Yahoo Finance UK Data Regulator Tackles Porn Sites Over Children’s Access
(Bloomberg) -- The UK’s Information Commissioner’s Office has pledged to crack down on porn sites and other adult-only services to ensure they are taking steps, such as verifying users’ ages, to prevent children’s access, the regulator said Friday.
Most Read from Bloomberg
Russia Privately Warns of Deep and Prolonged Economic Damage
Indian Billionaire Closes In on Bezos With 1,000% Stock Surge
Ukraine Latest: US Says Russia Seeks Munitions From North Korea
California Skirts Blackouts With Heat Wave to Test Grid Again
The new enforcement plans are a reversal for the ICO, which had previously maintained that services aimed at adults weren’t subject to the Children’s Code or Age Appropriate Design Code, a set of rules that guide how the UK Data Protection Act should be applied to digital services for children. It also follows a Bloomberg News report last month that showed the regulator hadn’t enforced a single child-protection case in the two years since the Children’s Code came into effect.
Read More: UK’s Data Regulator Yet to Enforce Single Child Protection Case
Companies that break the rules can face fines of as much as 4% of annual global revenue.
The data watchdog changed its position after facing a legal challenge from eleven civil society groups in December 2021. Those groups, including the NSPCC, Barnardo’s, and CHIS, argued that the wording of the code covers all services “likely to be accessed” by children and not just services aimed at children. The groups said that allowing children to access adult-only services poses data protection harms in addition to content harms.
“We have revised our position,” said John Edwards, who became Information Commissioner in January 2022. “We now accept that if there are a significant number of children accessing the sites they are in the aegis of the code.”
The organizations -- including the National Society for the Prevention of Cruelty to Children, children’s charity Barnardo’s and 5Rights, which advocates for child-safe digital design -- said that allowing children to access adult-only services poses risks to data-protection in addition to exposing them to harmful content.
“We have revised our position,” Edwards said. “We now accept that if there are a significant number of children accessing the sites, they are in the aegis of the code.”
“We now accept that if there are a significant number of children accessing the sites, they are in the aegis of the code.”
- Information Commissioner John Edwards
Child online safety groups welcomed the announcement.
“It’s brilliant news if the ICO is going to move against these porn sites who have known for a very long time that what they are doing is wrong, but never felt any legal pressure to do anything,” said John Carr, from the Children’s Charities Coalition on Internet Safety, which spearheaded the legal challenge. “These sites shouldn’t be processing children’s data.”
The ICO will engage with adult-only services, such as Pornhub and xHamster, to make it clear that they must comply with the code by preventing children’s access. If a company can show their services are not accessed by a significant number of children, Edwards said, they would not be subject to the code. The regulator was yet to determine the threshold for what it would consider to be a “significant” number of children, he added.
Pornhub and xHamster did not respond to requests for comment.
Plans to force porn sites to verify the ages of visitors were first introduced in the UK through the Digital Economy Act of 2017, but were dropped two years later after criticism from privacy campaigners over the prospect of a database of porn users. Age assurance for adult sites is also a provision in the Online Safety Bill, a draft regulation that would compel websites to protect children from harmful content, however that won’t be enforced until 2025, according to Ofcom’s road map.
The ICO’s announcement coincides with the second anniversary of the Children’s Code, which came into force in September 2020 with a 12-month grace period.
The regulator said it has been investigating four companies for non-compliance with the code, and auditing an additional nine. A spokeswoman declined to name any of the 13 companies.
Many platforms including Instagram, Facebook, Youtube and Google have made voluntary changes to children’s accounts to comply with the code. Changes include disabling personalized ads, preventing adults from messaging minors, defaulting accounts to private and switching off autoplay.
“The result is that children are better protected online in 2022 than they were in 2021,” said Edwards.
Most Read from Bloomberg Businessweek
Women Who Stay Single and Don’t Have Kids Are Getting Richer
Startup Wants to Chart Path to More Equitable Urban Development
Russia’s Conspiracy-Theory Factory Is Swaying a Brand-New Audience
A New Contaminant Found in Popular Drugs Could Cost Big Pharma Millions
©2022 Bloomberg L.P.
