France's age verification framework requiring that the website cannot identify the user and the verification provider cannot know which website the user visits.
ARCOM Double Anonymity is the core architectural requirement of France's age verification framework. It mandates two-way anonymity: the website cannot identify the user, and the verification provider cannot know which website the user is visiting.
This requirement has been mandatory since 11 April 2025 under the Loi SREN. Enforcement is aggressive: ARCOM can order ISP blocking within 48 hours, and penalties reach up to 4% of worldwide turnover.
An identity verification approach where a trusted provider issues a cryptographic attestation about a user's attributes without transferring the underlying personal data.
A GDPR principle (Article 5(1)(c)) requiring that personal data collected must be adequate, relevant, and limited to what is necessary.
