Age Verify: Ensuring Responsible Access for Everyone

Over the past decade, the UK has established itself as a leader in online safety and data protection.  The GDPR (General Data Protection Regulation) is arguably the most comprehensive and influential privacy law focused on online data, with both EU and UK specific regulations, and served as a model for many other data privacy laws worldwide.

As of July 25, 2025, Ofcom, the UK's communications regulator, will commence active enforcement of critical provisions within the Online Safety Act (OSA) with the primary focus being the safeguarding of children. This initiative represents a crucial stride towards holding online platforms responsible for the content disseminated through their services, thereby fostering a more secure online landscape, particularly for younger users.

New regulations require online platforms to implement stricter age verification for content harmful to minors and filter out material promoting self-harm, eating disorders, and suicide. A new code of practice, detailing over 40 safety measures, will also be enforced to protect children.

Stricter age verification practices mean self-declaration of the question, “Are you over 18?” will no longer suffice. Online platforms will need to use trusted data sources for age confirmation without negatively impacting the user journey. 

Enter Age Verify via the Shush Sherlock platform.  

Age Verify uses a consumer’s mobile number to confirm the age of the user against subscriber data from the mobile network operator. 

No personal data is exposed nor stored. No documents required. No friction. Just simple, seamless, silent verification via backend APIs, all in alignment with GDPR, PAS 1296, and the new Children’s Codes. 

According to PricewaterhouseCoopers, the rules affect tens of thousands of businesses of all sizes worldwide, not just those based in the UK¹. They provide insights to the regulator’s view and guidance on what companies should do next.

If you are not thinking about using trusted mobile network operator data to solve for the new OSA provisions, it’s time.

References:

¹https://www.pwc.com/us/en/services/consulting/cybersecurity-risk-regulatory/library/tech-regulatory-policy-developments/uk-online-safety-act.html

²https://www.gov.uk/government/publications/online-safety-act-explainer/online-safety-act-explainer

³https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/roadmap-to-regulation

⁴https://www.latham.london/2025/06/uk-online-safety-act-summer-2025-deadlines/