A leaked password is an inconvenience. You reset it and move on.

A leaked password is an inconvenience. You reset it and move on.

A leaked identity document is permanent. The number stays valid for years. The photograph stays you for life.

The GDPR classifies biometric data as a special category precisely because of this asymmetry — it recognises that some data cannot be undone.

Yet the standard way to prove your age online is still to hand over exactly that.

The safest place for data that can't be replaced is somewhere it was never collected.