Age verification proposals could expose people to exploitation

Open Rights Group has responded to Ofcom’s announcement that porn sites will be expected to verify the age of their users by July 2025.

James Baker, Platform Power Programme Manager said:

“Protecting children online is vital but we need to ensure that both children’s and adult’s privacy and security are not undermined in the process.

“Some of the verification methods that Ofcom has defined as highly effective could put people at risk of new cybercrimes.

“The roll-out of age-verification is likely to create new cybersecurity risks. This could take the form of more scam porn sites that will trick users into handing over personal data to ‘verify their age’.

“There needs to be a specific and enforceable guarantee that AV systems will be private, safe and secure. The new plans miss this vital step, so place people at risk of data leaks, and having their sexual interests exposed to blackmailers and scammers.

“Ofcom’s announcement comes at a time when the government’s Data use and Access Bill will weaken our data protection rights. This is a concern as the Information Commissioner’s Office (ICO) already has a poor record when it comes to enforcing data protection laws.

Notes to editor

The estimated cost of cybercrime to UK businesses is £21bn per annum – see: The Cost of Cybercrime report.

ORG’s ICO Alternative Report 2023-24 highlights how the data regulator’s failure to enforce data protection law is putting the public at risk.

ORG’s briefing outlines some of the risks from age verification proposals in the Online Safety Act.