If you have gone online in the UK recently, chances are you have hit a screen asking you to prove your age before you can watch a video, join a platform, or open an app. It is part of the UK age verification law, one of the biggest changes to how the internet works in Britain in years.
What is the UK age verification law?
The UK age verification law comes from the Online Safety Act 2023, legislation designed to make online spaces safer (especially for children). Under this act, websites and apps that under-18s could reasonably access must use age “assurance” methods that are “highly effective” at telling children and adults apart.
Who does the verification?
Ofcom enforces this. They have real enforcement power, including the ability to fine companies up to 10% of their global revenue for noncompliance. However, this is not the UK’s first attempt.
When was the concept developed?
In 2017, the Digital Economy Act tried to introduce similar rules, but the plan was dropped in 2019 because of privacy concerns and technical problems. The Online Safety Act was written to learn from that failure, with a broader and more flexible approach.
Why did the UK introduce age verification?
The short answer is: internet safety for kids. Lawmakers and child safety groups had long raised concerns that minors could access pornography, gambling sites, and other harmful content with almost no barriers.
According to them, a simple “I am over 18” checkbox was never a real safeguard, since anyone could click it regardless of their actual age. The Online Safety Act was designed to close that gap. It puts the responsibility on platforms, not just parents, to keep harmful content away from children.
Under the new rules, self-declaration alone is no longer considered acceptable. Services have to use methods that can genuinely estimate or confirm a user’s age.
How does age verification actually work?
Ofcom recognizes several methods as acceptable forms of age assurance. None are perfect, and each has its own trade-offs.
| Method | How it works | Where it is common |
| Facial age estimation | AI analyses a live photo or scan to estimate an age range | Adult content sites, some social apps |
| Photo ID matching | Users upload a passport or driving license for verification | Gambling sites, adult platforms |
| Open banking checks | A user’s bank confirms they are over 18 without sharing other data | Alcohol and age-restricted retail |
| Digital identity services | A trusted third-party app verifies age once and can be reused across sites | Growing across multiple sectors |
| Mobile network checks | Your phone provider confirms whether the account is registered as an adult line | Some apps and content filters |
Each website chooses the method (or combination of methods) that suits its risk level and its users. High-risk services, such as those hosting pornography, are expected to use the most robust checks available.
Which platforms does the law apply to?
This is one of the most misunderstood parts of the law. It is not limited to adult websites. The Online Safety Act applies to any platform that is “likely to be accessed by children,” which in practice covers a wide range of services:
- Adult content platforms
- Social media and messaging apps with mature or unmoderated content
- Online gambling and betting sites
- Some gaming platforms with mature-rated content
- Dating apps
- Certain AI chatbot and companion services
Ofcom has already opened investigations into dozens of services since enforcement began in July 2025, including well-known adult sites, forums, and even AI platforms, and has issued fines running into the hundreds of thousands of pounds for non-compliance.
What are the benefits of age verification?
| # | Benefit | What it means |
| 1 | Real protection for children | A properly built age check is far harder to pass than a tick-box, which means fewer children stumbling onto harmful content by accident. |
| 2 | Accountability for platforms | Companies can no longer claim ignorance. If they host content that could harm minors, they now have a legal duty to act. |
| 3 | A more consistent standard | Before this law, age checks varied wildly from site to site. Now there is a clearer, regulator-backed bar that services must meet. |
| 4 | Support for parents | Age verification adds another layer of protection alongside parental controls, rather than leaving parents to manage everything on their own. |
What are the drawbacks of age verification?
| # | Drawback | What it means |
| 1 | Privacy concerns | Uploading a passport or scanning your face to a website means handing over sensitive personal data. Even with safeguards in place, no system is completely breach-proof, and mishandled data is a real risk under UK data protection law. |
| 2 | Friction for adults | Many adults find the extra steps frustrating, especially on platforms they already use safely and legally. |
| 3 | Uneven accuracy | Facial age estimation is not always precise, and it can misjudge people who look older or younger than they are. |
| 4 | Cost for smaller platforms | Building or buying reliable age assurance tools is expensive, which can be a heavier burden on smaller businesses than on large tech companies. |
| 5 | Determined workarounds | Some users look for ways around the checks entirely, including a sharp rise in VPN downloads reported right after enforcement began. This shows a law alone cannot guarantee behavior changes; it has to be paired with genuine platform accountability and public awareness. |
How you can protect your privacy while staying compliant
Age verification is here to stay, and platforms are legally required to ask for it where it applies. That doesn’t mean you have to give up protecting your broader online privacy. A few habits go a long way:
- Only complete age checks on official, verified platforms, never on suspicious pop-ups or unfamiliar third-party links.
- Read a platform’s privacy policy before uploading ID or biometric data, and check how long they store it.
- Keep your devices and apps updated, since outdated software is one of the easiest ways for your data to leak.
FAQs
No. It also applies to gaming platforms, social media, dating apps, gambling sites, and some AI services, depending on the risk of children accessing harmful content.
Ofcom can investigate, issue fines of up to 10% of global revenue, and in serious cases refer companies for further action.
It depends on the platform. UK data protection law requires companies to only keep personal data for as long as necessary and to protect it properly, so it is worth checking each service’s privacy policy.
Yes. An earlier attempt under the Digital Economy Act 2017 was scrapped in 2019 due to privacy and technical issues. The Online Safety Act was designed with those lessons in mind.
Final thoughts
The UK age verification law is one of the clearest signs that online safety is being taken seriously at a national level. People think it is not a perfect system, and it raises fair questions about privacy, data handling, and how much friction is reasonable for adult users. But its core goal, protecting children from harmful content, is hard to argue against.