UK Online Safety Act: Difference between revisions
AnOddFellow (talk | contribs) Generally tried to clean up the grammar and tone of this article. NOT FINISHED, especially in the section on Theo Browne's video. |
Clarified Discord data breach details |
||
| (6 intermediate revisions by 3 users not shown) | |||
| Line 6: | Line 6: | ||
|ArticleType=Legislation}} | |ArticleType=Legislation}} | ||
United Kingdom's [[wikipedia:Online Safety Act 2023|Online Safety Act 2023]] is a set of laws that claims to protect children and adults online.<ref name=":2">{{Cite web |date=April 24, 2025 |title=Online Safety Act: explainer |url=https://www.gov.uk/government/publications/online-safety-act-explainer/online-safety-act-explainer |website=Gov.uk}}</ref> The act applies to search services and services that allow users to post content online or to interact with each other ([https://www.legislation.gov.uk/ukpga/2023/50#section-4 Section 4]). | United Kingdom's [[wikipedia:Online Safety Act 2023|Online Safety Act 2023]] (OSA) is a set of laws that claims to protect children and adults online.<ref name=":2">{{Cite web |date=April 24, 2025 |title=Online Safety Act: explainer |url=https://www.gov.uk/government/publications/online-safety-act-explainer/online-safety-act-explainer |website=Gov.uk}}</ref> The act applies to search services and services that allow users to post content online or to interact with each other ([https://www.legislation.gov.uk/ukpga/2023/50#section-4 Section 4]). | ||
One of the duties of the act requires affected websites to implement their own solution for identity verification such that it is highly effective to prove one's age ([https://www.legislation.gov.uk/ukpga/2023/50#section-12-6 Section 12.6]). There is no official government-sanctioned identity verification platform. Each service provider must implement their own solution or find a third party solution to use to remain compliant. Another duty filters non-verified users from interacting with content made from an "adult user" ([https://www.legislation.gov.uk/ukpga/2023/50#section-15-10 Section 15.10])<ref name="rossmann:1">{{Cite web|date=August 1, 2025|last=Rossmann |first=Louis |title=Tea app & UK Online Safety Act - the world is becoming a black mirror episode :(| url=https://www.youtube.com/watch?v=TNNsCuEvR5w&t=114 |ref=rossmann:1 |website=[[YouTube]] |access-date=August 25, 2025}}</ref>. These non-verified users will also be less visible, provided the adult user has toggled it. | One of the duties of the act requires affected websites to implement their own solution for identity verification such that it is highly effective to prove one's age ([https://www.legislation.gov.uk/ukpga/2023/50#section-12-6 Section 12.6]). There is no official government-sanctioned identity verification platform. Each service provider must implement their own solution or find a third party solution to use to remain compliant. Another duty filters non-verified users from interacting with content made from an "adult user" ([https://www.legislation.gov.uk/ukpga/2023/50#section-15-10 Section 15.10])<ref name="rossmann:1">{{Cite web|date=August 1, 2025|last=Rossmann |first=Louis |title=Tea app & UK Online Safety Act - the world is becoming a black mirror episode :(| url=https://www.youtube.com/watch?v=TNNsCuEvR5w&t=114 |ref=rossmann:1 |website=[[YouTube]] |access-date=August 25, 2025}}</ref>. These non-verified users will also be less visible, provided the adult user has toggled it. | ||
| Line 16: | Line 16: | ||
The Online Safety Act is a "Bill to make provision for and in connection with the regulation by Ofcom of certain internet services; for and in connection with communications offences; and for connected purposes."<ref name=":4">{{Cite web |date=2024-08-19 |title=Online Safety Act 2023 |url=https://bills.parliament.uk/bills/3137 |access-date=2025-08-17 |website=UK Parliament: Parliamentary Bills}}</ref> | The Online Safety Act is a "Bill to make provision for and in connection with the regulation by Ofcom of certain internet services; for and in connection with communications offences; and for connected purposes."<ref name=":4">{{Cite web |date=2024-08-19 |title=Online Safety Act 2023 |url=https://bills.parliament.uk/bills/3137 |access-date=2025-08-17 |website=UK Parliament: Parliamentary Bills}}</ref> | ||
The Online Safety Act received royal assent on 26 October 2023, following five years of work by Carnegie UK, working in concert with over 50 partners. In 2018, Carnegie UK published a series of blogs by William Perrin and Professor Lorna Woods, outlining the proposal for social media regulation. The UK Government published its [https://www.gov.uk/government/consultations/online-harms-white-paper White Paper] on 8 April 2019, tackling online harm, with a duty of care approach at its core. Carnegie UK ended their work on the Online Safety Act in October 2023.<ref name="online-safety-and-carnegie-uk">{{Cite web |last=Davidson |first=Sarah |date=26 October 2023 |title=Online safety and Carnegie UK |url=https://carnegieuk.org/blog/online-safety-and-carnegie-uk/ |archive-url=https://web.archive.org/web/20250701203854/https://carnegieuk.org/blog/online-safety-and-carnegie-uk/ |archive-date=2025-07-01 |access-date=2025-08-17 |website=Carnegie UK}}</ref><ref name=":6">{{Cite web |last=Sim |first=Kate |date=August 7, 2025| title=The Online Safety Act Has Nothing to Do With Child Safety and Everything to Do With Censorship| url=https://novaramedia.com/2025/08/07/the-online-safety-act-has-nothing-to-do-with-child-safety-and-everything-to-do-with-censorship/ |website=Novara Media |access-date=August 25, 2025}}</ref> | The Online Safety Act received royal assent on 26 October 2023, following five years of work by Carnegie UK, working in concert with over 50 partners. In 2018, Carnegie UK published a series of blogs by William Perrin and Professor Lorna Woods, outlining the proposal for social media regulation.<ref>{{Cite web |date=25-09-01 |title=Tackling Online Harms |url=https://carnegieuk.org/programmes/online-harms/ |url-status=live |archive-url=https://web.archive.org/web/20241225063325/https://carnegieuk.org/programmes/online-harms/ |archive-date=2025-12-25 |access-date=2025-09-01 |website=Carnegie UK}}</ref> The UK Government published its [https://www.gov.uk/government/consultations/online-harms-white-paper White Paper] on 8 April 2019, tackling online harm, with a duty of care approach at its core. Carnegie UK ended their work on the Online Safety Act in October 2023.<ref name="online-safety-and-carnegie-uk">{{Cite web |last=Davidson |first=Sarah |date=26 October 2023 |title=Online safety and Carnegie UK |url=https://carnegieuk.org/blog/online-safety-and-carnegie-uk/ |archive-url=https://web.archive.org/web/20250701203854/https://carnegieuk.org/blog/online-safety-and-carnegie-uk/ |archive-date=2025-07-01 |access-date=2025-08-17 |website=Carnegie UK}}</ref><ref name=":6">{{Cite web |last=Sim |first=Kate |date=August 7, 2025| title=The Online Safety Act Has Nothing to Do With Child Safety and Everything to Do With Censorship| url=https://novaramedia.com/2025/08/07/the-online-safety-act-has-nothing-to-do-with-child-safety-and-everything-to-do-with-censorship/ |website=Novara Media |access-date=August 25, 2025}}</ref> | ||
The bill was sponsored by Michelle Donelan, the (now former) Conservative MP for Chippenham and Lord Parkinson of Whitley Bay, a current member of the House of Lords. Both on behalf of the UK Department for Digital, Culture, Media and Sport. <ref name=":4" /> | The bill was sponsored by Michelle Donelan, the (now former) Conservative MP for Chippenham and Lord Parkinson of Whitley Bay, a current member of the House of Lords. Both on behalf of the UK Department for Digital, Culture, Media and Sport. <ref name=":4" /> | ||
| Line 34: | Line 34: | ||
===YouTube=== | ===YouTube=== | ||
{{Main|Youtubes Requirement for Government ID}} | {{Main|Youtubes Requirement for Government ID}} | ||
On July | On 30 July 2025, [[YouTube]] responded by announcing its verification system, requesting users for either a government-issued ID, a photo, or credit card, in order to show that users are 18 and older. Age will be estimated through various information, including videos watched, and would lock users flagged below 18 unless they send one of aforementioned proofs.<ref>{{Cite web |last=Ingram |first=Michael |date=30 Jul 2025 |title=YouTube is Rolling Out A New Controversial Feature |url=https://gamerant.com/youtube-new-age-verification-feature-id-recognition/ |url-status=live |access-date=14 Aug 2025 |website=GameRant}}</ref> | ||
===Wikipedia=== | ===Wikipedia=== | ||
The [[Wikimedia Foundation]] (WMF) sued the United Kingdom to prevent them from forcing age checks on their websites. The WMF made a statement that being forced to comply with this act would compromise the privacy of its editors and the neutrality of the encyclopedia. On August | The [[Wikimedia Foundation]] (WMF) sued the United Kingdom to prevent them from forcing age checks on their websites. The WMF made a statement that being forced to comply with this act would compromise the privacy of its editors and the neutrality of the encyclopedia. On 11 August 2025, the London High Court denied the WMF's reasoning, but didn't necessarily force age checks for the website.<ref>{{Cite web |last=Castro |first=Chiara |date=August 12, 2025 |title=Case dismissed – Wikipedia loses UK Online Safety Act legal challenge, but it may still be safe from age checks |url=https://www.techradar.com/vpn/vpn-privacy-security/case-dismissed-wikipedia-loses-uk-online-safety-act-legal-challenge-but-it-may-still-be-safe-from-age-checks}}</ref><ref>{{Cite web |date=11 August 2025 |title=Wikimedia Foundation Challenges UK Online Safety Act Regulations |url=https://wikimediafoundation.org/news/2025/08/11/wikimedia-foundation-challenges-uk-online-safety-act-regulations/}}</ref> | ||
===4Chan=== | ===4Chan=== | ||
| Line 55: | Line 55: | ||
Since enforcement began, the UK’s media regulator Ofcom has reportedly sent formal notices to several US tech companies, instructing them to comply or face penalties. These letters have ignited backlash among American lawmakers, many of whom argue that Britain has crossed a line by trying to dictate speech rules to American businesses and citizens. House Judiciary Chair Jim Jordan, along with other members of Congress, has taken his concerns directly to British ministers, raising objections with Science Secretary Peter Kyle.<ref>{{Cite news |last=Frieth |first=Dan |date=2025-07-31 |title=The White House Puts UK Prime Minister Keir Starmer on Notice Over UK’s Dangerous Online Censorship Laws |url=https://reclaimthenet.org/us-uk-clash-over-online-safety-act-free-speech |access-date=2025-08-18 |work=Reclaim the Internet}}</ref> | Since enforcement began, the UK’s media regulator Ofcom has reportedly sent formal notices to several US tech companies, instructing them to comply or face penalties. These letters have ignited backlash among American lawmakers, many of whom argue that Britain has crossed a line by trying to dictate speech rules to American businesses and citizens. House Judiciary Chair Jim Jordan, along with other members of Congress, has taken his concerns directly to British ministers, raising objections with Science Secretary Peter Kyle.<ref>{{Cite news |last=Frieth |first=Dan |date=2025-07-31 |title=The White House Puts UK Prime Minister Keir Starmer on Notice Over UK’s Dangerous Online Censorship Laws |url=https://reclaimthenet.org/us-uk-clash-over-online-safety-act-free-speech |access-date=2025-08-18 |work=Reclaim the Internet}}</ref> | ||
==Data breaches including ID documents== | |||
Since the Online Safety Act came into effect, at least one known data breach has included sensitive ID documents used for age verification. Note that these breaches may ''not'' be linked directly to age verification methods implemented for OSA compliance, but nonetheless highlight the risks of sensitive ID documents being handled by private organizations. | |||
===Discord Third-Party Customer Service (5CA)=== | |||
On 3 October 2025, [[Discord]] issued a press release announcing "a Security Incident Involving Third-Party Customer Service [5CA]", in which "The unauthorized party [...] gained access to a small number of government‑ID images (e.g., driver’s license, passport) from users who had appealed an age determination".<ref>{{Cite web |date=2025-10-03 |title=Update on a Security Incident Involving Third-Party Customer Service |url=https://discord.com/press-releases/update-on-security-incident-involving-third-party-customer-service |url-status=live |archive-url=https://web.archive.org/web/20251006163040/https://discord.com/press-releases/update-on-security-incident-involving-third-party-customer-service |archive-date=2025-10-06 |access-date=2025-10-07 |website=discord.com}}</ref> The total number of ID images exposed was approximately 70,000. The data accessed came from an age-related appeals process which has been in place since before the OSA came into effect, and is used in conjunction with an "Automatic Age Check" system using k-ID.<ref>{{Cite web |date=2024-12-19 |title=Help! I'm old enough to use Discord in my country but I got locked out? |url=https://support.discord.com/hc/en-us/articles/360041820932-Help-I-m-old-enough-to-use-Discord-in-my-country-but-I-got-locked-out |url-status=live |access-date=2025-10-13 |website=Discord}}</ref> | |||
==Consumer response== | ==Consumer response== | ||
According to analysis by Cloudwards, [[Google]] searches for "how to get around age verification" and "is VPN legal in the UK" saw a massive growth of over 450 thousand and 380 thousand percent respectively.<ref name=":5" /> United Kingdom saw an increased VPN usage by 1400 percent.<ref name="UK_VPN">{{Cite web |last=Speed |first=Richard |date=July 28, 2025 |title=UK VPN demand soars after debut of Online Safety Act |url=https://www.theregister.com/2025/07/28/uk_vpn_demand_soars/ |access-date=August 15, 2025 |website=The Register}}</ref> As of August | According to analysis by Cloudwards, [[Google]] searches for "how to get around age verification" and "is VPN legal in the UK" saw a massive growth of over 450 thousand and 380 thousand percent respectively.<ref name=":5" /> United Kingdom saw an increased VPN usage by 1400 percent.<ref name="UK_VPN">{{Cite web |last=Speed |first=Richard |date=July 28, 2025 |title=UK VPN demand soars after debut of Online Safety Act |url=https://www.theregister.com/2025/07/28/uk_vpn_demand_soars/ |access-date=August 15, 2025 |website=The Register}}</ref> As of 16 August 2025, there has been at least 500 thousand signatures petitioning to repeal the act.<ref name=":0">{{Cite web |last=Baynham |first=Alex |date=2025-04-22 |title=Repeal the Online Safety Act |url=https://petition.parliament.uk/petitions/722903 |website=Petitions: UK Government and Parliament}}</ref> | ||
=== | ===OnlineSafetyAct.co.uk=== | ||
[https://onlinesafetyact.co.uk/in_memoriam/ OnlineSafetyAct.co.uk] is a website which was created in response to the Act's implementation and is operated by Neil Brown<ref>{{Cite web |last=Brown |first=Neil |title=OnlineSafetyAct.co.uk |url=https://onlinesafetyact.co.uk/contact/ |access-date=2025-08-16 |website=OnlineSafetyAct.co.uk}}</ref>, a UK tech lawyer ([https://decoded.legal decoded.legal]).<ref>{{Cite web |last=Brown |first=Neil |title=Neil Brown (@[email protected]) |url=https://mastodon.neilzone.co.uk/@neil |access-date=2025-08-16 |website=mastodon.neilzone.co.uk}}</ref> It lists all of the websites affected by the Online Safety Act, with the help of user submissions. | [https://onlinesafetyact.co.uk/in_memoriam/ OnlineSafetyAct.co.uk] is a website which was created in response to the Act's implementation and is operated by Neil Brown<ref>{{Cite web |last=Brown |first=Neil |title=OnlineSafetyAct.co.uk |url=https://onlinesafetyact.co.uk/contact/ |access-date=2025-08-16 |website=OnlineSafetyAct.co.uk}}</ref>, a UK tech lawyer ([https://decoded.legal decoded.legal]).<ref>{{Cite web |last=Brown |first=Neil |title=Neil Brown (@[email protected]) |url=https://mastodon.neilzone.co.uk/@neil |access-date=2025-08-16 |website=mastodon.neilzone.co.uk}}</ref> It lists all of the websites affected by the Online Safety Act, with the help of user submissions. | ||
| Line 84: | Line 90: | ||
The technology minister Peter Kyle said on Good Morning Britain, "if you want to overturn the Online Safety Act you are on the side of predators. Not those who want to keep children safe."<ref>{{Cite news |date=2025-07-29 |title=Peter Kyle Says 'Nigel Farage Is on the Side of Predators' |url=https://www.youtube.com/watch?v=y-MaeOLISlA |access-date=2025-08-16 |work=Good Morning Britain, Youtube}}</ref> | The technology minister Peter Kyle said on Good Morning Britain, "if you want to overturn the Online Safety Act you are on the side of predators. Not those who want to keep children safe."<ref>{{Cite news |date=2025-07-29 |title=Peter Kyle Says 'Nigel Farage Is on the Side of Predators' |url=https://www.youtube.com/watch?v=y-MaeOLISlA |access-date=2025-08-16 |work=Good Morning Britain, Youtube}}</ref> | ||
==See also== | |||
*[[Ofcom]] | |||
*[[Data Protection Act 2018]] | |||
*[[Freedom of expression in the United Kingdom]] | |||
*[[General Data Protection Regulation]] | |||
==References== | ==References== | ||