Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that Pinterest may conduct age verification using facial age estimation technology and by matching a user's facial image against a government-issued ID document.
This analysis describes what Pinterest's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes collection and processing of facial image data and government ID information as part of an age verification mechanism. Facial biometric data may qualify as sensitive or biometric data under GDPR and under state biometric privacy laws such as Illinois BIPA, creating heightened obligations for consent, retention limits, and data security.
Interpretive note: The policy does not specify the legal basis for biometric processing under GDPR, the retention period for facial or ID data, or whether processing is performed by Pinterest directly or a third-party vendor, creating ambiguity about the full compliance posture.
Under this provision, Pinterest may process facial biometric data and government-issued ID images for age verification purposes. The policy does not specify the retention period for facial estimation data or government ID images in this provision, and the legal basis for this processing is not explicitly identified in the excerpt.
Cross-platform context
See how other platforms handle Facial Age Estimation and Government ID Matching and similar clauses.
Compare across platforms →Monitoring
Pinterest has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Conduct age verification, as appropriate. This may include facial age estimation and matching your face against a government ID.Excerpt from Pinterest's Privacy Policy
REGULATORY LANDSCAPE: Facial biometric data is classified as a special category of personal data under GDPR Article 9, requiring explicit consent or another Article 9(2) basis for processing. In the U.S., Illinois BIPA imposes specific consent, retention, and destruction requirements for biometric identifiers including facial geometry. Texas and Washington have similar biometric privacy statutes. The FTC has jurisdiction over unfair or deceptive practices related to biometric data collection. GOVERNANCE EXPOSURE: High. Facial age estimation and government ID matching involve processing of biometric and government-issued identity data, both of which carry heightened regulatory obligations across multiple jurisdictions. The policy does not specify the explicit legal basis for this processing under GDPR, the retention period for biometric data collected, or whether a third-party facial estimation vendor is used. JURISDICTION FLAGS: Illinois creates the highest exposure under BIPA, which requires written consent, a publicly available retention policy, and prohibits sale of biometric data. EEA, Swiss, and UK users face GDPR Article 9 explicit consent or other specific basis requirements for biometric processing. Texas and Washington biometric statutes create additional U.S. exposure. Age verification requirements under the UK Age Appropriate Design Code and similar EU member state laws may also be relevant. CONTRACT AND VENDOR IMPLICATIONS: If Pinterest uses a third-party vendor for facial age estimation, that vendor relationship requires a data processing agreement that includes appropriate biometric data handling terms. Procurement and vendor assessment teams should confirm that any facial estimation vendor meets applicable biometric data security and retention standards. COMPLIANCE CONSIDERATIONS: Compliance teams should evaluate whether Pinterest's biometric data processing for age verification is accompanied by a documented legal basis under GDPR Article 9, a published biometric data retention and destruction schedule, and written consent procedures compliant with Illinois BIPA and similar statutes. Data mapping should confirm that facial image data and government ID images are segregated and subject to enhanced security controls.
Regulatory citations, enforcement risk, and due diligence action items.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision authorizes collection and processing of facial image data and government ID information as part of an age verification mechanism. Facial biometric data may qualify as sensitive or biometric data under GDPR and under state biometric privacy laws such as Illinois BIPA, creating heightened obligations for consent, retention limits, and data security.
Under this provision, Pinterest may process facial biometric data and government-issued ID images for age verification purposes. The policy does not specify the retention period for facial estimation data or government ID images in this provision, and the legal basis for this processing is not explicitly identified in the excerpt.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Pinterest.