GDPR

UK ‘porn block’: everything you need to know

The UK ‘porn block’ is coming into effect on July 15. After this date, all UK-based internet users will have to confirm that they are 18 or older to access adult entertainment sites. Given that Pornhub alone received 33.5 billion visits in 2018, with the UK providing the second-most users after the United States, the coming…


The UK ‘porn block’ is coming into effect on July 15. After this date, all UK-based internet users will have to confirm that they are 18 or older to access adult entertainment sites. 

Given that Pornhub alone received 33.5 billion visits in 2018, with the UK providing the second-most users after the United States, the coming age-verification filter is likely to affect a huge number of people in the UK.

While it’s often called the ‘UK porn block’ that name is not entirely accurate. The age verification law is, in reality, part of section 25 of theDigital Economy Act, which has a number of sections relating to online legislation. 

The process works like this: once July 15 2019 arrives, adult websites will need to show a splash screen to UK users when they arrive on the site. This interstitial screen must contain no adult material at all and should inform visitors that they must prove they are over 18 years old in order to continue.

If a user is able to use an approved age verification system then they’ll enter these details, which will likely be a non-identifying username and password. If they don’t have these details then the site might explain how to get them, but you won’t be able to access the site without providing them…or that’s the idea.

All adult sites, whether hosted or based in the UK or not, will need to support this. Sites which don’t support it may face a fine or be blocked in the UK entirely (or both). Eventually, when the scheme has been running for a couple of months, users will be able to report non-compliant sites. 

The British Board of Film Classification has been chosen to administer the scheme. It won’t provide age ID checks itself but it will approve providers who do. It will be responsible for fining non-compliant sites and, if needed, requesting ISPs block those which don’t verify age adequately.

The stated goal of the UK ‘porn block’ is to protect children. The UK government says that young people are too easily able to see hardcore adult video and there is a need to protect them from stumbling across it by accident. You won’t find many people who disagree with that sentiment.

However, the result will be that all consenting adults will need to jump through hoops to prove that they are old enough to access things they’re legally entitled to.

As with most things like this there’s a very good chance a lot of people won’t know how this will affect them, so expect to see some confused and frustrated people wandering the streets on July 15.

The UK porn block is designed to keep children safer online but there are still many risks (Image credit: Shutterstock)

The UK porn block is designed to keep children safer online but there are still many risks (Image credit: Shutterstock)

(Image: © Shutterstock)

When is the UK ‘porn block’ coming, and how will it work?

We know that from July 15 anyone using a website featuring content unsuitable for minors in the UK will be asked to verify their age. 

To do so users over 18 will need to provide proof that they are old enough to access age restricted sites. The verification can be done online or in a shop where a pass can be purchased that confirms the holder is aged 18 or over. 

The burden of proof in a shop is likely to be somewhat lighter than online. While you may be asked for photo ID, say a passport or driving licence, many shopkeepers will simply apply the common sense rules they currently rely on. If someone looks over 18 they probably won’t be challenged to produce ID. 

From this perspective the shop-based approach might seem more of a privacy concern. People seeking adult content could pop into a shop anywhere in the UK and buy their pass, creating the potential embarrassment of someone they know spotting them. 

Online it’s arguable that the process is more anonymous, but you will need to prove your age by uploading some form of identification. The main provider of age checking for this new legislation, AgeID claims that it won’t retain any personal information, with the site claiming that it sends your data to a third party which it then queries to verify age… and you’ll be able to choose your provider.

Once your ID and password are provided you’ll be free to log in to any age restricted site and personal information should never be exchanged. The question still remains, however, about how secure uploading an image of your passport or driving licence actually is. 

We may see different forms of age verification appear too. One natural way to do this would be for mobile networks to issue IDs to users. These companies already know and have verified your age in many cases, so issuing identification should be simple.

What are the ways someone can verify their age?

This is where things take a turn for the downright shady. Firstly, at the time of this article’s first publication in May 2019, the BBFC is listing exactly zero approved age verification systems. 

However we know there are a couple of different options that will likely be part of the approved list and this is where it starts to get a bit concerning from a privacy perspective. 

The main verification technology is called AgeID and is run by a company called Mindgeek. Looking at Mindgeek’s website you could be forgiven for assuming that this is some sort of internet security firm. It’s not. At all. 

It’s the umbrella brand behind some of the biggest adult websites in the world. Mindgeek runs PornHub, RedTube and YouPorn. It also owns content creators and provides payment and monetisation services to other producers of erotic content.

AgeID will be an online system and visitors to adult websites will need to verify their age by uploading proof that they are old enough. 

The alternative, the PortesCard, will be purchased in shops where the vendor will confirm your age. The card contains a code which is valid for 24 hours after it is purchased. A companion app for mobile will enable you to turn that code into an AgeID and to log in. 

Two kinds of PortesCard are for sale, one for a single device and another for multiple devices. There is, of course, some concern that kids will share AgeID accounts with each other, meaning that if one gets hold of a PortesCard then they will give access to others. Some security will be implemented to prevent this but it’s unlikely it will be entirely effective.

The hassles and worries of both of these systems is just one of the reasons we expect many people to turn to VPN services instead.

So, can you use a VPN to sidestep the porn block? 

Yes, it’s a cast iron certainty that search terms such as ‘best VPN for porn’ will skyrocket in the UK the day the block comes into effect. Being able to skirt around geolo

Read More

Be the first to write a comment.

Leave a Reply

GDPR

Next Wave: African data protection laws need more oomph to match GDPR

Cet article est aussi disponible en français First published 07 April, 2024 African nations’ data protection laws are, to some extent, weaker compared to Europe’s. This is because the European Union’s (EU’s) General Data Protection Regulation (GDPR) sets a high standard for digital data protection. We can think of the GDPR as a benchmark for

Cet article est aussi disponible en français

First published 07 April, 2024

African nations’ data protection laws are, to some extent, weaker compared to Europe’s. This is because the European Union’s (EU’s) General Data Protection Regulation (GDPR) sets a high standard for digital data protection. We can think of the GDPR as a benchmark for strong data protection laws. Moreover, African countries have varying levels of success in putting their data protection policies into practice. Digital governance policies in Africa can shape the continent’s progress as digital advancements grow alongside economic development.

This is why current data governance across African states must be assessed, particularly paying attention to their trends and differences. While South Africa, Kenya, and Botswana have seen rapid growth in data protection policies, they still need to catch up to the GDPR standards of the EU.


But why is this important?

Between 2020 and 2023, over 30 African countries implemented data protection laws. As expected, each new regulation brings fresh compliance obligations and penalties for non-compliance.

Next Wave continues after this ad.

The State of Tech in Africa

The first quarter of 2024 is just over and there was a lot of activity within Africa’s Tech Ecosystem in that period.
Due to varying reasons, some startups had to trim their workforce while there were others who even expanded into new territories. A couple of interesting M&A deals have also occurred.

Come and get an exclusive scoop into the details of these and more, like funding deals, at a specially curated edition of TechCabal Live on April 12 by 11am (WAT). You will also witness the State of Tech in Africa Q1 2024 report launching.

The report spotlights important trends in Q1 2024 while also delving deeper into the nitty gritty of various happenings in Africa’s Tech Space.

As a stakeholder in Africa’s Tech Ecosystem, these insights will help you position strategically and uniquely to harness the innovative progress within this sector. You don’t want to miss this.


Register here now to make sure!

This, therefore, means that organisations with operations or customers in Africa must understand the applicable laws fully. Many internet-based businesses operate or use cloud services in multiple African nations; this sometimes calls for transferring personal data across borders. This movement often occurs between African countries and regions such as the EU, UK, US, and Australia, which can pose various data protection challenges.

Understanding the importance of data privacy rules in each African country, especially limitations on data transfer, cannot be stressed enough. Organisations must also check if local laws limit using service providers within African nations and their related requirements. A grasp of the legal framework for transferring personal data from African countries is essential for compliance.


Circling back to GDPR and the EU…

Considering Europe’s stringent directive that international players adhere to its data protection standards, we must ask whether European companies maintain the same standards when handling personal data from Africans as they do with Europeans.

Next Wave continues after this ad.

DICE: The Tech Ecosystem Mixer

On April 26th, H.M Hannatu Musa Musawa, the Minister for Art, Culture & the Creative Economy, alongside distinguished experts, will speak at the DICE Ecosystem Mixer 2.0, with a focus on Africa’s creative economy.


Register here for a chance to attend.

This research revealed disparities in digital rights granted by subsidiaries of European telecom giants Orange and Vodafone in Senegal and Kenya compared to their European counterparts. The discrepancies included lack of transparency in publishing terms of use for prepaid services, minimal disclosure regarding data collection practices, third-party access, and security measures.

This highlights how, despite the principles underpinning the European data protection regime, companies may exploit regulatory gaps in countries to their advantage, compromising data privacy standards.

Many Western tech companies are notorious for disregarding user data privacy, offering convenience at the expense of the vast amounts of personal data they harvest. This trend is due to the absence of markets where individuals can understand the value of their data, leading them to exchange it for minimal gains. This issue is common in Africa and less so in Europe, where the GDPR exists.

Consider the case of Worldcoin, supported by OpenAI’s CEO, Sam Altman, which uses blockchain technology to store biometrically derived tokens. It retains personal data indefinitely without allowing users to delete their information.

When Worldcoin launched its services in Kenya, it incentivised people with around $50 to get them to scan their irises. Despite concerns about data protection, Kenya initially licensed Worldcoin’s operations. Before its suspension in August 2023, Worldcoin had become very popular, scanning the irises of up to 350,000 Kenyans, most attracted by the monetary incentive. While these funds may temporarily alleviate financial constraints for locals participating in the exercise, there is a compelling argument that Worldcoin’s model is exploitative.

The other day, Worldcoin was temporarily banned in Portugal, following similar restrictions in Spain, leaving Germany as its sole European market for biometric data collection. Portugal’s data protection office imposed the ban after complaints about scanning children’s irises.

This case underscores Europe’s stringent stance on digital data protection. EU data protection laws afford individuals rights over their data, including the ability to edit or delete it. This was an obvious legal conflict with Worldcoin’s approach, highlighting the split in digital privacy standards between Africa and Europe.



Bottom line

African nations must tailor data protection laws to their needs and enforce them consistently.

While directly copying the GDPR may not work, Africa can learn from the EU’s approach to demand global compliance. Despite initial uncertainties, harsh fines on non-comp

!–Subtitle>

!–Subtitle–>!–Text>

!–Text>!–Ad>!–Subtitle>!–Text>!–Text>!–Subtitle–>!–Ad>!–Subtitle>!–Subtitle–>!–Main>!–Date>!–Date–>!–TopBanner_END–>!–TopBanner
a>!–div>
Read More

Continue Reading
GDPR

Chrome’s latest feature blocks cookie-stealing hackers

Cookies aren’t just something sites have to annoy you about every single #$%&ing time you visit them because of the GDPR. They’re one of the most basic ways for sites to identify specific users, for better and worse. Stealing and spoofing those cookies is a popular vector for identity theft attacks…

Cookies aren’t just something sites have to annoy you about every single #$%&ing time you visit them because of the GDPR. They’re one of the most basic ways for sites to identify specific users, for better and worse. Stealing and spoofing those cookies is a popular vector for identity theft attacks…
Read More

Continue Reading
GDPR

Quinyx: Revolutionizing workforce management and productivity

Quinyx: Discover the power of intuitive rostering and flexible modules to take your company to the next level. Tested by experts, GDPR compliant, and loved by users…

Quinyx: Discover the power of intuitive rostering and flexible modules to take your company to the next level. Tested by experts, GDPR compliant, and loved by users…
Read More

Continue Reading
GDPR

Timworks: Seamless client support and team management

Timworks: the all-in-one client support and team management tool. Seamlessly integrate your favorite tools, ensure GDPR compliance, and delight your clients with real-time communication…

Timworks: the all-in-one client support and team management tool. Seamlessly integrate your favorite tools, ensure GDPR compliance, and delight your clients with real-time communication…
Read More

Continue Reading