Thomas Lohninger of epicenter.works gave a talk at the recent chaos communication camp about what the EU is doing in this area:
https://media.ccc.de/v/camp2023-57548-digital_identity_and_digital_euro
he notes that the EU is working on some methods to do age verification without disclosing government id explicitly - some involving zero knowledge proofs - but he makes a few critical points:
1. the "digital wallet" system they are proposing is going to be a very high-value target with a fairly large attack surface
2. government-issued hardware wallets are not accessible to undocumented migrants
3. not everyone has a phone they can use for this purpose
(16a) says the age verification should be "non-discriminatory and accessible", but I don't see how that's possible given the points above without falling back to scans of government id
I'll keep reading so that I have an idea of what's to come if this passes, but I'm only on page 12 of 199 and there's no sign that things will get any better, so I'm not going to livetoot the whole read-through.
I'll just reiterate that the #chatControl legislation is an absolute shitshow.
The people pushing for this are either ignorant or malicious. They claim to want to protect the public, but their manner of doing so will very obviously harm large groups that are already marginalised.