UK porn sites could verify age using credit cards or passports in revived plans

Illustration by Alex Castro / The Verge

The UK government has revived plans for porn sites to verify users’ ages — an initiative that was scrapped in 2019 due to technical challenges and criticism from privacy campaigners.

The new rules will be part of the UK’s Online Safety Bill, a mammoth piece of legislation intended to reset how digital platforms are governed in the country. The bill originally stipulated that only porn sites that allowed user-generated content (like OnlyFans) would have to verify users’ ages, but this has now been updated to cover all pornography sites.

“Parents deserve peace of mind that their children are protected online from seeing things no child should see,” said digital minister Chris Philp in a statement. “We are now strengthening the online safety bill so it applies to all porn sites to ensure we achieve our aim of making the internet a safer place for children.”

Details of how age-checks will be implemented are not yet clear, and individual companies will decide for themselves how to comply with the new rules. Without guarantees from the government on users’ privacy, this approach will likely reawaken old fears that such age-checks could leave users exposed; creating databases of pornography users that would be ripe targets for hackers looking to blackmail or extort individuals.

As Jim Killock, executive director of the UK’s Open Rights Group, told The Guardian: “There is no indication that this proposal will protect people from tracking and profiling porn viewing. We have to assume the same basic mistakes about privacy and security may be about to be made again.”

The UK government said possible methods of age verification could include “checking a user’s age against details that their mobile provider holds, verifying via a credit card check, and other database checks including government held data such as passport data.” However, it is possible that these credentials could be used to verify age without also checking an individual’s identity.

Sites that fail to introduce age checks could be blocked from operating in the UK via blacklists issued to the country’s ISPs. And they could be fined 10 percent of their annual worldwide income.