UK Online Safety Act: Difference between revisions
Added archive URLs for 11 citation(s) using CRWCitationBot |
→Discord Third-Party Customer Service (5CA): added link to main article incident |
||
| (7 intermediate revisions by 6 users not shown) | |||
| Line 10: | Line 10: | ||
One of the duties of the act requires affected websites to implement their own solution for identity verification such that it is highly effective to prove one's age ([https://www.legislation.gov.uk/ukpga/2023/50#section-12-6 Section 12.6]). There is no official government-sanctioned identity verification platform. Each service provider must implement their own solution or find a third party solution to use to remain compliant. Another duty filters non-verified users from interacting with content made from an "adult user" ([https://www.legislation.gov.uk/ukpga/2023/50#section-15-10 Section 15.10]).<ref name="rossmann:1">{{Cite web|date=August 1, 2025|last=Rossmann |first=Louis |title=Tea app & UK Online Safety Act - the world is becoming a black mirror episode :(| url=https://www.youtube.com/watch?v=TNNsCuEvR5w&t=114 |ref=rossmann:1 |website=[[YouTube]] |access-date=August 25, 2025 |archive-url=https://preservetube.com/watch?v=TNNsCuEvR5w |archive-date=23 Feb 2026}}</ref> These non-verified users will also be less visible, provided the adult user has toggled it. | One of the duties of the act requires affected websites to implement their own solution for identity verification such that it is highly effective to prove one's age ([https://www.legislation.gov.uk/ukpga/2023/50#section-12-6 Section 12.6]). There is no official government-sanctioned identity verification platform. Each service provider must implement their own solution or find a third party solution to use to remain compliant. Another duty filters non-verified users from interacting with content made from an "adult user" ([https://www.legislation.gov.uk/ukpga/2023/50#section-15-10 Section 15.10]).<ref name="rossmann:1">{{Cite web|date=August 1, 2025|last=Rossmann |first=Louis |title=Tea app & UK Online Safety Act - the world is becoming a black mirror episode :(| url=https://www.youtube.com/watch?v=TNNsCuEvR5w&t=114 |ref=rossmann:1 |website=[[YouTube]] |access-date=August 25, 2025 |archive-url=https://preservetube.com/watch?v=TNNsCuEvR5w |archive-date=23 Feb 2026}}</ref> These non-verified users will also be less visible, provided the adult user has toggled it. | ||
While the press release says "the measures platforms have to put in place must confirm your age without collecting or storing personal data, unless absolutely necessary,"<ref name=":3">{{Cite news |last=Kyle |first=Peter |date=2025-08-01 |title=Keeping children safe online: changes to the Online Safety Act explained |url=https://www.gov.uk/government/news/keeping-children-safe-online-changes-to-the-online-safety-act-explained |access-date=2025-08-16 |work=Gov.UK}}</ref> the legislation requires that companies track usage by specific people and provide data and/or remote access to Ofcom on demand ([https://www.legislation.gov.uk/ukpga/2023/50#section-100 Section 100]) <ref name=":1">{{Cite journal |date=2025-07-25 |title=Online Safety Act 2023 |url=https://www.legislation.gov.uk/ukpga/2023/50 |journal=UK Public General Acts |volume=2023 |issue=50 |archive-url=http://web.archive.org/web/20260124060534/https://www.legislation.gov.uk/ukpga/2023/50 |archive-date=24 Jan 2026}}</ref> | While the press release says "the measures platforms have to put in place must confirm your age without collecting or storing personal data, unless absolutely necessary,"<ref name=":3">{{Cite news |last=Kyle |first=Peter |date=2025-08-01 |title=Keeping children safe online: changes to the Online Safety Act explained |url=https://www.gov.uk/government/news/keeping-children-safe-online-changes-to-the-online-safety-act-explained |access-date=2025-08-16 |work=Gov.UK |archive-url=http://web.archive.org/web/20260219223922/https://www.gov.uk/government/news/keeping-children-safe-online-changes-to-the-online-safety-act-explained |archive-date=19 Feb 2026}}</ref> the legislation requires that companies track usage by specific people and provide data and/or remote access to Ofcom on demand ([https://www.legislation.gov.uk/ukpga/2023/50#section-100 Section 100]) <ref name=":1">{{Cite journal |date=2025-07-25 |title=Online Safety Act 2023 |url=https://www.legislation.gov.uk/ukpga/2023/50 |journal=UK Public General Acts |volume=2023 |issue=50 |archive-url=http://web.archive.org/web/20260124060534/https://www.legislation.gov.uk/ukpga/2023/50 |archive-date=24 Jan 2026}}</ref> | ||
Enforcement of this act is done by the UK's Office of Communications (Ofcom). The penalty for breaking these rules is the greater of £18 million and 10% of the person’s qualifying worldwide revenue ([https://www.legislation.gov.uk/ukpga/2023/50#schedule-13-paragraph-4 Schedule 13.4]).<ref name=":1" /> | Enforcement of this act is done by the UK's Office of Communications (Ofcom). The penalty for breaking these rules is the greater of £18 million and 10% of the person’s qualifying worldwide revenue ([https://www.legislation.gov.uk/ukpga/2023/50#schedule-13-paragraph-4 Schedule 13.4]).<ref name=":1" /> | ||
| Line 37: | Line 37: | ||
===Wikipedia=== | ===Wikipedia=== | ||
The Wikimedia Foundation (WMF), which owns the digital encyclopedia platform | The Wikimedia Foundation (WMF), which owns the digital encyclopedia platform Wikipedia, sued the United Kingdom to prevent them from forcing age checks on their websites. The WMF made a statement that being forced to comply with this act would compromise the privacy of its editors and the neutrality of the encyclopedia. On 11 August 2025, the London High Court denied the WMF's reasoning, but didn't necessarily force age checks for the website.<ref>{{Cite web |last=Castro |first=Chiara |date=August 12, 2025 |title=Case dismissed – Wikipedia loses UK Online Safety Act legal challenge, but it may still be safe from age checks |url=https://www.techradar.com/vpn/vpn-privacy-security/case-dismissed-wikipedia-loses-uk-online-safety-act-legal-challenge-but-it-may-still-be-safe-from-age-checks |archive-url=http://web.archive.org/web/20260206093500/https://www.techradar.com/vpn/vpn-privacy-security/case-dismissed-wikipedia-loses-uk-online-safety-act-legal-challenge-but-it-may-still-be-safe-from-age-checks |archive-date=6 Feb 2026}}</ref><ref>{{Cite web |date=11 August 2025 |title=Wikimedia Foundation Challenges UK Online Safety Act Regulations |url=https://wikimediafoundation.org/news/2025/08/11/wikimedia-foundation-challenges-uk-online-safety-act-regulations/ |archive-url=http://web.archive.org/web/20250912103928/https://wikimediafoundation.org/news/2025/08/11/wikimedia-foundation-challenges-uk-online-safety-act-regulations/ |archive-date=12 Sep 2025}}</ref> | ||
===4Chan=== | ===4Chan=== | ||
| Line 60: | Line 60: | ||
===Discord Third-Party Customer Service (5CA)=== | ===Discord Third-Party Customer Service (5CA)=== | ||
{{Main|Discord / 5CA Data Breach}} | |||
On 3 October 2025, [[Discord]] issued a press release announcing "a Security Incident Involving Third-Party Customer Service [5CA]", in which "The unauthorized party [...] gained access to a small number of government‑ID images (e.g., driver’s license, passport) from users who had appealed an age determination".<ref>{{Cite web |date=2025-10-03 |title=Update on a Security Incident Involving Third-Party Customer Service |url=https://discord.com/press-releases/update-on-security-incident-involving-third-party-customer-service |url-status=live |archive-url=https://web.archive.org/web/20251006163040/https://discord.com/press-releases/update-on-security-incident-involving-third-party-customer-service |archive-date=2025-10-06 |access-date=2025-10-07 |website=discord.com}}</ref> The total number of ID images exposed was approximately 70,000. The data accessed came from an age-related appeals process which has been in place since before the OSA came into effect, and is used in conjunction with an "Automatic Age Check" system using k-ID.<ref>{{Cite web |date=2024-12-19 |title=Help! I'm old enough to use Discord in my country but I got locked out? |url=https://support.discord.com/hc/en-us/articles/360041820932-Help-I-m-old-enough-to-use-Discord-in-my-country-but-I-got-locked-out |url-status=live |archive-url=https://web.archive.org/web/20250127212200/https://support.discord.com/hc/en-us/articles/360041820932-Help-I-m-old-enough-to-use-Discord-in-my-country-but-I-got-locked-out |archive-date=27 Jan 2025 |access-date=2025-10-13 |website=Discord}}</ref> | On 3 October 2025, [[Discord]] issued a press release announcing "a Security Incident Involving Third-Party Customer Service [5CA]", in which "The unauthorized party [...] gained access to a small number of government‑ID images (e.g., driver’s license, passport) from users who had appealed an age determination".<ref>{{Cite web |date=2025-10-03 |title=Update on a Security Incident Involving Third-Party Customer Service |url=https://discord.com/press-releases/update-on-security-incident-involving-third-party-customer-service |url-status=live |archive-url=https://web.archive.org/web/20251006163040/https://discord.com/press-releases/update-on-security-incident-involving-third-party-customer-service |archive-date=2025-10-06 |access-date=2025-10-07 |website=discord.com}}</ref> The total number of ID images exposed was approximately 70,000. The data accessed came from an age-related appeals process which has been in place since before the OSA came into effect, and is used in conjunction with an "Automatic Age Check" system using k-ID.<ref>{{Cite web |date=2024-12-19 |title=Help! I'm old enough to use Discord in my country but I got locked out? |url=https://support.discord.com/hc/en-us/articles/360041820932-Help-I-m-old-enough-to-use-Discord-in-my-country-but-I-got-locked-out |url-status=live |archive-url=https://web.archive.org/web/20250127212200/https://support.discord.com/hc/en-us/articles/360041820932-Help-I-m-old-enough-to-use-Discord-in-my-country-but-I-got-locked-out |archive-date=27 Jan 2025 |access-date=2025-10-13 |website=Discord}}</ref> | ||
| Line 79: | Line 80: | ||
<blockquote>The internet must remain a place where all voices can be heard, free from discrimination or censorship by government agencies. If the UK really wants to achieve its goal of being the safest place in the world to go online, it must lead the way in introducing policies that actually protect all users—including children—rather than pushing the enforcement of legislation that harms the very people it was meant to protect.<ref>{{Cite web |last=Collings |first=Paige |date=2025-08-01 |title=No, the UK’s Online Safety Act Doesn’t Make Children Safer Online |url=https://www.eff.org/deeplinks/2025/08/no-uks-online-safety-act-doesnt-make-children-safer-online |archive-url=https://web.archive.org/web/20250812070622/https://www.eff.org/deeplinks/2025/08/no-uks-online-safety-act-doesnt-make-children-safer-online |archive-date=2025-08-12 |access-date=2025-08-17 |website=Electronic Frontier Foundation}}</ref></blockquote> | <blockquote>The internet must remain a place where all voices can be heard, free from discrimination or censorship by government agencies. If the UK really wants to achieve its goal of being the safest place in the world to go online, it must lead the way in introducing policies that actually protect all users—including children—rather than pushing the enforcement of legislation that harms the very people it was meant to protect.<ref>{{Cite web |last=Collings |first=Paige |date=2025-08-01 |title=No, the UK’s Online Safety Act Doesn’t Make Children Safer Online |url=https://www.eff.org/deeplinks/2025/08/no-uks-online-safety-act-doesnt-make-children-safer-online |archive-url=https://web.archive.org/web/20250812070622/https://www.eff.org/deeplinks/2025/08/no-uks-online-safety-act-doesnt-make-children-safer-online |archive-date=2025-08-12 |access-date=2025-08-17 |website=Electronic Frontier Foundation}}</ref></blockquote> | ||
===Theo Browne, YouTuber | ===Theo Browne, YouTuber and CEO at T3 Chat=== | ||
[[File:Online Safety Act | [[File:UK Online Safety Act offloading responsibility.png|thumb|Parents, government, platforms, identity providers]] | ||
Theo posted a [https://www.youtube.com/watch?v=6TZozNjPcGw YouTube video] covering the Online Safety Act and how it going to destroy the free internet if the internet community doesn't stop it ASAP. He said it's rare that he gets that extreme about something like this, but believes that it is a really important thing that the community jump in front of. | |||
The Online Safety Act will normalise providing your government-issued identification in order to see content, making everyone more susceptible and vulnerable to phishing attacks perpetrated by identity thieves. The act also shifts the responsibility of child safety to the government, who in turn shift it to the websites, who in turn shift it to a brand new identity and age verification industry. | The Online Safety Act will normalise providing your government-issued identification in order to see content, making everyone more susceptible and vulnerable to phishing attacks perpetrated by identity thieves. The act also shifts the responsibility of child safety to the government, who in turn shift it to the websites, who in turn shift it to a brand new identity and age verification industry. | ||
==Government response== | ==Government response== | ||
| Line 89: | Line 91: | ||
UK Parliament considers all petitions that get more than 100,000 signatures for debate. On 28 July 2025, when the petition to repeal the act had about 400,000 signatures, the government responded with this message: "The Government has no plans to repeal the Online Safety Act, and is working closely with Ofcom to implement the Act as quickly and effectively as possible to enable UK users to benefit from its protections.", only a few days after coming into force.<ref name=":0" /> This was only after three days (25 July 2025) the "highly effective age assurance" requirement came into force.<ref>{{Cite web |last=Department for Science, Innovation and Technology |date=2025-07-24 |title=Collection: Online Safety Act |url=https://www.gov.uk/government/collections/online-safety-act |archive-url=https://web.archive.org/web/20250724092803/https://www.gov.uk/government/collections/online-safety-act |archive-date=24 Jul 2025 |website=Gov.UK}}</ref> | UK Parliament considers all petitions that get more than 100,000 signatures for debate. On 28 July 2025, when the petition to repeal the act had about 400,000 signatures, the government responded with this message: "The Government has no plans to repeal the Online Safety Act, and is working closely with Ofcom to implement the Act as quickly and effectively as possible to enable UK users to benefit from its protections.", only a few days after coming into force.<ref name=":0" /> This was only after three days (25 July 2025) the "highly effective age assurance" requirement came into force.<ref>{{Cite web |last=Department for Science, Innovation and Technology |date=2025-07-24 |title=Collection: Online Safety Act |url=https://www.gov.uk/government/collections/online-safety-act |archive-url=https://web.archive.org/web/20250724092803/https://www.gov.uk/government/collections/online-safety-act |archive-date=24 Jul 2025 |website=Gov.UK}}</ref> | ||
The technology minister Peter Kyle said on Good Morning Britain, "if you want to overturn the Online Safety Act you are on the side of predators. Not those who want to keep children safe".<ref>{{Cite news |date=2025-07-29 |title=Peter Kyle Says 'Nigel Farage Is on the Side of Predators' |url=https://www.youtube.com/watch?v=y-MaeOLISlA |access-date=2025-08-16 |work=Good Morning Britain, Youtube}}</ref> | The technology minister Peter Kyle said on Good Morning Britain, "if you want to overturn the Online Safety Act you are on the side of predators. Not those who want to keep children safe".<ref>{{Cite news |date=2025-07-29 |title=Peter Kyle Says 'Nigel Farage Is on the Side of Predators' |url=https://www.youtube.com/watch?v=y-MaeOLISlA |access-date=2025-08-16 |work=Good Morning Britain, Youtube |archive-url=https://preservetube.com/watch?v=y-MaeOLISlA |archive-date=23 Feb 2026}}</ref> | ||
==See also== | ==See also== | ||
| Line 103: | Line 105: | ||
<!-- https://www.techdirt.com/2025/08/04/didnt-take-long-to-reveal-the-uks-online-safety-act-is-exactly-the-privacy-crushing-failure-everyone-warned-about/ --> | <!-- https://www.techdirt.com/2025/08/04/didnt-take-long-to-reveal-the-uks-online-safety-act-is-exactly-the-privacy-crushing-failure-everyone-warned-about/ --> | ||
[[Category: | [[Category:British legislation]] | ||