Adult World News

Children will be prevented from encountering online pornography and protected from other types of harmful content under Ofcom's new industry guidance which sets out how we expect sites and apps to introduce highly effective age assurance.

Today's decisions are the next step in Ofcom implementing the Online Safety Act and creating a safer life online for people in the UK, particularly children. It follows tough industry standards, announced last month, to tackle illegal content online, and comes ahead of broader protection of children measures which will launch in the Spring.

Robust age checks are a cornerstone of the Online Safety Act. It requires services which allow pornography or certain other types of harmful content to introduce 'age assurance' to ensure that children are not normally able to encounter it.[1] Age assurance methods -- which include age verification, age estimation or a combination of both -- must be 'highly effective' at correctly determining whether a particular user is a child.

We have today published industry guidance on how we expect age assurance to be implemented in practice for it to be considered highly effective. Our approach is designed to be flexible, tech-neutral and future-proof. It also allows space for innovation in age assurance, which represents an important part of a wider safety tech sector where the UK is a global leader[2]. We expect the approach to be applied consistently across all parts of the online safety regime over time.

While providing strong protections to children, our approach also takes care to ensure that privacy rights are protected and that adults can still access legal pornography. As platforms take action to introduce age assurance over the next six months, adults will start to notice changes in how they access certain online services. Our evidence suggests that the vast majority of adults (80%) are broadly supportive of age assurance measures to prevent children from encountering online pornography.[3]

What are online services required to do, and by when?

The Online Safety Act divides online services into different categories with distinct routes to implement age checks. However, the action we expect all of them to take starts from today:

• Requirement to carry out a children's access assessment. All user-to-user and search services -- defined as 'Part 3' services[4] -- in scope of the Act, must carry out a children's access assessment to establish if their service -- or part of their service - is likely to be accessed by children. From today , these services have three months to complete their children's access assessments, in line with our guidance, with a final deadline of 16 April . Unless they are already using highly effective age assurance and can evidence this, we anticipate that most of these services will need to conclude that they are likely to be accessed by children within the meaning of the Act. Services that fall into this category must comply with the children's risk assessment duties and the children's safety duties.[5]
• Measures to protect children on social media and other user-to-user services. We will publish our Protection of Children Codes and children's risk assessment guidance in April 2025. This means that services that are likely to be accessed by children will need to conduct a children's risk assessment by July 2025 -- that is, within three months. Following this, they will need to implement measures to protect children on their services, in line with our Protection of Children Codes to address the risks of harm identified. These measures may include introducing age checks to determine which of their users are under-18 and protect them from harmful content.
• Services that allow pornography must introduce processes to check the age of users: all services which allow pornography must have highly effective age assurance processes in place by July 2025 at the latest to protect children from encountering it. The Act imposes different deadlines on different types of providers. Services that publish their own pornographic content (defined as 'Part 5 Services[6]) including certain Generative AI tools, must begin taking steps immediately to introduce robust age checks, in line with our published guidance. Services that allow user-generated pornographic content -- which fall under 'Part 3' services -- must have fully implemented age checks by July.

What does highly effective age assurance mean?

Our approach to highly effective age assurance and how we expect it to be implemented in practice applies consistently across three pieces of industry guidance, published today[5]. Our final position, in summary:

• confirms that any age-checking methods deployed by services must be technically accurate, robust, reliable and fair in order to be considered highly effective;
• sets out a non-exhaustive list of methods that we consider are capable of being highly effective. They include: open banking, photo ID matching, facial age estimation, mobile network operator age checks, credit card checks, digital identity services and email-based age estimation;
• confirms that methods including self-declaration of age and online payments which don't require a person to be 18 are not highly effective;
• stipulates that pornographic content must not be visible to users before, or during, the process of completing an age check. Nor should services host or permit content that directs or encourages users to attempt to circumvent an age assurance process; and
• sets expectations that sites and apps consider the interests of all users when implementing age assurance -- affording strong protection to children, while taking care that privacy rights are respected and adults can still access legal pornography.

We consider this approach will secure the best outcomes for the protection of children online in the early years of the Act being in force. While we have decided not to introduce numerical thresholds for highly effective age assurance at this stage (e.g. 99% accuracy), we acknowledge that numerical thresholds may complement our four criteria in the future, pending further developments in testing methodologies, industry standards, and independent research.

Opening a new enforcement programme

We expect all services to take a proactive approach to compliance and meet their respective implementation deadlines. Today Ofcom is opening an age assurance enforcement programme , focusing our attention first on Part 5 services that display or publish their own pornographic content.

We will contact a range of adult services -- large and small -- to advise them of their new obligations. We will not hesitate to take action and launch investigations against services that do not engage or ultimately comply.

For too long, many online services which allow porn and other harmful material have ignored the fact that children are accessing their services. Either they don't ask or, when they do, the checks are minimal and easy to avoid. That means companies have effectively been treating all users as if they're adults, leaving children potentially exposed to porn and other types of harmful content. Today, this starts to change.

As age checks start to roll out in the coming months, adults will start to notice a difference in how they access certain online services. Services which host their own pornography must start to introduce age checks immediately, while other user-to-user services -- including social media - which allow pornography and certain other types of content harmful to children will have to follow suit by July at the latest.

We'll be monitoring the response from industry closely. Those companies that fail to meet these new requirements can expect to face enforcement action from Ofcom.

Notes

• Research shows that children are being exposed to online pornography from an early age. Of those who have seen online pornography, the average age they first encounter it is 13 -- although more than a quarter come across it by age 11 (27%), and one in ten as young as 9 (10%). Source: 'A lot of it is actually just abuse'- Young people and pornography Children's Commissioner for England
• Research from the UK Government indicates that UK firms account for an estimated one-in-four (23%) of the global safety tech workforce. 28% of safety tech companies are based in the UK according to recent research by Paladin Capital and PUBLIC .
• Source: Yonder Consulting - Adult Users' Attitudes to Age Verification on Adult Sites
• 'Part 3' services include those that host user-generated content, such as social media, tube sites, cam sites, and fan platforms.
• Services that conclude they are not likely to be accessed by children -- including where this is because they are using highly effective age assurance -- must record the outcome of their assessment and must repeat the children's access assessment at least annually.
• 'Part 5' services are those that publish their own pornographic content, such as studios or pay sites, where operators control the material available.

The Kansas sate attorney general, Kris Kobach has taken legal action against 13 porn websites that have not implemented the required age/ID verification for their readers. A press release explains:

Kansas Attorney General Kris Kobach today announced his office has filed a lawsuit against SARJ LLC, the operator of 13 adult websites. The Kansas Attorney General's Office filed the suit in Shawnee County District Court.

Since July 1, 2024, Kansas law has required that adult websites verify the age of its users. SARJ LLC's websites distribute erotic films, photography, and live streaming platforms without verifying the age of users. The lawsuit marks the first such suit under the 2024 law. Kobach said:

Protecting our children against the harmful effects of pornography is a high priority for all Kansans. This law is making a difference. When the Kansas Legislature passes a law, I will enforce it faithfully to the letter of the law. That is what the people of Kansas elected me to do.

Under Kansas law, SARJ LLC's practices are subject to civil penalties of up to $10,000 per violation per day.

The 13 websites listed are:

metartnetwork.com;
metart.com;
metartx.com;
sexart.com;
vivthomas.com;
thelifeerotic.com;
eroticbeauty.com;
lovehairy.com;
domai.com;
goddessnudes.com;
rylskyart.com;
stunning18.com; and
straplez.com

Porn websites in France must verify users' ages or face being blocked within days under new rules which come into force after a years-long battle between operators and state censors.

Among the new requirements is to offer at least one double blind option for users to prove their age without revealing their identity to the porn site. However the verifying company will surely be able to maintain a log of a users porn website history.

Sites already offering verification using a credit card have a grace period until April 11 2025 to put in place their double blind checks. These entail the user uploading an identity document to the verifying company, which then sends confirmation they are old enough to visit the site to the porn provider without revealing the user's identity, at least to the porn site.

This niche is being targeted by small firms selling the service to big platforms, with several start-ups offering the service. However age verification seems to be a natural monopoly where users will only want to verify once with one company for all their porn viewing. No doubt something like 'verified by Google' will become the norm and so US giants will take over.

Internet censor Arcom's regulation has been a real boost to the still-emerging sector, said Jacky Lamraoui, head of French startup IDxLab. The firm's Anonymage service is already being used by around 20 sites, all of them adult platforms. Among them is French porn site Tukif.porn, which turned to IDxLab and other verification providers after a court ordered it blocked in October.

Tukif manager Jerome, who declined to give his last name, commented that Tukif was the only free French porn site currently verifying users' ages. He complained that age verification was costing his site one or two (euro) cents per visitor. He added that age verification was also turning some users away from centralised porn sites to less regulated social media platforms such as X or Reddit, which do not have to verify ages. He said:

Since November, less than five percent of users arriving at the verification system come out verified on the other side. It's killed traffic to our site.

For the coming months, competitors from within the European Union enjoy an advantage, as the age check rules only apply to French and non-EU adult services. Arcom is still putting in place procedures for notifying other governments that sites based in their countries are not fulfilling French law before blocking them altogether. EU adult sites will however be expected to comply with the French law in the future.

Aylo, the parent company of major porn sites Pornhub and Brazzers with an office in Cyprus, told AFP in December:

The French rules would likely prove ineffective and dangerous for users' security and privacy. Beyond diverting users to other platforms, France's rules could add to the growing demand worldwide for virtual private network (VPN) services.

A VPN creates a tunnel between the source and the destination of internet traffic,. Using one can prevent intermediaries such as internet service providers (ISPs) from seeing the content of internet traffic, as well as allowing users to change their IP address, browsing as if they are in another location or country. Worldwide, around 28% of internet users aged 16-64 were using a VPN in 2023, according to specialist analytics site DataReporta.

VPN company reports a massive rise in VPN demand on 1st of January 2025 when a new Florida censorship law requiring age/ID verification for access to porn came into force. VPN-pushing vpnMentor documented a rather incredible 1150% spike in Floridians wanting to use a VPN to hide their location.

The major porn website Pornhub decided to self ban access from any IP address based in Florida. So even those viewers willing to stupidly hand over ID data to a porn site would be blocked, leaving a VPN as the main way of continuing to access Pornhub.

A vpnMentor spokesperson explained to the tech news site The Register:

To measure the impact of VPN demand the research team compiles data from a variety of sources. The team uses internal tools to assess changes in terms of search volume, web traffic, and clicks related to VPN services in general. We work with different metrics which we analyze, and we evaluate the searches or impressions that transform into downloads.

In March, Florida Governor Ron DeSantis signed the Online Protection for Minors act, aka House Bill 3 , into law. The legislation requires websites to verify visitors' ages, and for those hosting a substantial portion of material harmful to minors, such as Pornhub, to block access to anyone under 18 in an effort to prevent kids and teens from peeping on any pornographic videos.  HB3 allows fines of up to $50,000 for websites that don't comply with the regulations.

And so in response, Pornhub's parent company Aylo decided to yank the site from Florida users as it had already done in other states with similar laws, including Kentucky, Indiana, Idaho, Kansas, Nebraska, Texas, North Carolina, Montana, Mississippi, Virginia, Arkansas, and Utah. Pornhub explained:

Unfortunately, the way many jurisdictions worldwide, including Florida, have chosen to implement age verification is ineffective, haphazard, and dangerous.

Any regulations that require hundreds of thousands of adult sites to collect significant amounts of highly sensitive personal information is putting user safety in jeopardy. Moreover, as experience has demonstrated, unless properly enforced, users will simply access non-compliant sites or find other methods of evading these laws.