The UK's Online Safety Act is a licence for censorship – and the rest of the world is following suit | Taylor Lorenz
The UK’s Online Safety Act, enforced on July 25, requires stringent age verification that has led to the removal of diverse online content, from memes to news. The law’s rollout is prompting similar measures in Australia, the EU, and several US states, sparking debate over privacy, censorship, and…
On July 25, the United Kingdom activated the child‑protection provisions of its Online Safety Act, obliging internet platforms to deploy "highly effective" age‑verification systems. Within weeks, users reported that everything from popular SpongeBob SquarePants GIFs to Spotify playlists, political posts, and even in‑game colour settings in titles like Minecraft were suddenly inaccessible. The abrupt blocks have ignited a broader conversation about the law’s true scope and its ripple effects across the globe.
How the UK law works and why it matters
The Online Safety Act targets material deemed "harmful" or "adult," which officially includes pornographic content, self‑harm encouragement, eating‑disorder propaganda, and hate speech. Compliance is enforced through hefty fines and the threat of criminal prosecution for non‑conforming providers. In practice, the law’s vague definitions have pushed many platforms to adopt a blanket‑removal approach: it is cheaper and less risky to block large swaths of content than to risk a single piece being flagged as non‑compliant.
Critics argue that the legislation forces all users—regardless of age—to surrender extensive biometric data to confirm they are not children. This data collection creates a permanent link between offline identity and online activity, raising red‑flag concerns about government overreach, identity theft, and the weaponisation of personal information.
Global echo: similar laws taking shape
Australia and Ireland have already passed comparable age‑verification mandates, and a coalition of European nations—including Denmark, Greece, Spain, France, and Italy—are trialling a unified verification app that could become mandatory across the EU. In the United States, eleven states are pursuing age‑verification bills, with Louisiana’s 2022 law serving as a template for Ohio, Arizona, Wyoming, Pennsylvania, New Jersey and others. At the federal level, the Kids Online Safety Act (KOSA), which would bar minors from a broad category of online material, was revived in Congress and could advance quickly.
These parallel efforts illustrate a coordinated shift toward tighter online control, often framed as child protection but increasingly viewed as a conduit for broader censorship. The bipartisan support in the US—exemplified by Democrat Senator Richard Blumenthal partnering with Republican Senator Marsha Blackburn—highlights a rare political consensus on restricting anonymity and curbing certain content, ranging from LGBTQ+ topics to political dissent.
Impact on users, creators, and niche communities
Beyond the obvious inconvenience of blocked memes, the age‑verification regime threatens specialized online spaces. Small‑scale social networks, patient‑support forums, and hobbyist communities lack the resources to implement costly verification systems, risking shutdown or forced migration to less secure platforms. A Reddit user highlighted the loss of an Alcoholics Anonymous subreddit, noting that the verification hurdle removed a vital lifeline for recovering individuals.
Journalistic outlets are also feeling the squeeze. After the UK rules took effect, platforms began flagging breaking‑news footage, war reporting, investigative pieces, and political protest coverage as "harmful" content. Even Wikipedia entries risk removal, prompting the encyclopedia’s foundation to challenge the law on privacy grounds. The resulting information vacuum limits young people’s exposure to independent reporting and critical analysis, potentially fostering a generation accustomed to sanitized, government‑approved narratives.
Privacy trade‑offs and the rise of VPN usage
As legitimate avenues narrow, users increasingly turn to virtual private networks (VPNs) to bypass restrictions. While VPNs restore access, they also expose users to additional privacy risks, such as data logging by third‑party providers and heightened vulnerability to cyber‑attacks. Moreover, the surge in VPN adoption may push younger users toward more extreme, unregulated corners of the internet, counteracting the original intent of child safety.
Tech companies stand to profit from the verification boom. Persona, a leading identity‑verification startup, recently secured a $2 billion valuation in a funding round led by Peter Thiel’s Founders Fund. Such valuations underscore the lucrative market emerging from government‑mandated compliance, but they also concentrate power in the hands of a few large platforms capable of meeting the technical and financial demands.
What comes next?
Legal challenges are already underway. Major platforms argue that the verification requirement infringes on privacy rights and hampers the free flow of information. Courts in the UK and elsewhere will need to balance child‑protection goals against fundamental civil liberties. Meanwhile, legislators in multiple jurisdictions continue to draft and refine age‑verification bills, suggesting that the UK model may become a de‑facto template for global internet governance.
For activists, the battle now centres on raising awareness of the broader implications of these laws and lobbying for safeguards that protect both children and the public’s right to information. The outcome will shape whether the internet remains a diverse, open forum or becomes a tightly regulated space where anonymity is a relic of the past.
Why it matters
The spread of age‑verification mandates threatens privacy, free speech, and the survival of niche online communities, reshaping the internet’s openness worldwide.
Key points
- UK's Online Safety Act forces mass content blocks under vague "harmful" definitions
- Similar age‑verification laws are emerging in Australia, the EU, and multiple US states
- Verification systems require extensive biometric data, raising privacy and security concerns
- Small platforms and support groups risk shutdown due to costly compliance
- Journalists and educators face new barriers to sharing news and analysis
Frequently asked questions
What does the UK Online Safety Act require from internet platforms?
It mandates that platforms implement "highly effective" age‑verification methods to block users under 18 from accessing content classified as harmful or adult, with penalties for non‑compliance.
Are only children affected by the verification process?
No—because platforms must verify every user’s age, all internet users are required to submit biometric or identity data, regardless of age.
Which other countries are adopting similar age‑verification laws?
Australia, Ireland, several EU nations testing a common app, and at least eleven US states have introduced or passed comparable legislation.
How are small online communities impacted?
They often lack the resources to implement large‑scale verification, risking shutdown or forced migration to less secure platforms.
What are the privacy risks associated with mandatory age verification?
Collecting biometric data creates a permanent link between offline identity and online activity, increasing the risk of identity theft, government surveillance, and data misuse.
