Skip to content 
Introduction to the Online Safety Act
As of 25 July 2025, the UK’s Online Safety Act introduced new child safety duties for all online platforms accessible to children. These changes mean sites must now do more than assume — they must verify — that under‑18s can’t access illegal or harmful content, especially user‑generated pornography and adult content.
Why now? What changed?
While earlier rules focused on blocking illegal content, the latest steps shift to age assurance.
Within three months of publishing the Children’s Safety Codes of Practice, providers were expected to assess whether children might access their services. For most platforms, the answer was yes — so they needed to carry out a proper risk assessment and set up effective age verification systems.
Who needs to act – and when?
- Since January 2025, sites that publish their own adult content (like porn sites or AI‑generated adult content) had to implement strong age checks — not simple tick‑boxes any more.
- From 25 July 2025, this now applies to all platforms where users can post pornographic content — meaning social media, video sharing, forums, and more.
What counts as acceptable age verification?
Ofcom hasn’t mandated a specific technology, but has set expectations for what counts as “highly effective” verification. Methods they consider acceptable include:
- Credit card checks
- Digital identity verification (e‑ID services)
- Facial age estimation via AI tools
Several major platforms have already moved publicly to comply:
- Pornhub plans enhanced age checks
- X is looking into AI‑based facial age estimation
What happens if platforms don’t comply?
Ofcom is stepping up enforcement in a big way:
- They are investigating sites that haven’t properly implemented both the illegal content and the new children’s safety rules.
- If platforms don’t comply, they could face a fine of up to £18 million or 10% of global revenue, whichever is higher.
- Importantly, any service accessible in the UK — no matter where it’s based — is covered.
What does it mean for businesses and users?
- There’s no room for minimum effort — simple zip codes or tick boxes are out. Platforms must proactively verify ages.
- Companies have to carefully balance safety without over‑intruding on privacy, and avoid unfair access barriers.
- The regulatory world is still evolving. Right now, the focus is on transparency, accountability, and operational compliance. More detailed guidance is expected in the coming months.
How can we help?
Our Stay Legal service, can:
- Review your current website setup and flag compliance gaps
- Advise on the new legal requirements under the Online Safety Act
- Recommend and help implement age assurance tools that meet Ofcom’s expectations
- Ensure your data protection practices align with these changes
Whether you’re running a content site, community platform, or online service that might be accessed by under-18s, we’ll help you stay compliant — and avoid costly penalties.
Need help navigating the changes?
Get in touch with our team today for a compliance check-up tailored to your business.
