I understand that Persona is a US company that is GDPR compliant.
However, is there a reason why you didn’t choose a firm in Europe that will always be under GDPR compliance?
Also, it would be helpful to know what company you considered and why not to understand why you chose Persona.
I have seen in the comment and forum that some pointing to a class action lawsuit or the parent company saying Persona is not trustworthy, and without a valid reason for your choice I am a little concerned.
Acutally one more question.
Is VRChat aware that they are on the hook here with regards to GDPR in this case?
VRChat is the data controller and is the one responsible for compliance with GDPR.
Users are customers of VRChat and not Persona.
This also means in the any fines in regard to GDPR will be levied against VRChat first and foremost since the customer relationship is between users and VRChat.
Persona is a data processor not a data controller in this case.
You cannot defer this responsibility to Persona or any other company.
Ref Art. 24 of GDPR
How we would get to know if we can verify our age? Or if even we in a group that paticipate in the test?
Also i did already verify my ID with Persona, how will i get that linked with VRChat?
Does the age verification still apply to those who have put their real age when signing up to VRChat and wouldn’t matter? Or do people who are 18+ able to skip the optional verification for accessing events etc?
I do not condone to this feature, although I do see some good aspects for younger people who are below the required age. So I was wondering if the birthdates first joining take affect to the badges.
A question, is it the bot who will going to verify all these age verification? cause I would be going to have issue when they would be misidentify my birth date since my ID’s have like two dates, A date of birth and an issue date.
Is there going to be a way of requiring age verification WITHOUT also needing to be over 18?
as you know, hiding your “trusted” or “known” ranks only hides it in game, but your rank is always transparent to the API and by extension 3rd party tools like VRCX.
now, does hiding your verification badge work the same way, or is it properly hidden? i may want to have the option to join 18+ instances, but i don’t want people to be able to look up the fact that i’m above 18 at their discretion.
…
edit to add: not really a question, but please ensure that portals to 18+ instances, as well as the instances themselves in the world menu, are clearly marked. if you’re playing with someone who’s not verified and you unknowingly leave them behind because you didn’t know you’re about to enter an 18+ world, well, that’d suck. transparency is key in this regard.
Re: Verifying multiple accounts.
Why not allow us to link verification internally? It remains against the rules to be on an alt when your main is banned, I can’t imagine that having multiple accounts point to the same Persona user would cause too many problems, would it? I’d verify multiple times if it meant my alt wasn’t locked out.
i have a question do a birth paper like to say your parent give you birth do that work? (if yes i gonna do that)
Because government id’s are really prone to abuse, like identity fraud. I find it odd that only unsafe verification methods are available while safe alternatives, especially in the EU, exist.
Will you consider adding alternatives to uploading your government id?
For example:
Credit cards
In some countries you can verify your age using a Credit Card.
See: Update your account to meet age requirements - Google Account Help?
eID
Several European countries implement alternatives like eID, third parties like Persona can ask for specific information, like name and birthday. Once the user logs in with the eID provider, they will have to give explicit concent to share the data Persona asked for.
This way you can verify someones age without them having to share a photocopy of their identity:
See Age Verification for Delivery Services via eID by Criipto
How are you going to deal with, the influx of reports when people start harassing those who do not have the badge? Or who refuse to get verified becouse they do not wish to dox themselves to a dangrous third party with a track record of failure, to use your platform? As has been the pattern of behavior on the platform for years, starting with the User trust system?
How is this system opt in, if all instances will eventually be gated behind age verification. As well as events such as DJ events and new years and possibly even VKET.
Are you aware how many of your major creators you are going to alienate with this?
How would one know if there group was chosen for the age verification programs testing phase?
is there a specific email or VRChat notification we should look out for???
Is there currently a roadmap for groups to be granted this verification? For example: Users that have applies > Beta Testers > VRC+ users > Community
Aka- I desperately wanna do this now
If I have age verified for another platform using Persona will I be required to do so again for VRChat?
you state
“You may also request that Persona delete your ID data at any time. This will not affect your Age Verification status.”
and
“This data is held to ensure that IDs are not used in duplicate or for alternate accounts. This data is not tied to your VRChat account.”
my questions are:
- what should we tell persona in order to have them delete all data except that which is required to prevent the ID being used in multiple accounts? what is the procedure, the exact wording?
- after persona deletes all other data besides that, what data would they retain? presumably the hashed vrchat account id, but would they store something like the name on your ID, or some unque ID number like you drivers license number? specific details please, nothing vague.
- will you address the fact that persona has in the past given private sensitive personal data of its users to other companies that have been sued for breaches of privacy? how can we trust that they wont do this again with vrchat users data? how can we prevent them from training unethical privacy violating AI systems on our pictures? are there truly no better options for this service?
basically, after theyve verified, they are only justified in retaining one unique identifier from your ID in text form, and the associated vrchat hash. they have no justification retaining the submitted images or fuller ID info for their shady ai stuff, and the fact that they WANT to retain things they dont require to prevent duplicates, and that vrchat is not pushing them on this, is suspicious in the extreme, and i am almost insulted that this has not been properly addressed and vrchat is clearly avoiding actually answering this question (see the deflecting non-answer to the lackofbinding et all.question).
we are entering a time where people are targeted for exploitation by corporations using AI, and violence by extremist groups and governments for being members of marginalized groups. vrchat is a community full of marginalized peoples who are absolutely the targets of state violence and genocidal intent. vrchat has a responsibility to protect its users from harm associated with their data privacy, and this system as i currently understand it, doesnt quite meet that responsibility. we need more transparency.
if we can get exact details on what single piece of unique data persona needs to retain in order to maintain verification status, and exact details on how to get persona to delete everything but that one piece, i will be satisfied. otherwise, this system is failing to protect vrchats users and is in fact putting them in more danger by spreading their personal information around in ways that could be exploited by governments and extremist groups to target them for violence, or at least expose their private data to potentially unethical exploitative corporate AI experiments.
Will age verification be rolled out globally or just in the US and EU?
Will things like a Japanese driver’s license or residence card work?
Is it ok to submit an expired document like an old passport/driver’s license to verify your age if you are worried about how secure our information is kept?
Will VRC provide more information on the process of deleting our information from persona or take other steps to streamline it for the users?
Does deleting our data on persona take away the age verification on VRChat?
Thank you for finally adding this feature.
How do we know if we were chosen to test this out?
Will the process happen in-game or on the website?
While I’m fully on board with age verification and wish for it to be the main priority, I’m kinda worried about the privacy and security side of it… like, if we can request to have the info deleted from their servers, why not just do it after the verification has been accepted? I know was probably already stated that persona is pretty secure and private, but I did kinda skim it, and this is just a hypothetical, since persona also works with money based services like chime and square, wouldn’t that make them an attack target for hackers and identity thieves, and were persona to get hacked, do they have a policy where they will delete the data before the hackers get any of it? Cause I don’t want persona to one day be hacked and my identity stolen. That’s really my only and main concern, other than that, as I said, I am on board with vrc age verification.
How will we know if our group was selected for the Age Verification Beta?
I’m really glad this is happening.
Now i wonder how will we know if we get selected to test this feature?
Will this be based of how long you’ve been playing this game?