Anthropic has updated its Privacy Policy to formalize identity and age verification practices for users of its Claude AI assistant, marking a significant shift in how the company handles user data and access control.
The changes, effective July 8, 2026, apply exclusively to consumer-tier accounts Claude Free, Pro, and Max plans and do not affect Team, Enterprise, or Platform users operating under Commercial Terms.
The revised policy introduces four major updates: expanded disclosures on multi-step tasks and third-party app integrations, a new Verification Data section, guidelines for study and survey participation, and deeper transparency on data-sharing practices and legal bases for processing.
Anthropic Updates Privacy Policy
Of these, the most notable and potentially controversial addition is the formalization of identity verification, which Anthropic says is intended to “keep our services safe and secure.”
As part of the new verification framework, Anthropic may now request that users confirm their age or identity under specific circumstances.
Accepted documents include government-issued photo IDs such as passports, driver’s licenses, state or provincial ID cards, and national identity cards. Photocopies, screenshots, digital IDs, and temporary paper IDs are explicitly rejected.
In select cases, a live selfie captured via phone or webcam is also required, meaning biometric facial data, including facial geometry templates, may be processed as part of this flow.
Critically, all verification data is processed by Persona Identities, a third-party KYC (Know Your Customer) platform, rather than Anthropic directly.
Anthropic states it does not store ID images on its own servers and that Persona is contractually restricted from using this data for advertising, marketing, or model training.
Data is encrypted in transit and at rest, with access limited to account review or appeals scenarios.
Individual developers are among the first user groups being prompted for verification, with Anthropic rolling out the checks on a use-case-specific basis rather than universally.
Accounts suspected of belonging to users under the age of 18 have already seen enforcement, with at least one reported case of a minor’s account being suspended pending age verification.
Anthropic reserves the right to ban accounts in which Claude is unavailable in the user’s region or the age requirements are not met.
Despite the new data collection requirements, Anthropic reaffirms its standing privacy commitments: user data is not sold, Claude remains ad-free, and users can still opt out of having their chats and coding sessions used for model training.
The company frames the identity verification measures as a voluntary compliance step not mandated by any current law aimed at responsible deployment as Claude takes on increasingly powerful, agentic capabilities.
Security researchers and privacy advocates are likely to scrutinize how Persona Identities handles this biometric data pipeline, particularly given the sensitivity of government ID combined with live facial capture, which raises significant data minimization questions under frameworks like the GDPR and emerging U.S. state biometric privacy laws.
Follow us on Google News , LinkedIn and X to Get More Instant Updates. Set Cyberpress as a Preferred Source in Google.
