New cybersecurity research indicates that one of the world's leading age verification providers collects and shares highly sensitive personal data—including facial photos and device fingerprints—with third parties. The research also reveals that most websites that require age verification don't enforce the policy.