\n<\/p>\n
Ofcom, the U.K.\u2019s internet safety regulator, has published another new draft guidance as it continues to implement the Online Safety Act (OSA) \u2014 the latest set of recommendations aim to support in-scope firms to meet legal obligations to protect women and girls from online threats like harassment and bullying, misogyny, and intimate image abuse.<\/p>\n
The government has said that protecting women and girls is a priority for its implementation of the OSA. Certain forms of (predominantly) misogynist abuse \u2014 such as sharing intimate images without consent or using AI tools to create deepfake porn that targets individuals \u2014 are explicitly set out in the law as enforcement priorities<\/a>.<\/p>\n The online safety regulation, which was approved by the U.K. parliament back in September 2023<\/a>, has faced criticism that it\u2019s not up to the task of reforming platform giants, despite containing substantial penalties for non-compliance \u2014 up to 10% of global annual turnover.<\/p>\n Child safety campaigners have also expressed frustration over how long it\u2019s taking to implement the law, as well as doubting whether it will have the desired effect.<\/p>\n In an interview with the BBC<\/a> in January, even the technology minister Peter Kyle \u2014 who inherited the legislation from the previous government \u2014 called it \u201cvery uneven\u201d and \u201cunsatisfactory.\u201d But the government is sticking with the approach. Part of the discontent around the OSA can be traced back to the long lead time ministers allowed for implementing the regime, which requires parliament to approve Ofcom compliance guidance.<\/p>\n However, enforcement is expected to start to kick in soon in relation to core requirements on tackling illegal content and child protection. Other aspects of OSA compliance will take longer to implement. And Ofcom concedes this latest package of practice recommendations won\u2019t become fully enforceable until 2027 or later.<\/p>\n \u201cThe first duties of the Online Safety Act are coming into force next month,\u201d Ofcom\u2019s Jessica Smith, who led development of the female safety-focused guidance, told TechCrunch in an interview. \u201cSo we will be enforcing against some of the core duties of the Online Safety Act ahead of this guidance [itself becoming enforceable].\u201d<\/p>\n The new draft guidance on keeping women and girls safe online is intended to supplement earlier broader Ofcom guidance on illegal content \u2014 which also, for example, provides recommendations for protecting minors from seeing adult content online.<\/p>\n In December, the regulator published its finalized guidance on how platforms and services should shrink risks related to illegal content<\/a>, an area where child protection is a clear priority.<\/p>\n It has also previously produced a Children\u2019s Safety Code<\/a>, which recommends online services dial up age checks and content filtering to ensure kids are not exposed to inappropriate content such as pornography. And as it\u2019s worked toward implementing the online safety regime, it\u2019s also developed recommendations for age assurance technologies for adult content websites<\/a>, with the aim of pushing porn sites to take effective steps preventing minors from accessing age-inappropriate content.<\/p>\n The latest set of guidance was developed with help from victims, survivors, women\u2019s advocacy groups, and safety experts, per Ofcom. It covers four major areas where the regulator says females are disproportionately affected by online harm \u2014 namely: online misogyny; pile-ons and online harassment; online domestic abuse; and intimate image abuse.<\/p>\n Ofcom\u2019s top-line recommendation urges in-scope services and platforms to take a \u201csafety by design\u201d approach. Smith told us the regulator wants to encourage tech firms to \u201ctake a step back\u201d and \u201cthink about their user experience in the round.\u201d While she acknowledged some services have put in place some measures that are helpful in shrinking online risks in this area, she argued there\u2019s still a lack of holistic thinking when it comes to prioritizing the safety of women and girls.<\/p>\n \u201cWhat we\u2019re really asking for is just a sort of step change in how the design processes work,\u201d she told us, saying the goal is to ensure that safety considerations are baked into product design. <\/p>\n She highlighted the rise of image generating AI services, which she noted have led to \u201cmassive\u201d growth in deepfake intimate image abuse as an example of where technologists could have taken proactive measures to crimp the risks of their tools being weaponized to target women and girls \u2014 yet did not.<\/p>\n \u201cWe think that there are sensible things that services could do at the design phase which would help to address the risk of some of those harms,\u201d she suggested. <\/p>\n Examples of \u201cgood\u201d industry practices Ofcom highlights in the guidance includes online services taking actions such as:<\/p>\n As is the case with all Ofcom\u2019s OSA guidance, not every measure will be relevant for every type or size of service \u2014 since the law applies to online services large and small, and cuts across various arenas, from social media, to online dating, gaming, forums and messaging apps, to name a few. So a big part of the work for in-scope companies will be understanding what compliance means in the context of their product.<\/p>\n When asked if Ofcom had identified any services currently meeting the guidance\u2019s standards, Smith suggested they had not. \u201cThere\u2019s still a lot of work to do across the industry,\u201d she said.<\/p>\n She also tacitly acknowledged that there may be growing challenges given some of the retrograde steps taken vis-\u00e0-vis trust and safety by some major industry players. For example, since taking over Twitter and rebranding the social network as X, Elon Musk has gutted its trust and safety headcount \u2014 in favor of pursuing what he has framed as a maximalist approach to free speech.<\/p>\n In recent months, Meta \u2014 which owns Facebook and Instagram \u2014 appears to have taken some mimicking steps, saying it\u2019s ending thirty-party fact-checking contracts in favor of deploying an X-style \u201ccommunity notes\u201d system of crowdsourced labeling on content disputes, for example.<\/p>\n Smith suggested that Ofcom\u2019s response to such high-level shifts \u2014 where operators\u2019 actions could risk dialing up, rather than damping down, online harms \u2014 will focus on using transparency and information-gathering powers it wields under the OSA to illustrate impacts and drive user awareness.<\/p>\n So, in short, the tactic here looks set to be \u201cname and shame\u201d \u2014 at least in the first instance.<\/p>\n \u201cOnce we finalize the guidance, we will produce a [market] report \u2026 about who is using the guidance, who is following what steps, what kind of outcomes they\u2019re achieving for their users who are women and girls, and really shine a light on what protections are in place on different platforms so that users can make informed choices about where they spend their time online,\u201d she told us.<\/p>\n Smith suggested that companies wanting to avoid the risk of being publicly shamed for poor performance on women\u2019s safety will be able to turn to Ofcom\u2019s guidance for \u201cpractical steps\u201d on how to improve the situation for their users, and address the risk of reputational harm too. <\/p>\n \u201cPlatforms that are operating in the U.K. will have to comply with the U.K. law,\u201d she added in the context of the discussion on major platforms de-emphasizing trust and safety. \u201cSo that means complying with the illegal harms duties and the protection of children duties under the Online Safety Act.\u201d<\/p>\n \u201cI think this is where our transparency powers also come in \u2014 if the industry is changing direction and harms are increasing, this is where we will be able to shine a light and share relevant information with U.K. users, with media, with parliamentarians.\u201d<\/p>\n One type of online harm where Ofcom is explicitly beefing up its recommendations even before it\u2019s actively started OSA enforcement is intimate image abuse \u2014 as the latest draft guidance suggests the use hash matching to detect and remove such abusive imagery, whereas earlier Ofcom recommendations did not go that far. <\/p>\n \u201cWe\u2019ve included additional steps in this guidance that go beyond what we\u2019ve already set out in our codes,\u201d Smith noted, confirming Ofcom plans to update its earlier codes to incorporate this change \u201cin the near future.\u201d<\/p>\n \u201cSo this is a way of saying to platforms that you can get ahead of that enforceable requirement by following the steps that are set down in this guidance,\u201d she added.<\/p>\n Ofcom recommended the use of hash matching technology to counter intimate image abuse due to a substantial increase in this risk, per Smith \u2014 especially in relation to AI-generated deepfake image abuse.<\/p>\n \u201cThere was more deepfake intimate image abuse reported in 2023 than in all previous years combined,\u201d she noted, adding that Ofcom has also gathered more evidence on the effectiveness of hash matching to tackle this harm. <\/p>\n The draft guidance as a whole will now undergo consultation \u2014 with Ofcom inviting feedback until May 23, 2025 \u2014 after which it will produce final guidance by the end of this year. <\/p>\n A full 18 months after that, Ofcom will then produce its first report reviewing industry practice in this area.<\/p>\n \u201cWe\u2019re getting into 2027 before we\u2019re producing our first report on who\u2019s doing what [to protect women and girls online] \u2014 but there\u2019s nothing to stop platforms acting now,\u201d she added. <\/p>\n Responding to criticism that the OSA is taking Ofcom too long to implement, she said it\u2019s right that the regulator consults on compliance measures. However, with the final measure taking effect next month, she noted that Ofcom anticipates a shift in the conversation surrounding the issue, too.<\/p>\n \u201c[T]hat will really start to change the conversation with platforms, in particular,\u201d she predicted, adding that it will also be in a position to start demonstrating progress on moving the needle when it comes to reducing online harms.<\/p>\nApproaching the enforcement start line<\/h2>\n
Safety by design<\/h2>\n
\n
Transparency<\/h2>\n
Tech to tackle deepfake porn <\/h2>\n