UK government announces that porn websites will have to verify UK users are aged 18+ by April 2018; users may be asked to verify with credit card details
Kelly Fiveash / Ars Technica UK :
Context & Ripple Effects
This 2017 announcement is the opening move of what becomes an eight-year policy saga. The April 2018 deadline slips — the government's plan to compel age verification is delayed until the end of 2018 — and the scheme is then quietly dropped in 2019 after criticism, as the BBC later reports when reviving it inside the Online Safety Bill mandate for age checks backed by fines.
What makes today's story matter in hindsight is the mechanism on display: credit card details as a de facto proof of adulthood, and ISP blocking as the enforcement backstop. That template survives every delay and reappears in Ofcom's far more intrusive toolkit — photo ID matching and facial age estimation — before the UK finally starts enforcing online child safety laws in 2025.
First-order effects
- Porn websites serving UK users must build age-verification flows by April 2018, with credit card checks as the government's suggested method, or face being blocked by ISPs.
- Age-verification vendors become immediate beneficiaries: any site wanting UK traffic now needs a third-party check service integrated before the deadline.
Second-order effects
- Privacy objections to handing card data to adult sites — the criticism credited with killing the 2019 version — force regulators to keep redesigning the mechanism, eventually shifting responsibility to Ofcom with ID-matching and facial estimation options.
- Sites weigh compliance against simply geo-blocking UK visitors, since the announced penalty structure makes non-compliance equivalent to losing UK reach anyway.
Third-order effects
- If the pattern holds, age verification stops being a porn-site rule and becomes general internet infrastructure: the 2025 enforcement round extends mandatory checks to self-harm, suicide, and eating disorder content, with Ofcom as permanent regulator.
- The repeated delay-drop-revive cycle establishes that access-control mandates survive political setbacks once child-safety framing attaches to them — each revival arrives with stricter methods than the last.
The trend: UK age-verification policy keeps collapsing under privacy criticism only to return broader and more enforceable, converging on state-supervised identity checks as standard web infrastructure.