The U.K.'s Online Safety Act Has Been a Failure. Regulators Want To Broaden It Anyway.

Who could have predicted that age-gating large sections of the internet in a crusade to shield children's eyeballs from vaguely defined "harmful content" would have disastrous consequences and wouldn't ultimately protect kids? Apparently, the United Kingdom's online regulator, Ofcom, couldn't.

On Thursday, Ofcom released a report assessing whether the government should make changes to the content categories of the 2023 Online Safety Act, a set of laws which require companies operating in the U.K. to prevent children from "accessing harmful and age-inappropriate content and provide parents and children with clear and accessible ways to report problems online when they do arise."

The act's "child safety regime" (Ofcom's words) went fully into effect in 2025, when porn websites in the country began checking IDs. Unfortunately, as Reason's Elizabeth Nolan Brown has pointed out, the age-verification rule has impacted far more than adult websites. Already, the Online Safety Act has age-gated a wide range of content, including war news, the "NoFap" subreddit, and a historic art image, creating a mass chilling effect online.

Ofcom's report, however, says little about these age-gating concerns for adults, and its own findings highlight the act's underwhelming results. In the report, Ofcom notes that "Most children in the UK say they have encountered at least one piece of harmful content online in a four-week period." It adds that "at a total level there was no significant change in the proportion of children encountering harmful content over the first nine months after the children's safety duties came into force in July 2025."

So, it appears the act is requiring adults to fork over their IDs to access a wide range of content, some of which is innocuous, while playing a never-ending and unsuccessful game of whack-a-mole trying to eliminate "harmful" online content from kids' feeds.

Instead of suggesting to repeal the Online Safety Act because it does not seem to be working or because it imperils online freedom, Ofcom's report proposes to broaden the law's scope. The regulator recommends adding "body stigma content and depression content, currently identified by Ofcom as kinds of non-designated content, to the category of priority content that is harmful to children." Priority content is defined as "content that services must protect/minimise the risk of children in age groups judged to be at risk of harm from encountering." In other words, online platforms could have more reasons to potentially age-gate, block, or avoid publishing out of fear of violating the law.

The report does not address the U.K. government's plans to ban children under the age of 16 from accessing social media, and Ofcom says it will soon publish an assessment of "what highly effective age assurance looks like" for determining whether someone is 16 or older. But if the social media ban unfolds anything like it did in Australia, where kids are easily circumventing it, it is likely to flop, just as the Online Safety Act has.