The United Kingdom has passed the world's first generational tobacco ban: anyone born after 2009 will never be allowed to buy cigarettes legally. It looks bold. But as MIT Technology Review reports, the technical consensus is already clear: the ban is likely to fail. Why? Because age is declared but not truly verified — neither in shops nor online — and the black market is ready to fill the gap.
This law is a test for Europe. Italy, France, Germany are considering similar measures. Yet the core issue is technological: how do you verify digital age without a solid infrastructure? Most e-commerce sites rely on a simple checkbox: “I am over 18.” That's worthless. Even when more serious systems are used — scanned IDs, credit card checks — privacy concerns, compliance costs for SMEs, and fragmented regulations remain. The result? Ineffective bureaucracy and booming illegal sales.
Sponsored Protocol
Our stance
We at Meteora Web see this every day: digital security is not an afterthought. We have built platforms handling sensitive data, and we know age verification cannot be a popup. The UK generational ban is politically appealing but technically brittle. Europe risks repeating the same mistake: legislating without investing in concrete tools. Italy already has SPID and CIE (electronic ID card), public assets badly underused. Instead of abstract bans, we should mandate certified digital identity for age-restricted goods — tobacco, alcohol, vaping, gambling. Our position is clear: without robust, interoperable age verification, every ban is just smoke and mirrors. For Italian SMEs already drowning in compliance, it would be yet another cost with zero return.Sponsored Protocol
Here's what to do. If you sell age-restricted products — offline or online — start integrating SPID or CIE for verification today. Don't wait for a decree that forces you into hasty, insecure solutions with cookies and data leaks. For developers: build lightweight APIs that return only a cryptographically sealed “yes/no”, storing no personal data. For policymakers: fund digital identity adoption, don't multiply penalties. The future of regulation runs on technology, not propaganda.
