MINDSET

Days to result

Physical-Space Parity Test

Test every digital ID requirement against its physical-world equivalent.

digital identity privacy civil liberties mental model policy age verification surveillance

Problem it solves

Digital identity requirements creep beyond physical-world norms because technical ease creates pressure to over-identify, eroding privacy rights that go unchallenged when no concrete physical-world comparison is ever made.

Best for

Policy advocates, product designers, and civil liberties practitioners evaluating proposed digital identity requirements before they are implemented or legislated.

Not ideal for

High-assurance financial or regulated contexts where digital requirements legitimately and deliberately exceed physical-world norms by explicit regulatory design.

Overview

Why this framework exists

The Physical-Space Parity Test is a mental model for evaluating digital identity requirements. The core principle: rights and norms governing identification in the physical world should be preserved and fought for in digital contexts. If entering Walmart requires no ID, visiting Walmart.com should not require identification either. If buying a newspaper is anonymous, reading news online should be anonymous. The test creates a concrete reference point against which proposed digital identification requirements can be evaluated, counteracting normalization of digital surveillance. It also exposes the most common tactic used to smuggle in over-identification: child safety and age verification framings that obscure the full scope of what is actually being collected and retained.

Core principles

6 total

Technical capability to identify someone does not create an obligation or right to identify them.
Physical-world privacy norms are the minimum floor for digital privacy rights.
Identification should be required only where it would be required in the physical equivalent.
The Jevons Paradox applies: easier identification increases its use unless principled limits are enforced.
'Protecting children' and similar safety framings are the primary vectors for normalizing over-identification.
Over-identification creates infrastructure that can be converted to authoritarian control regardless of original intent.

Steps

5 steps

Identify the digital interaction under review
Clearly define the specific action a user is taking (reading content, making a purchase, querying an AI, accessing a service) and the identification requirement being proposed or imposed. Precision here determines the quality of the parity comparison.
Pro tipBe specific—'accessing the internet' is not the same as 'purchasing alcohol online.' The test only works when the interaction is precisely defined.
WarningRegulators and platforms often bundle multiple interaction types into one policy; evaluate each interaction individually rather than accepting the bundled framing.
Map the interaction to its physical-world equivalent
Find the physical-world action that most closely parallels the digital interaction. Online news reading maps to buying a newspaper. Visiting a retail website maps to entering a store. Querying an AI chatbot maps to consulting a reference book or calling an information hotline.
Pro tipIf you struggle to find a physical equivalent, default conservatively to no identification required—burden of proof lies with those proposing the requirement.
WarningDo not let proponents of identification requirements define the physical equivalent for you—they will typically select the most restrictive physical analogue available.
Assess identification norms in the physical equivalent
Determine what identification, if any, is required in the physical-world equivalent. Entering Walmart: no ID. Buying alcohol: age verification only, not full identity. Renting a car: driver's license. Document this baseline explicitly before comparing to the proposed digital requirement.
Pro tipWrite down the physical baseline—having it documented allows you to reference it precisely in policy debates rather than re-litigating it each time.
WarningSome physical-world identification requirements are themselves excessive. Physical parity is a floor, not necessarily the ideal standard.
Compare and challenge requirements that exceed parity
If the proposed digital requirement exceeds what would be required in the physical equivalent, it fails the parity test. Document the gap and frame it as a rights regression: 'We do not require ID to read a newspaper; this law requires ID to read news online.'
Pro tipUse the parity gap as a concrete, accessible argument in policy contexts—most people intuitively grasp the newspaper analogy without needing to understand technical identity architecture.
Warning'Safety' and 'protect the children' framings frequently obscure requirements that dramatically exceed physical-world parity. Look through the framing to the actual data being collected and retained.
Advocate for selective disclosure as the parity-preserving alternative
Where identification is genuinely required (age verification for alcohol purchase), advocate for selective disclosure implementations that match physical-world norms—prove the attribute (age ≥ 21) without creating a persistent identity record, just as a bouncer checks your age without retaining a copy of your ID.
Pro tipThe physical-world norm for age verification is a momentary attribute check with no data retention. Frame digital age verification advocacy around matching this norm exactly.
WarningMost implemented age verification systems collect far more than age and retain data indefinitely. Parity requires challenging this as the default implementation, not just accepting the age-check framing at face value.

Checklist

Saved in your browser

Identify the specific digital interaction for which identification is being proposed
Find the closest physical-world equivalent interaction
Determine whether identification is required in that physical equivalent
If no, challenge the digital requirement as exceeding parity
Check whether a 'safety' framing is obscuring the actual scope of data collection
Assess whether the requirement creates a persistent identity record beyond the interaction
Evaluate whether selective disclosure could satisfy any legitimate need without full identification

Examples

3 cases

GUARD Act — AI chatbot age verification

The US Senate Judiciary Committee passed the GUARD Act 22-0, requiring age verification for all AI chatbot users. Applying the parity test: consulting a reference book, encyclopedia, or calling an information hotline requires no age verification. The digital equivalent—querying an AI assistant—should not require it either. The safety framing obscures that the requirement far exceeds physical-world norms.

OutcomeThe parity test reveals the GUARD Act creates surveillance infrastructure under a child-safety framing that has no physical-world equivalent basis.

Online news reading vs. buying a newspaper

A state proposes requiring identity verification to access online news websites to prevent anonymous misinformation. Applying the parity test: purchasing a newspaper at a kiosk requires no identification whatsoever. The digital equivalent—reading news online—should require none either. The parity test provides a clear, non-technical advocacy argument without engaging identity architecture debates.

OutcomeThe parity test creates a defensible argument against the requirement without needing to engage at the level of technical architecture.

Walmart.com vs. entering Walmart

Entering Walmart's physical store requires no identification at the door. Yet visiting Walmart.com, the user is identified via cookies, behavioral tracking, and account data without meaningful awareness or consent. Applying the parity test reveals that digital identification dramatically exceeds what the physical equivalent requires.

OutcomeThe gap between physical and digital norms is made visible and concrete, creating an advocacy basis for minimum-necessary digital identification requirements.

Common mistakes

3 traps

Accepting 'safety' framing without applying the test

Age verification and child safety are the most common framings used to justify digital identification requirements that exceed physical-world norms. Apply the parity test regardless of framing—ask what identification the physical equivalent requires before evaluating any safety justification.

Defining physical equivalence too broadly

Saying 'the physical equivalent of the internet is public space' sets parity too low, implying no identification is ever appropriate online. The test works at specific interaction level—the digital equivalent of buying alcohol online is buying alcohol in a physical store, not walking down a public street.

Treating physical parity as the ceiling

The physical world already contains many over-identification requirements that themselves exceed necessity. Matching digital to physical is a minimum floor—advocates should also be willing to challenge physical-world identification requirements that are themselves excessive.

Origin story

How this framework came to be

Explicitly articulated as a guiding principle by Gerald Glickman in a TFTC interview on digital identity, in response to age verification legislation and the proliferation of digital ID mandates framed as child safety measures.

Source

Traced to primary

Source · VIDEO

The Digital ID Trap Is Closing Faster Than You Think (your version, lock as-is) — TFTC

TFTC · 2026

Open source →

Related frameworks

Browse all Mindset →