Anthropic Adds ID Verification to Some Claude Consumer Accounts From 8 July
Anthropic updated its privacy policy in June 2026 to include a provision that allows it to require some Claude consumer account holders to verify their age and identity using a government-issued document and facial biometrics before they can continue accessing the service. The requirement takes effect on 8 July 2026 and applies exclusively to Claude Free, Pro, and Max subscribers whose accounts have been flagged for potential policy violations. Enterprise, Team, and API plan customers are not subject to the new requirement. Anthropic's updated policy was first publicly reported by TechCrunch on 22 June 2026 and drew rapid attention from privacy researchers because of what it demands users submit and what it declines to disclose about how those submissions are handled.
What Users Are Required to Submit
Anthropic's updated privacy policy specifies three categories of information that may be requested from a flagged consumer account holder. The first is an image of a government-issued identity document — a passport, driving licence, or national identity card — along with all personal information visible on it: full name, date of birth, and identity number. The second is a photo or video of the user's face, captured live during the verification process. The third is what Anthropic describes as facial geometry templates, which the policy notes may be considered biometric data under applicable law in certain jurisdictions, including US states with specific biometric privacy statutes.
The policy states that verification applies to a small subset of users rather than all consumer subscribers. A user whose account is not flagged will not encounter the requirement. The policy does not specify what behaviour constitutes a flag.
The Role of Persona and Who Holds the Data
The identity verification process is handled by Persona, a San Francisco-based identity-checking platform. Persona collects the government-issued documents and biometric data on Anthropic's behalf. Anthropic remains the data controller under this arrangement — meaning Anthropic bears legal responsibility for how the data is used — but the raw documents, selfies, and facial geometry templates are held on Persona's systems rather than on Anthropic's own infrastructure. No data retention period for either the identity documents or the biometric templates is specified in the updated privacy policy.
Why This Change Is Happening Now
Anthropic's stated justification for the identity verification requirement is to keep its services safe and secure. The timing connects directly to the regulatory episode that began on 12 June 2026, when a US government export-control directive ordered Anthropic to suspend access to Claude Fable 5 and Mythos 5 for all non-US users. A central concern raised in connection with that directive was that Anthropic could not reliably determine in real time whether a given consumer account holder was a US national. An identity verification framework applied to flagged consumer accounts directly addresses that concern and provides Anthropic with a documented basis for verifying user identity when regulators require it.
The Anthropic IPO context is also relevant. Anthropic filed for a public listing in 2026 and faces regulatory scrutiny that intensified after the June suspensions. Demonstrating the capacity to identify and verify users is consistent with the compliance infrastructure that regulators and institutional investors expect from a company at Anthropic's scale.
What Remains Undisclosed
Four significant gaps in Anthropic's policy update have been identified by privacy researchers and digital rights commentators. Anthropic has not published a trigger threshold — there is no stated criterion for what constitutes a policy violation flag that generates a verification request, so a user can receive a verification demand with no explanation of what they allegedly did. No data retention period is specified for either the identity documents or the facial geometry templates. The policy does not state what happens to an account whose holder refuses to comply — whether that results in suspension, restricted access, or another outcome. And there is no described process for a user to challenge a verification demand they believe was incorrectly triggered.
What This Means for Indian Claude Users
Indian users of Claude Free, Pro, or Max accounts are within the scope of the July 8 policy. If an account is flagged, that user would need to submit a government-issued identity document and facial biometrics to Persona — a US company — to retain access. India's Digital Personal Data Protection Act, operationalised in 2025, creates specific obligations around the collection, processing, and cross-border transfer of sensitive personal data including biometrics. Indian users should be aware that data submitted to Persona is held on US-based systems under Persona's data agreements, with no retention limit currently specified.
For Indian teams using Claude through the Anthropic API or on Team or Enterprise plans, the July 8 verification policy does not apply. Enterprise and API plan holders are explicitly outside the scope of this consumer-only requirement, making the enterprise account tier the appropriate route for Indian organisations that need reliable, uninterrupted Claude access without the possibility of consumer-style identity gates.
The Bottom Line
Anthropic updated its privacy policy in June 2026 to require some Claude Free, Pro, and Max account holders to submit a government-issued ID, a live selfie, and facial geometry biometrics to Persona as a condition of continued access, starting 8 July 2026. The requirement applies only to consumer accounts flagged for potential policy violations — Enterprise, Team, and API customers are exempt. No trigger criterion, data retention period, or consequence of refusal has been specified publicly. The change connects to the US government's export-control concerns from the June 2026 Fable 5 suspension. For Indian teams, the key practical distinction is between consumer accounts subject to the new verification requirement and business or API accounts that are not.
Frequently Asked Questions
When does Anthropic's identity verification take effect and which Claude accounts are affected?+
The identity verification requirement takes effect on 8 July 2026 and applies to a subset of Claude Free, Pro, and Max subscriber accounts flagged for potential policy violations. Claude Enterprise, Team, and API plan customers are not affected. Anthropic has not published a specific criterion that triggers a verification request, so affected users may receive a demand without a stated reason. The policy was first reported publicly on 22 June 2026.
What data does Anthropic collect in the Claude ID verification process?+
Anthropic's updated privacy policy specifies three categories of data: an image of a government-issued identity document with all personal information such as name, date of birth, and identity number; a photo or video of the user's face; and facial geometry templates, which Anthropic acknowledges may be considered biometric data under applicable law. The verification is handled by Persona, a San Francisco-based identity platform. Persona collects and holds the documents and biometric data — Anthropic is the data controller but does not hold the raw documents on its own systems.
Why is Anthropic implementing identity verification for Claude users now?+
Anthropic has stated the measure is intended to keep its services safe and secure. The timing is connected to the June 2026 regulatory episode in which a US government export-control directive ordered Anthropic to suspend access to Claude Fable 5 and Mythos 5 for all non-US users. A key concern raised by regulators was that Anthropic could not reliably identify whether a consumer account holder was a US national in real time. Identity verification for flagged consumer accounts addresses that concern directly and is also consistent with the compliance standards expected from a company preparing for a public listing.
What does the Anthropic ID verification policy mean for Indian Claude users?+
Indian users of Claude Free, Pro, or Max accounts are within the scope of the July 8 policy. A flagged account holder would need to submit a government-issued ID and facial biometrics to Persona, a US company, to retain access. India's Digital Personal Data Protection Act creates specific obligations around cross-border transfer of biometric data, and Indian users should be aware that submitted data is held on US systems with no specified retention period. For Indian teams accessing Claude through the API or on Enterprise or Team plans, the verification policy does not apply — these account types are explicitly exempt.
Written by
TechPillow Team
Sharing insights on technology, product development, and the Indian tech ecosystem.