The article does not address the earlier failed UK age-verification effort under the Digital Economy Act 2017, whose collapse on privacy and implementation grounds directly informed the design of the Online Safety Act — and whose failure is highly relevant to evaluating whether the current regime is likely to succeed. The article also does not situate the Online Safety Act within the broader international regulatory landscape: the EU's Digital Services Act takes a risk-assessment approach rather than mandating age-gating, offering a meaningful policy contrast the article omits. The article does not mention the Act's provisions regarding illegal content (e.g., child sexual abuse material, terrorism content), which are distinct from the "harmful but legal" content provisions it criticizes — a distinction that matters for evaluating the law's overall design. Finally, the article does not note the significant parliamentary and civil-society debate during the Act's passage, including concerns raised by free-expression organizations such as the Open Rights Group and Index on Censorship, which anticipated many of the chilling-effect outcomes the article now describes as surprising.
Background. The United Kingdom's Online Safety Act 2023 is the culmination of a decade-long legislative effort to regulate internet content, particularly to protect children from harmful material. Its origins trace to the 2017 Internet Safety Strategy and the 2019 Online Harms White Paper, which proposed a statutory "duty of care" on platforms — a concept borrowed from tort law — requiring companies to take reasonable steps to protect users from harmful content. The White Paper was widely debated; civil liberties groups warned it could lead to over-censorship, while child-safety advocates argued it did not go far enough.
The Online Safety Act received Royal Assent in October 2023 after years of parliamentary debate, multiple revisions, and the resignation of at least one minister (Nadine Dorries) whose tenure shaped early drafts. The Act assigns enforcement authority to Ofcom, the existing broadcast and telecommunications regulator, granting it powers to fine non-compliant platforms up to 10% of global annual turnover or £18 million, whichever is greater. The Act distinguishes between "illegal content" duties (applying to all services) and "children's safety" duties (applying to services likely to be accessed by children), and creates a tiered category system of "priority" harmful content.
Age verification as a policy tool has a contested history in the UK. An earlier attempt — the Digital Economy Act 2017 — included age-verification requirements for pornographic websites, but the relevant provisions were never brought into force and were eventually repealed in 2021, partly due to privacy concerns and implementation difficulties. The Online Safety Act revived and broadened this approach.
Internationally, similar regulatory efforts have proliferated. Australia passed its Online Safety Act in 2021 and subsequently enacted a social media ban for children under 16 in 2024. The European Union's Digital Services Act (DSA), which came into force in 2024, imposes risk-assessment and mitigation obligations on large platforms, including protections for minors, though it does not mandate blanket age verification. The United States has repeatedly attempted but largely failed to pass comparable federal legislation, with the Children's Online Privacy Protection Act (COPPA) of 1998 remaining the primary federal law governing children's online privacy.
Generated by Claude from public sources.