Our Take
Meta's bone analysis system addresses a real compliance problem but shifts liability to users who must prove their age when flagged.
Why it matters
Social platforms face growing regulatory pressure to verify user ages, with Meta paying $375 million this week for child safety failures. Visual analysis could become the industry standard if effective.
Do this week
Product teams: audit your age verification flows before Q2 2025 so you can demonstrate proactive compliance ahead of likely federal requirements.
Meta deploys AI bone structure analysis
Meta announced Tuesday that Facebook and Instagram will scan photos and videos for "height and bone structure" to identify users under 13. The AI system analyzes "general themes and visual cues" alongside posts, comments, bios, and captions for contextual age indicators.
The company emphasizes this "is not facial recognition" and "does not identify the specific person in the image" (per Meta's blog post). Accounts flagged as underage face deactivation unless owners verify their age.
The technology launches in "select" countries including the US before wider rollout. Meta separately expands its Teen Account system from Instagram to Facebook, automatically placing users 13-17 into restricted accounts with content controls and messaging blocks.
The announcement follows a New Mexico jury verdict requiring Meta to pay $375 million for violating state law on child safety and misleading customers about platform protections.
Visual analysis fills enforcement gaps
Traditional age verification relies on user-provided data, which minors easily circumvent. Meta's bone structure analysis represents a shift toward biometric markers that users cannot easily manipulate.
The technology resembles existing age verification services from Yoti and k-ID, suggesting industry convergence around visual analysis methods. Meta's scale gives it unique training data advantages but also higher regulatory exposure.
The timing connects directly to legal pressure. Meta faces mounting state-level enforcement and advocates for federal age verification requirements at the operating system level, potentially shifting compliance costs to Apple and Google.
Prepare for mandatory age verification
Meta's deployment signals broader industry movement toward automated age detection. Platforms handling user-generated content should expect similar regulatory requirements within 18 months.
The bone structure approach creates new privacy considerations. Unlike account-based verification, visual analysis processes content continuously, raising questions about data retention and processing consent.
Companies should evaluate third-party age verification providers now rather than building in-house systems. Meta's investment in proprietary technology reflects the complexity and ongoing liability of accurate age detection at scale.