Age Verification in France
Meet ARCOM double anonymity requirements with privacy-first verification. Passtru satisfies the Loi SREN framework without transferring personal data.
Regulatory Context
France has the most stringent age verification framework in the world. The ARCOM referentiel, formally adopted via Deliberation n 2024-20 (9 October 2024), mandates "double anonymity": the website cannot identify the user, and the verification provider cannot know which website the user is visiting.
Full double-anonymity solutions have been mandatory since 11 April 2025, when the transitional bank-card verification period ended. The legal basis is the Loi SREN (Loi n 2024-449, 21 May 2024).
Enforcement is aggressive: 17 EU-based video-sharing platforms were designated by ministerial decree (26 February 2025, effective 7 June 2025). Aylo (Pornhub parent) suspended France access. Teen traffic to adult sites dropped 35%. Penalties reach up to 4% of worldwide turnover for repeat offenses, and ARCOM can order ISP blocking within 48 hours.
How Passtru Complies
Passtru's attestation architecture is structurally aligned with ARCOM's double anonymity requirement. The verification flow ensures the platform receives only a binary age attestation without any identifying information, and Passtru does not receive information about which platform requested the check.
The CNIL issued a favorable opinion (Deliberation n 2024-067) on the double anonymity approach. France Identite entered closed beta for age verification in January 2026, using cryptographic binary attestations without PII transfer, validating the same architectural pattern Passtru implements.
Technical Implementation
Integration uses the Passtru SDK with the age verification endpoint. The user authenticates with their Passtru vault, and the system returns a signed attestation confirming age eligibility. No date of birth, name, or other personal data is included in the response.
The attestation is cryptographically signed using ES256 via Vault Transit, verifiable against Passtru's published JWKS endpoint. Platforms can verify the attestation independently without contacting Passtru.
Ready to deploy age verification in France?
Get started with Passtru's privacy-first verification for France.