All guides
Status
Published guide
Publisher review
3 October 2026
Scope
UK-wide online service regime; Ofcom is the regulator; checked 3 October 2026

The Online Safety Act: why sites ask for age checks

Why pornography services in the UK must use highly effective age assurance, what an age check can mean, and how to consider privacy.

Prepared and publisher-reviewed by The UK Kink Guide. This is not external clinical or legal approval. What review means.

AI-generated editorial still life of a closed laptop, blank privacy card and brass key
AI-created editorial illustration; not documentary evidence.

Key points

Start with the essentials.

Why an adult site asks

The Online Safety Act 2023 sets duties for regulated online services to reduce children's access to pornography. It is a UK-wide regulatory framework, not four separate criminal statutes for individual viewers. Ofcom says services which publish their own pornography under Part 5 had to implement highly effective age assurance from 17 January 2025, while in-scope user-to-user services allowing it faced the 25 July 2025 deadline under the child-safety duties. Those obligations were in force when checked on 3 October 2026. The precise service category affects which provisions apply.

An adult may therefore be asked to verify or estimate age before seeing content, including on a general-purpose platform if it permits pornography. The check is aimed at preventing under-18s from normally encountering that content. It is not proof that every depiction was made consensually, that every image can lawfully be possessed, or that the site is trustworthy in all other respects. Possession rules and permission to share intimate images are separate questions.

Part 5 and user-to-user duties

Section 81 addresses services publishing their own pornographic content, the Act's Part 5 category. Legislation.gov.uk records it in force from 17 January 2025. The provider must use age verification or estimation that is highly effective at correctly determining whether a user is a child. Ofcom's guidance explains the provider's duties and its approach to age assurance. A site distributing its own catalogue and a platform that lets users upload content may face different obligations.

For user-to-user services, Ofcom's 24 July 2025 notice says platforms allowing pornography must have highly effective age checks from 25 July 2025. A provider may need to prevent children encountering other categories of harmful content too. Do not infer from an age prompt exactly which class of service it is: read the service's published explanation and the current Ofcom rules. The regulator, rather than a website's marketing copy, is the authoritative source for the legal duty.

What highly effective age assurance means

'Age assurance' covers age verification and age estimation methods. Ofcom assesses whether a method is accurate, robust, reliable and fair in context. An untested click on 'I am over 18' or typing a date of birth without meaningful checks does not by itself meet the high-effectiveness expectation. Providers may use different means, and Ofcom's guidance changes as evidence and services change. The law does not require every user to send a passport to every adult site; the correct question is what method the service has chosen and how it protects users.

The distinction matters for accessibility and privacy. Facial-age estimation, financial checks, mobile-network checks and identity-based methods may have different error rates, data flows and options when a check fails. Ofcom's age-check information describes the framework rather than endorsing an individual vendor. If a method fails to recognise you or asks for information you cannot provide, consult the site's published alternatives or complaints route. Do not borrow another person's identity to bypass a check.

Your privacy questions before you proceed

Before sharing identification or a face image, find the privacy notice: which organisation collects it, whether a third-party provider receives it, what is stored, for how long, and how you can ask about errors or deletion. The provider may confirm an age result without sharing the original document with the adult site, but do not assume that is true of a particular service. Use a trusted connection and check the domain carefully. A request outside the site's usual flow, especially through a direct message, deserves caution.

Think also about shared devices. Notifications, browser history, payment records or screenshots can reveal a visit even if age verification itself is discreet. Connected-product privacy and private online contact cover other data risks. An age check is a children's access control, not a general promise of anonymity. If the site will not explain the data process or offers only a suspicious external link, you can leave and seek its official help page before proceeding.

What Ofcom can do and what users can report

Ofcom regulates compliance by in-scope services. Its enforcement programme describes investigations into services that may lack effective controls. It does not mean a particular service is compliant simply because it displays an age screen, nor that a visitor commits an offence merely by encountering an adult-site prompt. Providers bear the age-assurance duty. The House of Commons Library's implementation briefing explains the phased introduction.

If you find intimate content shared without consent, report it to the platform through its abuse route and seek specialist help; a report about abuse differs from complaining about an inconvenient age check. The Revenge Porn Helpline supports adults affected by intimate-image abuse. If you are concerned about how an age-check company handles personal information, use its privacy contact and, if appropriate, the ICO's data-protection guidance. Ofcom's site explains regulatory complaints about online safety.

How the 2026 changes relate

The Crime and Policing Act 2026 section 99 inserted an offence concerning making or supplying purported intimate-image generators in the England and Wales Sexual Offences Act 2003. Legislation.gov.uk records commencement on 29 June 2026. The section 100 48-hour takedown systems duty for reported non-consensual intimate image content, with section 101 consequential provisions, also commenced on 29 June 2026. These are distinct from the older child-access age assurance obligation.

The 48-hour rule is not a blanket promise that any disputed upload will disappear within exactly two days. It applies to defined content and a valid report under the Act's conditions, with duties on regulated services to operate proportionate systems and processes. The Home Office factsheet explains the intended approach. Check current legislation and Ofcom guidance before relying on a particular route. The UK-wide Online Safety Act and the England-and-Wales generator offence have different territorial scope.

Common questions about age checks

Do I have to provide a passport? The Act calls for highly effective age assurance; it does not prescribe a passport for every visitor. Can a site just ask me to tick a box? A bare self-declaration is not the high-effectiveness standard Ofcom describes. Does seeing an age gate mean a site has been endorsed by Ofcom? No. Are adult visitors banned from viewing all pornographic content? The child-access rules are duties on service providers, not a ban on lawful adult viewing.

Do rules apply throughout the UK? The Online Safety Act regime is UK-wide, although other content offences differ by nation. Is a VPN a privacy guarantee? It cannot erase account, device or payment traces and may conflict with a site's terms; this page gives no evasion instructions. Can I challenge an incorrect age estimate? Look for the provider's published alternative and complaints route. For current guidance, use Ofcom rather than a screenshot from the 2025 rollout.

For questions about a provider's obligations, start with Ofcom's pornography and age-assurance pages and the live section 81. Citizens Advice or a solicitor can help with a dispute in your nation; the site UK help directory has support routes. The Revenge Porn Helpline is for adults facing intimate-image abuse, a separate problem from an ordinary age-check error.

The related glossary entries distinguish pornography literacy, adulthood and age of consent and digital consent.

If a service holds personal data and will not explain or correct it, follow its privacy complaint process and consider the ICO route. In immediate danger or following threats, seek safety and call 999. The regulatory rules and a platform's practice can change, so check the source dates. This guide is legal information, not legal advice about a provider, a user or a particular image.

Primary and authoritative sourcesOnline Safety Act 2023, section 81Ofcom: online pornographyOfcom: age checks from July 2025Ofcom: enforcement programmeHouse of Commons Library: implementationCrime and Policing Act 2026, sections 99–101Home Office: intimate image abuse factsheet

Where next?

Continue at your own pace.

Intimate images and digital consent Extreme pornography law UK law across the four nations Selling adult content online: law, tax and safety AI companions and sex chatbots: privacy and consent Read the starting definition Explore related definitions Browse all guides Review the evidence method