You open a browser, click a link you have visited for ten years, and run straight into a wall demanding a picture of your driver's license or a live scan of your face.
The statehouse told you the mandate was about children. The assembly member talked as if the text came from home. But here's the thing: the model did not. Baroness Beeban Kidron sits in the British House of Lords. Her foundation, and a set of UK groups that already used child-safety language to pass digital ID rules at home, brought the same template into American legislatures. One of the named players on that list is a trade body whose members invoice for the check.
The Login That Used to Be a Checkbox
I used to click through. Age-check bills turn that login into a paid inspection, and the inspector is a vendor.
Effort's investigation, "The UK's War on Anonymity Has Come to America," mapped five foreign organizations and their US affiliates running a coordinated push across twenty-one states and Congress. Reclaim The Net's Cam Wakefield put the invoice in the headline: a trade association whose members sell ID checks spent years arguing that more places need ID checks. The Age Verification Providers Association is the one that gets paid when the mandate lands.
Twenty-one states is one portable lobby arriving with a law it already wrote once.
The California Original, Copied
The 5Rights Foundation is a British nonprofit founded by Kidron. California's Age Appropriate Design Code, AB 2273, was co-designed by 5Rights. Buffy Wicks, a lead author, Jordan Cunningham, another author, and 5Rights put it in a joint statement: "The Bill is practicable and realistic, drawing as it does on the UK's Age Appropriate Design Code (AADC)."
Foreign Agents Registration Act filings show 5Rights paid Capitol Connection $50,000 to lobby the California Legislature from May to September 2022. That work was not disclosed as lobbying for a foreign principal until 2024, more than a year after the bill passed. Capitol Connection denied that 5Rights was supervised, owned, directed, controlled, financed, or subsidized by a foreign government, foreign political party, or other foreign principal. They left blank question 12, the item that would have shown how much control Kidron, the founder and then a director, had over the group.
5Rights did not stop in Sacramento. Effort counted 5Rights on forty-two bills across eighteen states. Eleven became law. That is the British Age Appropriate Design Code traveling under American bill numbers, with Kidron's organization still in the room.
The Rest of the Letterhead
The Center for Countering Digital Hate was founded by British Labour consultants Imran Ahmed and Morgan McSweeney. Ahmed, a British national, is CEO of the US and UK entities. He told Baroness Jones of Whitchurch that CCDH had "championed the Online Safety Act since its inception," and that he was the "first witness before the draft bill committee" that reviewed it. Effort names CCDH among the five now pushing the American copies. America First Legal accused the group of a FARA violation in 2024. The Justice Department has not announced an investigation.
Reset Tech is on Effort's map. Reset Tech Action, the US 501(c)4 arm, spent $1,352,800 lobbying Congress and state legislatures from 2024 through the second quarter of 2026. That total is $1,222,500 in federal payments, $100,000 in Maryland, and $30,300 in Nebraska. Four of the six bills it lobbied on are bills 5Rights also engaged with, including AB 2273. Reset's own site says a board of directors oversees global operations. Its German affiliate sat in an EU consortium led by the Institute for Strategic Dialogue.
A central node in that British censorship ecosystem is ISD, which has contracted with the US State Department, the European Union, and several UK ministries for more than $17 million. Effort's totals: $11.21 million United States, $5.54 million European Union, $0.72 million United Kingdom. Counterparties include the State Department, the Department of Homeland Security, and Ofcom. ISD's own report says a majority of board members sit on both the US and UK boards so decisions can be taken collectively. The House Judiciary Committee later pulled ISD documents while looking at how European regulators work with third-party groups to police speech. ISD also sits on Spotify's Safety Advisory Council and YouTube's Trusted Flagger program, which Google says prioritizes those flags.
The Trade Body at the Register
Effort put the Age Verification Providers Association on the same map even without finding Lobbying Disclosure Act filings of its own. AVPA is a British trade organization of age-verification suppliers. The members have a financial stake in the mandates.
The association formed in 2018. Its public site calls itself the global trade body for providers of age assurance, estimation, and inference, representing over thirty-five organisations. One of its three stated jobs is to represent the industry to regulators and law makers. The homepage headline is "Making the Internet age-aware." The same page claims a tipping point where all but the most innocuous websites need to know the age of their users, and it lists the UK and California Age Appropriate Design Codes plus the UK Online Safety Act among the laws doing that work. AVPA's copy insists the requirement is age, not identity.
Alastair Graham chairs AVPA. The executive committee names Ian Moody, Tony Allen, Andy Lulham, Julie Dawson, and Ryan Bessemer. Companies House records list Graham, Moody, Allen, and Dawson as British. Dawson is a Yoti director. Yoti is an AVPA member. Its member page lists facial age estimation, ID verification inside an app or a website, and a Digital ID app with ten million downloads that returns a minimized age such as 13+ or 18+. Yoti's own age-check pages also sell credit card checks, mobile billing records, and matches against credit-reference databases. FaceTec and Experian are on that member list too. Sites that now have to age-gate a login utilize a vendor from that roster.
Reclaim The Net asked how many of the legislatures voting on these bills know that one of the five represents the companies that get paid when a mandate passes. 5Rights walks the British design-code model into American bills while Reset Tech Action's seven-figure spend overlaps those same measures, and AVPA's members run the checkpoint you hit on the login. That is how the legal duty to inspect the user becomes a product.
What You Lost at the Door
Child-safety language is the cover that gets a local politician to sign. Effort's point is colder. When foreign principals lobby for age-verification law while those laws are used to suppress political speech in their home countries, it cannot be a surprise if the copies are used the same way here. Effort writes that those British digital ID rules now sit inside a system that surveils political dissidents and jails them. Anonymity was the countermeasure those exported bills now go after.
Once a state requires the check, a website cannot go back to a checkbox without becoming the liable party. Yoti and the rest of the AVPA roster already have the product on the shelf. The site pays them to run it, and the legislature that copied the British design code is not going to unbolt a duty it just wrote into statute.
0 comments