Age verification for risky sites comes into force in the UK

‘For too long children have been only a click away from harmful pornography,’ says Ofcom

As of today, people in the UK visiting sites likely to host pornographic, self-harm, eating disorder and suicide-related content will have to prove they are over 18.

Under the Online Safety Act websites and apps hosting such material must implement “highly effective” age verification or assurance measures to ensure users are over 18 before accessing such content.

The new rules apply to a wide range of platforms, including social media sites, search engines, gaming sites and adult websites. Regulator Ofcom is responsible for monitoring compliance.

Ofcom recommends several "highly effective" tools for age verification or assurance, including: scanning photo IDs such as passports or driving licences and verifying with a selfie; using intermediaries such as banks to verify age; facial analysis using age assessment tools; and analysing email use to assess a users’ age.

The regulator does not formally certify age recognition and assurance technologies, leading critics to fear a privacy-invasive free-for-all.

“Think before handing over ID documents, and be especially mindful of mistyped URLs and other scams, trying to obtain your personal data for phishing or blackmail purposes,” cautioned tech lawyer Neil Brown in a post on Mastodon.

Computing has previously covered the concerns of small sites such as community noticeboards who fear the legal burden of compliance to cover what is likely a very low risk.

There are also fears about “overblocking”, for example algorithmically restricting sex education materials in case they fall foul of the law.

In a blog post, Ofcom group director of online safety, Oliver Griffiths, said: “Society has long protected youngsters from products that aren’t suitable for them, from alcohol to smoking or gambling. But for too long children have been only a click away from harmful pornography online. Now, change is happening.”

Companies found to be non-compliant face fines of up to £18 million or 10% of their global turnover, whichever is greater.

In addition, senior managers at tech companies could face criminal liability, including up to two years in prison, for repeated failures. Ofcom can also seek court orders to block non-compliant sites or apps from operating in the UK.