> looking up who is the actual person

"Fallacies programmers believe about people"

(you can sort of do this in countries with national ID schemes if you don't care about foreigners; for example, various people have found this in China where random things are gated behind having a WeChat account which requires a Chinese ID. You can't do this in the US or UK, which are big pushers of the ""age verification"" scheme)

You don't need an Id. For example, you can crawl the internet for selfies and then try and tie that face with the person it belongs to. With enough datasets you can start to put together a database of relevant people enough that it's okay to do deeper validation for the people you did not collect a face for.

In addition to being illegal under GDPR, that's not going to work very well.

I don't look like the other people whose name I share.

Famously, neither does this guy: https://iammarkzuckerberg.com

> you can crawl the internet for selfies and then try and tie that face with the person it belongs to

Yeeeah .. this is not the sort of thing that GDPR ought to allow, though.