From the pub door to social media: The 18+ card's bigger ambitions

In brief

• Officials considered the digital Kiwi Access Card for social-media age checks ahead of proposed under-16 restrictions.
  • Hospitality NZ and NEC are developing the verification process, with planned links to Govt.nz and NZ Verify.
    • Parts of Erica Stanford's briefing are redacted, including a reference to "these products".
      • Digital ID isn't mandated for social media, but officials discussed promoting adoption, raising questions about privacy and choice.Editor's note: This is the second in Centrist's two-part investigation into the government's expanding digital infrastructure. Part one examined plans to link devices to government records and collect communications metadata. This report examines the digital Kiwi Access Card and its potential use for online age verification.A card traditionally used to prove New Zealanders are old enough to buy alcohol is now being considered as a way to verify whether people are old enough to use social media.Hospitality New Zealand, the industry association behind the Kiwi Access Card, is partnering with NEC New Zealand on a digital version that could also support online identity verification and anti-money-laundering checks.Documents obtained by Centrist under the Official Information Act reveal that the Department of Internal Affairs (DIA) prepared a briefing titled "Social media policy" for Education Minister Erica Stanford ahead of a February 2026 meeting with Hospitality New Zealand.What was redacted from Stanford's briefing?The 26 February briefing's executive summary discusses digitising the Kiwi Access Card, followed by a redaction.The sentence resumes with a reference to how "these products could support any future social media age assurance requirements."Why products, plural? The passage was blacked out under provisions protecting confidential advice to ministers. Other sections, including proposed talking points, were heavily redacted to protect commercial interests.A private card connected to government infrastructureNEC New Zealand, a digital identity provider, is developing the digital Kiwi Access Card using its Identity Cloud technology. The wider platform's capabilities include facial recognition, biometric matching, searching across identity records and issuing reusable digital credentials.The OIA does not establish which of those capabilities will be used for Kiwi Access.The ministerial briefing says Hospitality New Zealand is working closely with DIA to use the Govt.nz app's digital wallet and NZ Verify, the government's credential-verification application.Someone could potentially store a digital Kiwi Access Card on their phone and use it to prove their age or identity to participating businesses or online services.Imagine wanting to join an online discussion about your child's school, criticise a politician or comment on a controversial news story. Today, a username and perhaps an email address might be all you need. Tomorrow, you could be asked to verify your age using a government-recognised digital credential just to participate.Why would social media need to verify your age?The government's proposed Online Safety Bill would restrict social-media access for under-16s, potentially requiring age checks for other users.But the Kiwi Access Card is designed for people aged 18 and over, while 16- and 17-year-olds would still be allowed on social media.The briefing doesn't explain how those younger users would be verified.Officials discussed promoting digital identity with private organisationsOne suggested question for Stanford reads: "How can we work together on public messaging about digital identity?" Officials also proposed promoting the technology's convenience, security and privacy benefits while "dispelling common myths".But the briefing doesn't identify which public concerns officials consider myths.Another proposed talking point stresses that the Digital Identity Services Trust Framework is not a government identification scheme.Who controls the information?The government says credentials stored in its digital wallet remain on the user's device, with information shared only when authorised. It also says credential issuers cannot see where or when a credential is used.What personal information would NEC and Hospitality New Zealand collect when issuing credentials? What would social-media platforms receive when verifying someone's age? Could those platforms retain records of the checks, and what would prevent their use for other purposes?The larger question is whether New Zealanders could increasingly be asked to prove their age simply to participate in ordinary online life, who gets to demand that proof, and what happens to the information they provide.Re-published from the Centrist with permissionOriginal article at The Centrist