On July 15–16, 2026, UK regulator Ofcom published its first Use of Age Assurance Report 2026, assessing how online services have implemented age checks to protect children under the Online Safety Act during the first six months since child-protection duties took effect in July 2025. The report focuses on three sectors — pornography, social media, and online dating — and reaches a mixed verdict: when implemented properly, "highly effective age assurance" (HEAA) genuinely works, but coverage remains patchy and circumvention remains easy at the margins. Ofcom's framing, echoed across coverage, amounted to a "job not done."

Why It Matters

This is the first evidence-based scorecard on the age-verification regime that has reshaped the global adult-content industry over the past year — driving Pornhub/Aylo to geo-block entire jurisdictions, prompting record Ofcom fines against 8579 LLC, 4chan, and Fapello, and feeding a wave of US state laws. Ofcom effectively conceding that "no single method eliminates circumvention" while VPN usage spikes is a tacit admission of the enforcement gap critics have flagged all along, even as the regulator insists the checks work where deployed. The pivot toward *layered*, device- and OS-level assurance is the strategically important thread: it aligns the UK with the app-store and operating-system verification models advancing in Texas (SB 2420) and via federal bills, and it raises the compliance stakes for Apple, Google, and Microsoft, not just adult sites. For the industry, the report's search-engine angle is the sleeper. If Google and Bing actually deprioritize non-compliant porn sites in results, that reshapes the traffic economics that currently reward sites willing to skip age checks — the exact "traffic arbitrage" Ofcom cited when fining Fapello. Expect the October parliamentary assessment on under-16 social media checks to be the next flashpoint.

The report lands several specific conclusions relevant to adult platforms. No single age-assurance method eliminates circumvention risk, so Ofcom now recommends layered protections across app stores, operating systems, and devices — a meaningful nod toward the device- and OS-level verification models being fought over in the US. Age inference (guessing a user's age from prior activity) has been ruled out as "highly effective" for preventing child access to porn, because it needs pre-existing user data to work. Some methods deemed acceptable for adults, like credit-card checks, are unsuitable for distinguishing 16- and 17-year-olds and will need alternatives. Ofcom also said search engines including Google and Bing have agreed to explore reducing the discoverability of non-compliant porn sites — an acknowledgment that gated sites lose traffic to un-gated rivals surfaced in search.

Ofcom paired the report with enforcement signals, calling on porn services still lacking age checks to introduce HEAA "without delay," and instructing services relying on age inference to switch methods or provide compelling effectiveness evidence. The regulator framed the report as feeding directly into the UK government's June 2026 plan to require "highly effective age assurance" to keep under-16s off social media, with Ofcom due to deliver a rapid assessment to Parliament by the end of October on how such checks could work in practice. Separately, and on the same news cycle, Ofcom opened a formal investigation into TikTok over its child-safety measures.

Sources

Update — 2026-07-17

Initial entry — story first created.