Country profile

United Kingdom age-verification & online ID laws

In effect Online Safety Act 2023 effective Jul 25, 2025

Online Safety Act 2023 (Royal Assent Oct 2023).

Laws & bills on record

Adult content

In effect

Bill / statute: Online Safety Act 2023
Status: Active law in effect
Effective: Jul 25, 2025
Intrusiveness: Severe -- Criminal penalties, VPN targeting, or repeated re-checks with long data retention.

Online Safety Act 2023 (Royal Assent Oct 2023). Since July 25, 2025, services hosting pornography or content harmful to children must use "highly effective age assurance" -- typically photo-ID upload, credit-card check, facial-age estimation, mobile-network checks or open banking -- to keep under-18s out. Ofcom had opened 90+ investigations by February 2026 and has escalated steadily: AVS Group fined 1 million pounds (plus 50,000 for ignoring information requests) in December 2025 over 18 adult sites; Kick Online Entertainment fined 800,000 pounds in February 2026 for 34 sites drawing 9 million monthly UK visitors; an AI 'nudification' site fined 55,000 pounds; and 4chan hit with a 450,000-pound penalty plus daily fines after refusing to engage at all. Enforcement has widened past adult sites to generative AI, with investigations into X (over the Grok chatbot) and the AI service Joi.com opened in January 2026. Maximum penalty is 18 million pounds or 10% of global turnover, and Ofcom can seek court orders forcing ISPs to block a site outright. Some platforms left instead: Aylo blocked new UK users from Pornhub, YouPorn and RedTube on February 2, 2026, calling the regime a failure, before partially returning in May 2026 for users verified through Apple's new device-based age check.

Timeline

Oct 26, 2023Online Safety Act receives Royal Assent
Jul 25, 2025In effect
Jul 25, 2025Ofcom begins enforcing "highly effective" age checks
Aug 11, 2025High Court dismisses Wikimedia's judicial review of Category 1 thresholds
Dec 1, 2025AVS Group fined 1M pounds over 18 adult sites
Feb 2, 2026Aylo blocks new UK users from Pornhub, YouPorn and RedTube
Feb 12, 2026Kick Online Entertainment fined 800,000 pounds
Mar 1, 2026Ofcom fines 4chan 450,000 pounds plus daily penalties
May 5, 2026Aylo returns for UK iOS users after Apple ships device-based age verification
Jul 10, 2026Ofcom: Wikipedia does not meet Category 1 thresholds, but stays on a watch list

Source: gov.uk

Social media

Proposed

Bill / statute: Children's Wellbeing and Schools Act 2026 (under-16 social-media plan)
Status: Proposed bill (not yet law)
Effective: Planned spring 2027 (approx.)
Intrusiveness: High -- Broad reach: low or no content threshold, device/OS-level, or bundled with other verification.

The Children's Wellbeing and Schools Act 2026 (Royal Assent Apr 29, 2026) created powers to restrict under-16s' access to social media and to set the data-processing age of consent (13-16). On June 15, 2026 the government announced a ban on under-16s opening social-media accounts, enforced by ID upload or facial-age scan, targeted for spring 2027. Binding regulations are still being drafted, so this is a committed plan rather than an in-force requirement.

Timeline

Jun 15, 2026Proposed

Source: dlapiper.com

VPN restrictions

Direct VPN restriction rejected -- for now -- with the burden shifted to platforms. The arc: after the Online Safety Act age checks landed on July 25, 2025, Ofcom recorded UK VPN use doubling past 1.5 million active users and Proton logged sustained sign-up spikes of 1,400-1,800 percent, levels it said are usually associated with civil unrest. On January 21, 2026 the House of Lords voted 207-159 to amend the Children's Wellbeing and Schools Bill to require VPN providers to age-verify all UK users and block under-18s -- part of a package that also backed an under-16 social media ban and mandatory device-scanning software. The Commons did not carry the VPN mandate into law; instead Parliament enacted a general power (new section 214A) letting ministers restrict children's access to specified internet services by regulation, with a progress statement due within six months of Royal Assent. In July 2026 the government confirmed it will not ban or age-gate VPNs directly: the onus falls on platforms in scope of the new under-16 rules to detect and prevent age-check circumvention, and DSIT Secretary Liz Kendall asked Ofcom to report by October 2026 on what more services can do to detect and prevent VPN use on their platforms, alongside its late-July report on highly effective age assurance for under-16 checks. Adult VPN use remains legal and the government says it has no plans to change that -- but the 214A power now sits on the shelf, and platform-side VPN detection is becoming a compliance expectation. The July 15 Ofcom report put data under the decision: UK VPN use doubled after age checks arrived, but only 'a relatively small minority of children' use them to reach restricted content -- 5 percent of children in Ofcom's study, and just 1.4 percent in YouGov polling commissioned by the VPN Trust Initiative. The VPN industry called leaving VPNs alone 'the right call'; the enforcement burden stays on platforms.

Source: biometricupdate.com

Digital ID

Scrapped. Keir Starmer announced a free national digital ID on 25 September 2025, to sit in a GOV.UK wallet and become mandatory for right-to-work checks, with full rollout targeted for 2029. It drew the sharpest public backlash of any recent UK digital policy: a parliamentary petition against it gathered close to three million signatures, among the largest in British history, thousands marched from Marble Arch to Whitehall on 18 October 2025, and cybersecurity specialists warned about pooling that much sensitive identity data in one place. The government dropped the mandatory element in January 2026 and made the scheme voluntary. That was not enough to save it. Andy Burnham, who became prime minister on 20 July 2026, confirmed on taking office that the programme -- costed at around 1.8 billion pounds -- is cancelled outright, with the money redirected to cost-of-living measures including household energy bills. The wider government digital transformation programme and individual digital public services continue; what was abandoned is the universal government-issued identity credential. A rare case of a national digital-ID scheme defeated by sustained public opposition rather than by a court. Separately, device-level age assurance still applies in the UK: with iOS 26.4 in May 2026 Apple shipped what Aylo called the world's first device-based age verification for its UK users, letting sites read an OS-level age signal instead of collecting ID documents themselves. Ofcom's statutory age-assurance report, published July 15, 2026, is the first full audit of the regime: children encountering highly effective age checks rose from 25 to 43 percent between July 2025 and January 2026; 83 adult sites are under investigation and provider AVS was fined 1 million pounds; a formal probe of TikTok's age assurance opened alongside the report. Ofcom voiced 'serious doubts' about age-inference systems that estimate age from behavior -- the method several major platforms lean on. Next: a rapid assessment to Parliament by end of October on what highly effective verification looks like for over-16 checks, feeding under-16 social media restrictions targeted for 2027.

Source: aljazeera.com

Frequently asked questions

Does United Kingdom require age verification to access adult websites?

Yes. Online Safety Act 2023 is in effect, effective Jul 25, 2025. Online Safety Act 2023 (Royal Assent Oct 2023).

Does United Kingdom require age checks or ID to use social media?

Not yet -- a bill is pending. Children's Wellbeing and Schools Act 2026 (under-16 social-media plan) is proposed, effective Planned spring 2027. The Children's Wellbeing and Schools Act 2026 (Royal Assent Apr 29, 2026) created powers to restrict under-16s' access to social media and to set the data-processing age of consent (13-16).

Are VPNs restricted in United Kingdom?

Direct VPN restriction rejected -- for now -- with the burden shifted to platforms.

Does United Kingdom have a digital ID requirement?

← See United Kingdom on the world map

Other countries

Browse all 173 countries