The Bill would give the government the power to prescribe age verification and estimation methods, but only those operated by “arm’s length” third parties. It also specifies that only personal information strictly necessary to perform the age assurance check can be collected. Once the age verification or estimation is complete, the personal data must be destroyed, and whatever age assurance method is used, it must comply with the best practices of the field and privacy protection. Canada’s privacy regulator is planning revised guidance on age assurance after carrying out a public consultation, which included calls for “special provisions” for processing biometric data, as in facial age estimation.