Ofcom's Statutory Report Signals a Turning Point for Age Checks

Ofcom has published its first statutory report on age assurance under the Online Safety Act, and the headline finding is straightforward: age verification technology is spreading fast across pornography sites, social media platforms, dating apps and gaming services in the UK. But the regulator's message is not one of celebration. Ofcom is warning that tougher enforcement is still needed, because deployment alone does not guarantee that checks are effective, consistent, or handled with appropriate care for user privacy.

This report matters because it is the first comprehensive, statutory look at how the age assurance requirements introduced by the Online Safety Act are actually playing out across the industry, rather than a single-sector snapshot. It follows earlier findings that social platforms have been failing on age checks, and it builds on concerns raised in Ofcom's one-year review of UK age checks, which already flagged privacy issues worth watching.

What the Report Actually Found

According to Ofcom, age assurance measures have become significantly more common across the platforms it regulates. That is a meaningful shift from a year ago, when many services had few or no meaningful checks in place. The growth spans multiple sectors: adult content providers, mainstream social networks, dating services, and online gaming platforms have all moved to implement some form of age verification or estimation.

Despite that progress, Ofcom's tone is cautionary rather than congratulatory. The regulator is explicit that tougher action is still required, implying that current implementation varies widely in quality and consistency. Some platforms may be adopting checks that satisfy the letter of the rules without necessarily delivering robust protection for children, or without adequately protecting the personal data of adult users who go through the same verification process.

This distinction matters. An age check that simply asks users to tick a box confirming they are over 18 looks very different, both in effectiveness and in privacy risk, from a system that verifies a government ID or uses facial estimation technology. Ofcom's report suggests the regulator is watching not just whether age assurance exists, but whether it is genuinely fit for purpose.

The Privacy Tradeoff Behind Age Assurance

Here is the part of the story that deserves more attention than it typically gets: every age check that gets stronger from a child-safety perspective tends to require more personal data from adults. Document-based verification, facial age estimation, and third-party identity checks all involve collecting and processing sensitive information, sometimes including biometric data, ID scans, or payment details.

For UK users, this creates a genuine tension. The Online Safety Act pushes platforms toward more effective age checks, and Ofcom's latest report signals it wants to see that trend continue. But more effective checks generally mean more data collection, more third-party verification vendors in the loop, and more places where a breach or misuse of that data could cause real harm. Our guide to the privacy risks of digital age checks breaks down exactly how these systems handle sensitive data and where the weak points tend to be.

This is not a uniquely British problem either. Age verification rules are expanding globally, and the UK's approach is being watched closely by regulators elsewhere. Our worldwide guide to age verification laws tracks how different countries are balancing child safety mandates against data protection standards, and the UK's experience is likely to inform how other jurisdictions calibrate their own rules.

Ofcom's willingness to call for tougher action, even as adoption numbers rise, suggests the regulator is aware of this tension. Simply mandating age checks is the easy part. Ensuring those checks are proportionate, secure, and not a backdoor for excessive data collection is the harder ongoing work, and it comes against a backdrop of separate enforcement action, including Ofcom's TikTok age verification probe, which shows the regulator is prepared to investigate individual platforms directly.

What This Means For You

If you use social media, dating apps, gaming platforms, or adult content sites in the UK, expect to encounter age checks more often, and expect the type of check to vary significantly between services. Some will ask for a quick selfie for age estimation, others may request ID upload, and some may still rely on weaker self-declaration methods that Ofcom is signaling it wants phased out.

Before submitting any personal data for an age check, it is worth asking a few questions: does the platform explain how long the data will be retained, is verification handled by the platform directly or outsourced to a third-party vendor, and is there a way to complete the check without uploading a full government ID. Not every service will answer these questions clearly, and that gap is precisely what Ofcom's report is pushing the industry to close.

Key Takeaways

  • Age assurance adoption has increased sharply across UK platforms, but Ofcom says enforcement and quality still need to improve.
  • Stronger age verification methods often mean more personal data collection, creating a real privacy tradeoff for adult users.
  • Check whether a platform's age verification is handled in-house or through a third party, and review its data retention policy before submitting ID or biometric information.
  • Expect continued regulatory scrutiny, including platform-specific investigations, as Ofcom works to standardize how age assurance is implemented across the UK.

Ofcom's report makes clear that the age assurance conversation in the UK is far from settled. As platforms race to comply, users should stay alert to how their data is being handled every time they're asked to prove their age.