On 11 June 2026, Ireland's Department of Communications confirmed that people accessing pornography websites in Ireland could be required to prove they are over 18 using the State's new digital ID wallet — a beta product built on MyGovID and linked to a person's social welfare record. The Department framed the wallet as a tool to "support compliance" with Coimisiún na Meán's Online Safety Code, which already obliges video-sharing platforms to keep under-18s away from pornography. Communications Minister Patrick O'Donovan has gone further, floating the same wallet as a mandatory age gate for social media — a signal sent deliberately as Ireland prepares to take the Council of the European Union presidency in July 2026 with child online safety as a headline priority.
The case for the State stepping in
The strongest version of the regulators' argument deserves to be stated plainly. Coimisiún na Meán's Online Safety Code, whose detailed provisions came into force on 21 July 2025, is not a vague aspiration: it designates nine major platforms — including Instagram, YouTube, TikTok and X — and backs its rules with fines of up to €20 million or 10% of turnover. Crucially, the Code says that age assurance "based solely on self-declaration" is not effective. That is a defensible empirical judgement. A tick-box asking "Are you 18?" stops no one, and children do encounter extreme material. If a jurisdiction accepts that platforms must verify age, then a State-issued credential is, in theory, more privacy-protective than handing a passport scan or a face to a private US-based porn conglomerate. The Department's instinct — that government should not outsource identity to Aylo — is not unreasonable on its face.
Why the UK model is a warning, not a template
The trouble is that Ireland is explicitly modelling itself on the UK, and the UK results are sobering. After Britain's Online Safety Act age-verification duties took effect in July 2025, Pornhub reported that its UK traffic fell by roughly 77%. Supporters call that compliance working. But traffic that vanishes from the regulated front door does not vanish from the internet. It migrates — to non-compliant sites with no moderation, to VPNs, and to the open sewer of file-sharing and Telegram. A measure that pushes minors from a site that at least responds to a regulator toward sites that ignore one has not obviously made children safer; it has made them harder to protect. Aylo, Pornhub's parent, ultimately restricted access to new UK users rather than comply, arguing the rules degrade privacy without improving safety. Whatever one thinks of the company, the structural point stands: friction at the compliant edge is not the same as safety across the network.
The mission creep is the real story
The porn gate is the narrow case. The wallet's logic does not stay narrow. Minister O'Donovan's suggestion that the same credential become the age gate for social media is the moment a content-specific safeguard turns into a general-purpose internet identity layer. Ireland's own civil-society watchdogs have said so bluntly. The Irish Council for Civil Liberties and Digital Rights Ireland warned on 8 December 2025 that tying MyGovID to social platforms would mean "users could no longer browse the Internet with any degree of anonymity," because most sites are wired to social-media and ad networks through cookies and tracking pixels — so "every web page access could be traced back to a specific Irish holder of a Public Services Card."
That is not a hypothetical privacy worry; it is an architectural one. An age check that runs once and forgets is proportionate. An identity credential that brokers your entry to social media, and is linked to your social welfare file, is an infrastructure of attribution. The two are sold under the same word — "verification" — but they are not the same thing.
A credibility problem the State has not answered
There is also the awkward foundation. The same civil-liberties groups note that the Public Services Card underpinning these digital IDs relies on a data-processing mechanism — the so-called SAFE2 system — that Ireland's Data Protection Commission found unlawful. Building the country's child-safety architecture on a database a regulator has already ruled illegal is not a detail; it is a governance failure waiting to be litigated. The MyGovID app itself sits at one star on both major app stores. Asking citizens to route their access to lawful adult content and everyday social media through that pipe is a large request to make on thin public trust.
What proportionate looks like
None of this means doing nothing. A proportionate regime would keep three lines bright. First, age verification should be purpose-bound: a credential used to confirm 18+ for adult content must be technically incapable of logging which sites a person visits, ideally using zero-knowledge "over-18" tokens that prove a fact without revealing an identity. Second, it should be voluntary in form — one accepted method among several, never the only key to the social internet, which is what the Irish Times notes the wallet is not (yet) meant to be. Third, it should be independently audited before launch, not after a breach.
Ireland is about to hold the EU's pen for six months. The standard it sets in July 2026 will travel. The choice is between exporting a narrow, privacy-preserving age check and exporting a template for State-brokered internet identity. The Online Safety Code's goal — keeping children away from genuinely harmful material — is legitimate. The wallet, as currently sketched, reaches well past it.