Pornography Age Checks: What the Online Safety Act Requires
Adult websites are now required to use highly effective age assurance to prevent children accessing pornographic content. What this means and how it works.
One of the most significant and concrete requirements of the Online Safety Act is the age verification duty for pornographic content. Sites that publish or host pornographic material — whether major adult platforms or smaller sites — must now use technically effective age assurance to prevent access by under-18s. This duty came into force in 2025, though full implementation across all affected services continues to be enforced by Ofcom.
Which sites are affected?
The duty applies to any service that publishes or hosts pornographic content to UK users. This includes major adult content platforms, subscription-based adult sites, and user-generated content sites where pornographic material is available. It also applies to search services that index pornographic content. Services where pornographic content is a minor or incidental feature of an otherwise non-pornographic service may be treated differently depending on the proportion of content involved.
Key takeaway: Any site that publishes pornographic content to UK users must verify the age of users — large or small.
What methods are acceptable?
Ofcom's guidance specifies that highly effective age assurance for pornographic content may include: credit or debit card verification (as most under-18s do not hold independent accounts); digital identity verification against government-issued ID; mobile network operator age checks; and face age estimation technology that processes an image locally without storing it. Methods based solely on self-declared age or a date-of-birth entry are not considered highly effective and do not satisfy the duty.
Key takeaway: Credit card checks, digital ID, mobile operator checks, and face estimation are all acceptable — self-declaration alone is not.
Privacy considerations for adults
Adult users who wish to access legal pornographic content are understandably concerned about the privacy implications of age verification. Under data protection law, services must only collect the minimum data necessary and must not retain identity verification data for longer than needed. Privacy-preserving options — such as using a trusted third-party age verification provider that confirms only whether the user is over 18, without sharing identity details with the pornographic site — are available and encouraged by Ofcom's approach.
Key takeaway: Reputable age verification providers confirm only age, not identity details — look for services using third-party verification.
Non-compliant sites and what to do
If you become aware of a pornographic website that is accessible to UK users without any age check — particularly one you are concerned a child may have accessed — you can report it to Ofcom. Ofcom can take enforcement action against non-compliant sites, including requiring app stores and payment providers to withdraw services from the site. This is a meaningful sanction even for sites based outside the UK.
Key takeaway: Non-compliant adult sites can be reported to Ofcom, which can require app stores and payment providers to cut off non-compliant services.
What this means for families in practice
For parents, the practical effect is that most mainstream adult sites your child might stumble across should now present an age verification prompt. This adds a meaningful barrier, though it does not make access impossible — children may use VPNs, use devices outside the home, or access sites via shared adult accounts. As before, network-level filtering through your internet service provider and router, combined with device controls, remains an important additional layer of protection.
Key takeaway: Age checks on adult sites add a significant barrier but are not impenetrable — network and device-level controls remain important.
What the Act does
Requires all UK-accessible pornographic content sites to implement highly effective age assurance.
Gives Ofcom enforcement powers including requiring app store and payment provider withdrawal from non-compliant sites.
Aligns with existing ICO data protection requirements to limit the personal data collected during age verification.
What the Act does not do
Understanding the limits of the Act helps you set realistic expectations when using complaint and reporting processes.
Require a national database of adult content users — age verification can be done privately through third-party providers.
Make circumvention impossible — VPNs and shared accounts remain potential workarounds.
Ban legal adult pornography — only access by under-18s is prohibited.
Practical steps
Enable network-level filtering through your ISP (all major UK ISPs offer a family filter) as an additional layer alongside platform age checks.
Check your router settings — many routers allow content filtering by category.
If you find a pornographic site accessible to UK users without any age check, report it to Ofcom via their online tool.
Talk to your children, in age-appropriate terms, about why some content is restricted and what to do if they encounter something uncomfortable.
Frequently asked questions
Do I have to prove my identity to access adult content legally?
You need to verify you are over 18, but this does not necessarily require sharing your identity. Privacy-preserving age verification services can confirm your age to the adult site without revealing your name or other personal details. Credit card checks are one common method that does not require document scanning.
Does this apply to sites based outside the UK?
Yes, if the site is accessible to and used by UK residents. Ofcom has jurisdiction over services with significant UK user bases regardless of where they are based. Enforcement tools include requiring UK app stores, payment processors, and internet service providers to block or withdraw services from non-compliant foreign sites.
Sources and further reading
Related guides
Last reviewed: 19 April 2026
This is practical educational content to support families. For case-specific concerns about a child's safety, contact the NSPCC helpline on 0808 800 5000 or your local safeguarding team.
Was this page helpful?