The Government is committed to having the Online Safety regulatory regime operational as soon as possible. During passage of the Act, we set an 18-month deadline for Ofcom to finalise certain guidance and codes of practice, including those relating to child safety duties and duties on regulated provider pornographic content.

Ofcom published its draft guidance for Part 5 of the Act (provider pornographic content) on 5 December 2023. The draft codes for children’s safety duties will follow in spring next year. Collectively, these documents will set out the steps firms should take regarding age verification and age estimation measures to prevent children’s access to online pornography. Once Ofcom has issued its final codes of practice and guidance, we will commence the corresponding duties.

We have been clear that we expect companies to take steps now to improve safety, and not wait for codes of practice or guidance to come into force before acting.

Ofcom, as the independent regulator of the Online Safety Act 2023 will decide on the stakeholder engagement it will carry out. It has said that it will engage with a range of stakeholders as it develops its guidance and codes of practice for the regulatory regime.

Indeed. One of the issues my department has been discussing with Ofcom is age verification and age assurance. We have to remember that age verification is one form of age assurance. The other thing we have to be aware of is how technology changes very quickly, so we must make sure that we can be as flexible as possible so that Ofcom can update its guidelines or advice on tackling this. We are clear that we do not want to be technology-specific. We want to make sure that it is future-proofed when it comes to age verification and age assurance.

Protecting children is at the heart of our online harms agenda, and wider government priorities. Our Online Harms proposals will deliver a higher level of protection for children than for the typical adult user.

Age assurance is the term used to describe the broad range of technical measures that can be used by a service to establish the age of their users. Age verification is a form of age assurance that provides the highest level of confidence in a user’s age. Currently age verification measures require a user's age to be established through a full identity verification process, for example through passport or credit card data..

We expect companies to use a proportionate range of tools, including both age assurance and age verification technologies, to prevent children accessing age-inappropriate content such as online pornography and to protect them from other harms.

We will be setting out further details on our approach for protecting children, including the use of age assurance, in the full government response to the Online Harms White Paper consultation, which will be published this year. We will follow this with legislation, which will be ready early next year.