Online platforms operating in Britain have until the end of this month to put automated detection technology in place to stop the spread of non-consensual intimate images, including AI-generated deepfakes, or to demonstrate that what they do instead works as well.
The communications regulator Ofcom opened an enforcement programme on 9 September to monitor how technology firms are meeting that duty. Companies that fail to comply face fines of up to 10 per cent of their global annual revenue.
The technology at issue is hash matching, which converts an image into a digital fingerprint that can be checked against later attempts to upload the same picture, without the image itself having to be compared by hand or leave the victim’s possession.
“Non-consensual intimate image abuse can have a devastating impact on victims, causing lasting distress and harm,” said Almudena Lara, Ofcom’s online safety policy development director.
“Technology companies now have a legal responsibility to put the right tools in place to stop this kind of deeply harmful content spreading on their services. The deadline is fast approaching and firms that ultimately fail to comply with their duties can expect us to take robust action under our enforcement programme.”
The helpline behind the database
Ofcom said it had partnered with SWGfL, the organisation that runs the StopNCII.org hash database and the Revenge Porn Helpline, to share information and evidence on what works. It continues to recommend that platforms use StopNCII’s tool.
David Wright, SWGfL’s chief executive, said demand on the helpline was growing sharply, and that the organisation’s research suggested more than 369,000 women in the United Kingdom experience this abuse each year.
“Requiring platforms to adopt hash matching is a vital shift toward stopping this abuse before it spreads, rather than only responding once the damage is already done,” he said. “The infrastructure is already in place and ready for platforms to use.”
Forty-eight hours
Ofcom said it would consult by the end of this year on strengthening its Illegal Harms Codes of Practice to reflect a change in the law that will require platforms to take down reported non-consensual intimate images within 48 hours.
That is the same deadline set by the Take It Down Act in the United States, under which a man in Ohio was sentenced to 15 years last week in the first prosecution brought since the law was enacted.
A wider call for evidence
Separately, Ofcom has asked academics, survivor and victim support groups and others for evidence on how women’s and girls’ experiences online have changed since it published guidance for a safer life online for women and girls last year. Responses are due by 6 November.
Alongside intimate image abuse, that guidance asked services to reduce the reach and spread of misogynistic abuse and sexual violence, prevent coordinated pile-ons and harassment, strengthen privacy protections including limits on location-sharing features, and improve reporting and support tools for victims.
Ofcom said it would publish a report next summer on how far the industry had got. If the industry falls short, it said, it will consider making formal recommendations to government on where the Online Safety Act may need to be strengthened.










