Age-Gate or Farce-Gate?

How to Lose a Generation (and Your Cyber Credibility) …

In a move that truly showcases the digital finesse of a damp teabag, Parliament has blessed us with the UK Online Safety Act 2023, yet another stroke of cyber brilliance, mandatory age verification on adult websites. Because nothing screams ‘we understand the internet’ like a group of politicians who still think Bluetooth is a dental condition.

Labour’s Peter Kyle led the charge with a rhetorical flourish that would make a tabloid editor blush, equating Nigel Farage’s objection to the new Online Safety Act’s gateway rules with siding with ‘extreme pornographers’ and, wait for it, Jimmy Savile. Subtlety, it seems, is also on annual leave. Insulting in the most pernicious way more informed colleagues and in so doing casting an arbitrary net that insinuates all users. Some vote winner he isn’t!

Beyond the political theatre, the real comedy lies in the utter absence of evidence that cyber professionals were in the room helping to shape this policy implementation. Instead of consulting cybersecurity experts, yes those pesky people who understand things like VPNs, data leakage and how teenagers actually use the internet, the government charged ahead with a digital Maginot Line, technically naive, easily bypassed and destined to be mocked on LinkedIn (great job JC 👍) within hours. Why bother with experts when you have moral panic and a soundbite?

Here’s the cyber punchline, the controls will likely encourage exactly the behaviour they were meant to prevent. Tech-savvy kids will search ‘how to get around age verification’ faster than you can say ‘proxy server‘, while concerned parents are left installing apps with more permissions than Government Communications Headquarters (GCHQ). Oops sorry already out of date, they will be using ChatGPT or their Artificial Intelligence (AI) augmentation solution of choice to spell it out for them with a step guide to configuring nation state capabilities that will equip them to do more than just visit an adult website. Rather than instilling responsible digital literacy, we’re fuelling an arms race between overreaching policy and underaged ingenuity.

The tragedy? Requiring citizens, adults and minors alike, to submit personal identity data to third parties, often routed or stored outside the UK, is not privacy by design. It’s abdication by design.

This isn’t about child safety. It’s about optics, contracts and control, at the cost of citizen data integrity.

If those responsible truly cared about safeguarding the public, they’d start with real technical scrutiny, data minimisation and domestic data stewardship.

It’s security theatre and citizens privacy is the price of admission.

Protecting children online must begin where the harm is greatest and where compliance can be resourced without excuse. Social media platforms like Facebook are the optimal starting point for enforcing the UK Online Safety Bill’s age verification measures, not only because they are among the most resource-rich players in the digital landscape, but because they are also ground zero for the most widespread and insidious forms of child abuse online. Unlike adult websites, whose content and access risks are more self-contained, social media platforms actively blend adult, youth and child users in algorithmically driven environments that facilitate grooming, coercion and exploitation at scale. These companies possess the financial capability to absorb regulatory fines and more importantly, to invest in the robust identity and age verification infrastructure needed to meet effective safety requirements. Starting with them sends a clear signal.

Until then, reflecting on this fiasco, Britain’s cyber strategy promotes itself as watertight as a sieve in a hurricane, with citizens wondering when digital legislation will be written by people who have at least heard of a browser extension.