Porn sites will be legally required to verify users' age

Porn websites will be legally required to verify the age of their users under new internet safety laws.

The legislation, which is part of the draft Online Safety Bill, aims to give children better protection from explicit material.

The measures, to ensure users are 18 or over, could see people asked to prove they own a credit card or confirm their age via a third-party service.

Sites that fail to act could be fined up to 10% of their global turnover.

The Online Safety Bill is expected to be introduced to parliament over the next few months and is designed to protect users from harmful content.

Children's safety groups have long been calling for age verification on porn sites, over fears it is too easy for minors to access publically available material online.

Studies show that half of 11 to 13-year-olds have seen pornography at some point.

Experts who work with children say it gives them unhealthy views of sex and consent, putting them at risk from predators and possibly stopping them reporting abuse.

Announcing the age verification plans, Digital Economy Minister Chris Philp said: "Parents deserve peace of mind that their children are protected online from seeing things no child should see."

As well as being able to fine websites that do not follow the rules, the regulator Ofcom could block them from being accessible in the UK.

The bosses of these websites could also be held criminally liable if they fail to cooperate with Ofcom.

Previously, only commercial porn sites that allowed user-generated content were in the scope of the Online Safety Bill, but all commercial porn sites will now be covered.

Andy Burrows, of the National Society for the Prevention of Cruelty to Children (NSPCC), welcomed the strengthening of the Online Harms Bill but said it didn't go far enough.

"It's right the government has listened to calls to fix one of the gaps in the Online Safety Bill and protect children from pornography wherever it's hosted," he said.

"Crucially, they have also acted on our concerns and closed the 'Only Fans loophole' that would have let some of the riskiest sites off the hook despite allowing children access to extremely damaging material.

"But the legislation still falls short of giving children comprehensive protection from preventable abuse and harmful content and needs significant strengthening to match the government's rhetoric and focus minds at the very top of tech companies on child safety."

Proposals to make people confirm their age before accessing explicit content online were first introduced under the Digital Economy Act in 2017, but the government never enforced them.

They were officially dropped in 2019, with ministers pledging "other measures" would achieve the same results.

When the first draft of the Online Safety Bill was announced last year, campaigners were shocked it did not contain these long-promised checks.

It will be up to companies to decide how best to comply with the new rules, but Ofcom may recommend the use of certain age verification technologies.

However, the government says firms should not process or store data that is irrelevant to the purpose of checking someone's age.

Despite the widespread use of age verification technology in sectors such as online gambling, there are still fears it poses privacy risks.

Campaigners have warned that a database of pornography users would be a huge hacking target for blackmailers.

Jim Killock of the Open Rights Group, which campaigns to preserve digital rights and freedoms, said the rules would benefit age verification companies while offering "little practical benefit for child safety, and much harm to people's privacy".

"There is no indication that this proposal will protect people from tracking and profiling porn viewing," he told the BBC.

"We have to assume the same basic mistakes about privacy and security may be about to be made again."

But Iain Corby, executive director of the Age Verification Providers Association, said firms he represented had developed a wide-range of methods to prove someone's age online without disclosing their identity to the websites their visit.

"By using independent, third-party organisations which are audited and certified to comply with the highest standards of data protection and security, adults can be confident their own privacy will be preserved while their children are protected."