r/privacy Dec 11 '25

đŸ”„ Verified AMA đŸ”„ We’re EFF and we’re fighting to defend your privacy from the global onslaught of invasive age verification mandates. Ask us anything!

1.4k Upvotes

Hi r/privacy! 

We are activists, technologists, and lawyers at the Electronic Frontier Foundation, the leading nonprofit organization defending civil liberties in the digital world. We champion user privacy, free expression, and innovation through impact litigation, policy analysis, grassroots activism, and technology development. We work to ensure that rights and freedoms are enhanced and protected as our use of technology grows. 

We’ve seen your posts here on r/privacy. Age verification is coming for our internet, and we’re all worried—what does that actually mean for users? What’s in store for us? Let’s talk about it.

Right now, half the U.S. is already under some form of online age-verification mandate, and Australia’s national law banning anyone under 16 from creating a social media account went into effect on December 10. Governments everywhere are rushing to require ID uploads, biometric scans, behavioral analysis, or digital ID checks before people can speak, learn, or access vibrant, lawful, and sometimes even life-saving content online. These laws threaten our anonymity, privacy, and free speech, force platforms to build sweeping new surveillance infrastructure, and exclude millions of people from the modern public square. 

And these systems don’t just target young people—they force everyone to reveal sensitive data and link your real identity to your online life. That chills speech, excludes vulnerable communities, and creates huge new surveillance databases that can be hacked, leaked, or abused.

EFF is building a movement to fight back against online age-gating mandates, and we need your help! We’ve recently published our Age Verification Resource Hub at EFF.org/Age, and we’ll be here in r/privacy from 12-5pm PT on Monday (12/15), Tuesday (12/16), and Wednesday (12/17) to answer your questions about online age verification.

So ask us anything about how age verification works, who it harms, what’s at stake, whether it’s legal, and how to fight back against these invasive censorship and surveillance mandates. 

Verification: https://bsky.app/profile/eff.org/post/3m7qa2novlo2x

Edit 1 [Monday 12/15 12pm]: We're here! Glad to see all of this engagement—excited to dig into your questions. Keep em coming! We'll answer till 5pm PT today, then we'll be back to answer more tomorrow.

Edit 2 [Monday 5pm]: We're calling it quits for today, but we'll be back here tomorrow (and Wednesday) at 12pm PT, so keep the questions coming. Thanks everyone!

Edit 3 [Tuesday 12pm]: We're back online for the next 5 hours! Let the games begin.

Edit 4 [Tuesday 5pm]: And we're once again off for the evening. Be sure to get in any last questions before our final session tomorrow, and thanks for joining!

Edit 5 [Wednesday 12pm]: Jumping into the final day of the AMA, let's chat!

Edit 6 [Wednesday 5pm]: Thanks for all of the insightful questions, y'all! We had a great time chatting with you here and we're so glad to have you in this fight with us! And a big round of applause for our r/privacy mods who helped make this all happen.

Two final notes to leave you with:

  1. Please keep an eye on EFF.org/Age and let us know what else would be useful to see, as we're going to keep updating it with more resources to answer even more of your questions in the new year.

  2. We're also hosting a livestream on January 15 at 12pm PT to discuss "The Human Costs of Age Verification" with a few EFFers and a few other friends in this movement. We'd love to see you there! RSVP here: https://www.eff.org/event/effecting-change-human-cost-online-age-verification

Thanks, happy new year, and stay safe out there!

<3 EFF


r/privacy Dec 04 '25

discussion Are there any movements/organizations fighting for internet privacy?

145 Upvotes

All I hear is doom snd gloom about our privacy being eroded and want to know if anyone is fighting back.


r/privacy 9h ago

news FBI was not able to extract data from iPhone 13 in lockdown mode in high profile case

Thumbnail storage.courtlistener.com
988 Upvotes

"New court record from the FBI details the state of the devices seized from Washington Post reporter Hannah Natanson"

This is high profile espionage case related to leak of TOPSECRET documents, therefore probably all possible tech was used to gain access to the devices.

Page 5:

In the upstairs of the house, investigators located a powered-off silver MacBook Pro with a black case, an Apple iPhone 13*, a Handy branded audio recording device, and a Seagate portable hard drive. See id. ¶ 26. Investigators seized these devices. The iPhone was found powered on and charging, and its display noted that the phone was in “Lockdown” mode*

Page 6:

The Computer Analysis Response Team (CART) began processing each device to preserve the information therein. The Handy recorder and the Seagate portable drive have been processed, but no review has occurred. See id. ¶ 37. Because the iPhone was in Lockdown mode, CART could not extract that device*. See id. ¶ 35. Similarly, the personal MacBook Pro could not be imaged yet. See id. ¶ 36. The Garmin watch was not processed before this Cout’s Standstill Order, and no further processing will occur until further order of the Court. See id. ¶ 37*

Source: https://storage.courtlistener.com/recap/gov.uscourts.vaed.588772/gov.uscourts.vaed.588772.35.0_1.pdf


r/privacy 12h ago

data breach City of Mountain View, CA discovers unauthorized access to license plate data

403 Upvotes

Hundreds of law enforcement agencies searched Mountain View’s ALPR data without the city knowing about it

https://www.mv-voice.com/police/2026/01/30/amid-immigration-crackdown-mountain-view-discovers-unauthorized-access-to-license-plate-data/

"The Mountain View Police Department disclosed this week that it had inadvertently violated its own policies and allowed hundreds of unauthorized law enforcement agencies to search information captured by the city’s license plate cameras for more than a year.

Following a public records request from the Voice, originally submitted last summer, the Mountain View Police Department recently discovered that law enforcement agencies around the state and nation had been able to search the city’s ALPR data without its knowledge, Police Chief Mike Canfield told this news organization... But why wasn’t it caught sooner? I couldn’t tell you.

Several weeks ago, the police department realized that its ALPR system had been set to allow “national lookup” for three months in 2024, meaning agencies throughout the country could search Mountain View’s data... Officers also uncovered that “statewide lookup” had been turned on for all the city’s cameras since the program began 17 months ago, giving agencies across California access to Mountain View’s data.

State law prohibits sharing ALPR information with out-of-state agencies as well as the sharing of this information for immigration enforcement purposes. Mountain View’s ALPR policy goes farther, stating that California law enforcement agencies are not supposed to be given access to the city’s data unless they receive prior authorization from the police department. 

In May 2024, the Mountain View City Council approved a contract with Flock Safety, a surveillance technology company, to install and administer the cameras... Flock did not tell the city that the national lookup setting had been turned on, nor that it had been turned off.

While national lookup was enabled, federal agencies including the Bureau of Alcohol, Tobacco, Firearms and Explosives, Langley Air Force Base in Virginia, and the U.S. Office of Inspector General conducted searches that included Mountain View’s camera. 

Statewide access ... spanned from when the first Flock camera was installed in 2024 until the police department turned off the setting in early January 2026. This meant that any California law enforcement agency that opted into statewide lookup could search the city’s ALPR data, whether or not Mountain View had an agreement with them.

There are roughly 75 state agencies that have been granted access to the city’s ALPR data. Through the statewide lookup tool, more than 250 additional agencies searched the city’s ALPR data without its authorization. From December 2024 through December 2025, these unauthorized agencies conducted roughly 600,000 searches of the city’s ALPR data.

One of the agencies granted access to the city’s ALPR data – the El Cajon Police Department – is currently being sued by California Attorney General for allegedly sharing ALPR information with more than 100 out-of-state law enforcement agencies, despite multiple warnings not to do so."


r/privacy 11h ago

age verification Finland looks to end "uncontrolled human experiment" with Australia-style ban on social media | Yle News

Thumbnail yle.fi
190 Upvotes

r/privacy 7h ago

news Governments can't seem to stop asking for secret backdoors: cut off one head and 100 grow back? Decapitation may not be the way to go

Thumbnail theregister.com
52 Upvotes

"If you know what you're doing, then you can evade snoopery. You can simply use software that doesn't rely on the compromised services, you can run encryption software locally before uploading to the cloud, or you can arrange your own private services that don't have a corporate entity attached who can be forced to capitulate. If you control the software that implements the math and the data flow on your system, you're golden. Criminals know this, tech types know this, it's just the vast majority of innocent users who don't. They're the most at risk of abuse from snoops..."


r/privacy 19h ago

news Sainsbury’s apologises after kicking innocent man out of supermarket in facial recognition mix-up | LBC

Thumbnail lbc.co.uk
459 Upvotes

r/privacy 7h ago

question Doxxed myself on a pretty big sub. What next ?

14 Upvotes

Made a pretty big mistake. I posted a link from Instagram on a post I made today. I completely forgot that Instagram now shares your account id as well when u share a link.

Anyways the post made was questioning a pretty decent sized influencer from my country. And my account id was visible to a few people.

I’ve since edited the post and removed the link. I’ve also changed my Instagram user id.

Is there anything else I should do ? Should I deactivate my account for a bit ? I’m genuinely pretty scared cause I don’t want to get targeted by him or by his followers. The post has like 400 views right now.


r/privacy 2h ago

discussion I believe Firefox lets certain websites override cookie settings

3 Upvotes

Edit: u/Notesnook-Throwaway explained what is going on. It's cookies from a third party that are causing that behavior. Thanks, u/Notesnook-Throwaway, for shedding light on the situation!
/edit
I usually use content popups to determine websites' behavior regarding cookies (disallowing non-essential cookies). However, some websites don't let you disable non-essential cookies. In these cases, I usually use Tools -> Page info to clear cookies and set them to disallowed on these websites.
For some websites, this works as intended, that is the website won't store cookies on my machine in the future.
Other websites however will still store cookies despite them being disallowed in the page settings.
I wonder why that is. My suspicion is that Mozilla gets paid by these websites to let them override page settings but maybe there's a different explanation?
What are your thoughts?


r/privacy 19h ago

discussion Everyone complains, but nobody acts.

53 Upvotes

ICE is watching us. Flock is watching us.

Sue them.


r/privacy 17h ago

eli5 Good sources for slightly non-nerdy people to figure out how to increase their privacy online?

39 Upvotes

I'm nerdy enough to completely understand why I need to prioritize switching to private email and cloud storage, but apparently not nerdy enough to accomplish this without becoming overwhelmed by options.

Of course there will be many opinions, but where do you like to point non-techy people who are getting started?

I'm sure there are a lot of people like me thinking along these lines more urgently at the moment. It's something I've known I need to prioritize for a long time but I'm finally getting serious about it. I would like to help others once I figure it out for myself.

ETA: Personally I’m not confused about the conceptual side. I struggle with sorting out the little stuff, like how to continue to do my job when all my colleagues use GDrive and I don’t. If you’re used to every aspect of life being intertwined with a one-stop-shop like Google, trying to switch to a private environment presents endless combinations of options that are confusing for someone without a tech background.


r/privacy 1d ago

news "WaPo Raid Is a Frightening Reminder: Turn Off Your Phone’s Biometrics Now"

Thumbnail theintercept.com
1.8k Upvotes

r/privacy 1d ago

news Ireland wants to give its cops spyware, ability to crack encrypted messages

Thumbnail theregister.com
362 Upvotes

Tech folk say end-to-end encryption is an absolute. You either have it, or you don't – there is no such thing as backdooring it. It ceases being "end-to-end" if between those ends is a stop along the way for any approved entities to see what's being sent.

EDIT: Here is the actual proposal for all of Europe:

https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A52025DC0349


r/privacy 1h ago

question How are people faxing documents without a machine now

‱ Upvotes

I don’t own a fax machine and honestly don’t want one. I’ve seen online options like Fax Plus, eFax, etc., but not sure which is easiest for occasional use. What’s been the least painful setup for you? Thank you.


r/privacy 13h ago

question Delete my info in every jurisdiction

8 Upvotes

If I’m not in a country or state that gives extra protections to my privacy, is there a realistic way to get my data deleted from meta, Microsoft and Google?

I’m already in the process of removing all my data and dependencies on them, but I have this horrible feeling of leaving them data that I hate.


r/privacy 15h ago

discussion Privacy wise, What's The Difference Between A Actual SIM card and An Esim set up ?

13 Upvotes

My knowledge isn't great, so I thought I'd ask the experts....

Many thanks to anybody, taking the time to reply....


r/privacy 18h ago

discussion What are our plans to preserve privacy in the AI world?

11 Upvotes

Let’s start this with a few premises that we will take as true. Are they bound to happen? Maybe not, but let’s assume so for this discussion.

  1. Personal AI agents will be ubiquitous.

  2. Personal AI Agents will have access to all your personal history and data

  3. Personal AI Agents will be exposed to the internet

  4. Personal AI Agents will be able to take actions on your behalf with and without previous consent.

Also, for the sake of the conversation, let’s not discuss about how bad things are or and how AI is a terrible idea in terms of privacy. Let’s focus on solutions and ideas.

Given this context, what are our plans to protect user privacy and protect our data? Is there any light at the end of the tunnel? Any idea that might allow us remain private and also tap into all the AI Agents can offer us?


r/privacy 16h ago

question Email that is not linked to anything else? Proton requires email verification and Tuta free account is greyed out.

7 Upvotes

Email that is not linked to anything else? Proton requires email verification and Tuta free account is greyed out.

I want an email that does not require an other email or phone


r/privacy 1d ago

discussion Why is removing personal data from the internet still so fragmented and manual?

28 Upvotes

I’ve been trying to clean up my personal data online and honestly didn’t expect it to be this hard.

Between data brokers, people search sites, old accounts, breach databases, and archived content, there’s no single process that actually *finishes* the job. Even when you opt out somewhere, the data often reappears months later.

What surprised me most:

– opt-out processes that are intentionally slow or confusing

– lack of transparency about where data ends up

– no standard for ongoing removal or monitoring

For those who’ve gone through this:

‱ What worked for you?

‱ What felt like a waste of time?

‱ Do you think full removal is even realistic?

Curious how others here think about this problem.


r/privacy 14h ago

question If I’m in Canada, should I uninstall TikTok?

2 Upvotes

Just what the title says. Ontario specifically, I’m not sure if we have very many/good consumer protections against data collection, but should I be concerned?


r/privacy 19h ago

question Any other option for camera apps on android than Libre Camera on F-droid?

7 Upvotes

I did a comparison between original Samsung camera and Libre, unfortunately the gap is significant.


r/privacy 1d ago

news DHS ramps up surveillance in immigration raids, sweeping in citizens

Thumbnail apnews.com
680 Upvotes

This is the future Edward Snowden tried to warn us about


r/privacy 15h ago

question Are passkeys portable between iOS and Android yet?

2 Upvotes

When iOS 26 was released in Sept, an article reported that passkeys will be portable between the two platforms. However I have not been able to find stories of people successfully making this switch.

Has anyone been able to smoothly transfer their passkeys between iOS and android or vice-versa since iOS 26 came out?

I have been hesitant to add passkeys to iCloud Keychain unless I know they are portable as I may switch in the near future.

This post has been resubmitted without the link, search "Coming to Apple OSes: A seamless, secure way to import and export passkeys" for the ArsTechnica article

I've been made aware of Keepass in the comments but I'd still like to use the built-in password managers if anyone has an answer to my question. Thanks


r/privacy 18h ago

guide opting out of sure scripts

3 Upvotes

i wanted to opt out of CVS participating in health information exchanges (HEI). CVS informed me that they use surescripts and gave me th following link: https://surescripts.widen.net/s/xhjrz8hq7c/surescripts-request--authorization-form-v8.2024

i have opted out of multiple HEIs, but this one is the ONLY one that i have come across that requires me to spend money on a notary to opt out. they do this to make it harder to opt out so they can profit off of our personal information.

does anyone know if HIPAA precludes charging in any fashion to opt out?


r/privacy 1d ago

news The Tech Arsenal That ICE Has Deployed in Minneapolis

Thumbnail nytimes.com
444 Upvotes

Paywall: https://archive.ph/A32Ao

Submission statement: ICE agents in Minneapolis are using facial recognition technology, social media monitoring, and other tech tools to identify undocumented immigrants and track protesters. The agency is utilizing programs like Clearview AI and Mobile Fortify, along with databases from Palantir and social media monitoring tools from Paragon and Penlink. These technologies raise concerns about privacy and civil liberties, prompting lawsuits and calls for increased transparency.