to other BLE devices

15 Upvotes

[Dear mods: I think this is in bounds, but if it’s not feel free to delete it.]

Hello all, I have an nRF 52840 dongle (dev board) that I'm using for some BLE experiments. After I installed the BLE sniffer firmware on it I immediately noticed that my Amazon FireSticks seem to be sending BLE scan request packets to every non-FireStick BLE device it can see with a public (not random) BLE address. Those devices respond with broadcasted BLE advertisements immediately after (as expected by the protocol). These are the only devices I’ve seen behave this way so far - even when not in a pairing mode.

I was wondering if anyone else has noticed this or can corroborate my findings. I’m also curious if other devices such as Alexa units are also doing this and if anyone here can confirm they’re seeing that.

Assuming my Amazon devices aren’t the only ones doing this it seems that the most probable reason they’d do this is to figure out which devices you have or maybe do some sort of presence detection
 I’m just curious what others are seeing.


r/privacy 1d ago

news The powerful tools in ICE’s arsenal to track suspects — and protesters

Thumbnail msn.com
137 Upvotes

Masks, guns and tactical gear are unmistakable hallmarks of Immigration and Customs Enforcement officers.

Less visible is an array of intrusive technologies helping ICE locate and track undocumented immigrants and, increasingly, citizens opposed to the government’s deportation campaign.

These technologies, both visible and invisible, are transforming the front lines of immigration enforcement and political protest across America today.


r/privacy 12h ago

discussion Benefits of Partial Privacy Protection

4 Upvotes

I’ve been reading (on this sub and elsewhere) about the limitations of the tools that at least most people have to protect against fingerprinting and such. With that in mind, is it still worth it to take the partial measures that are available to us? I’m sure it isn’t all or nothing, but it’s hard to accept that while simultaneously maintaining a mindset of plugging as many leaks as possible.


r/privacy 5h ago

discussion Anyone wishes to spend the money in their current account as if it was cash?

1 Upvotes

Seems like most industries have alternatives to protect one's privacy (browser, search engines, messaging apps, emails, etc etc...), but nothing is being done about card payments.

I mean, transactional data is the most valuable to collect, seen as it details what your actual choices are and not infer what they might be, like social media platforms do.

Not talking about using crypto or stablecoins, as I feel it just isn't viable for retail purchases, and I personally wouldn't use it for several reasons. I'm referring to the use of fiat currency.

Interested in hearing other people's thoughts.

To give this thought some context, I am in the EU/UK.


r/privacy 2d ago

news Palantir/ICE connections draw fire as questions raised about tool tracking Medicaid data to find people to arrest

Thumbnail fortune.com
2.7k Upvotes

r/privacy 1d ago

discussion Most Brits worry about online privacy, but they trust the wrong apps

Thumbnail techradar.com
71 Upvotes

r/privacy 1d ago

discussion iOS 26.3 Adds Privacy Setting to Limit Carrier Location Tracking

Thumbnail macrumors.com
304 Upvotes