The Online Safety Act (a terrible piece of legislation which has been made law in the UK) brings into focus a group of people who know nothing about how the Internet works. And that group of people are \u2013 mostly \u2013 Labour Party Members of Parliament (because the OSA was passed into law by them). They could have killed it, they could have called in industry experts who would have advised on it, they could have called in technical specialists who would have pointed out the horribly obvious shortcomings of the legislation. But no, that would have meant sitting down with people who know better, people who understand how things work and one thing the current Labour Government is proving itself to be really very good at is not listening to experts.<\/p>\n\n\n\n
Let\u2019s start with a basic understanding:<\/p>\n\n\n\n
Websites get hacked<\/strong> How does the OSA work?<\/strong> Well that\u2019s OK isn\u2019t it?<\/strong> How does third-party age verification work?<\/strong> Oh damn. What does this mean?<\/strong> Is there any way around this problem?<\/strong> What\u2019s the solution?<\/strong> The Online Safety Act (a terrible piece of legislation which has been made law in the UK) brings into focus a group of people who<\/p>\n","protected":false},"author":13,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-15955","post","type-post","status-publish","format-standard","hentry","category-stuff","two-columns"],"_links":{"self":[{"href":"https:\/\/brennigjones.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/15955","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/brennigjones.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/brennigjones.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/brennigjones.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/brennigjones.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=15955"}],"version-history":[{"count":1,"href":"https:\/\/brennigjones.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/15955\/revisions"}],"predecessor-version":[{"id":15956,"href":"https:\/\/brennigjones.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/15955\/revisions\/15956"}],"wp:attachment":[{"href":"https:\/\/brennigjones.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=15955"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/brennigjones.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=15955"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/brennigjones.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=15955"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
Not all websites, obviously. Some are incredibly professional and scrupulous in their approach to user safety and data security while others\u2026 well, others just aren\u2019t either professional or scrupulous<\/p>\n\n\n\n
The OSA requires age verification. In a nutshell, every single user in the UK who wants to access content of an adult (18+) nature is required to verify their age before they can access that content<\/p>\n\n\n\n
No, it really isn\u2019t. The age verification this egregious piece of legislation has put in place is third-party age verification<\/p>\n\n\n\n
The user must show their driving licence or their passport to a third-party which is chosen by the adult content platform<\/em><\/p>\n\n\n\n
The OSA specifies no user data security or safety mechanisms around this type of third-party age verification service. Not a single one. These age-verification services could be in any country in the world and they could be run by any number of unscrupulous individuals. There\u2019s nothing in the OSA about protecting the users data, nothing at all! The user presents a third-party website with a copy of their passport and\/or driving licence and essentially there are no safeguards around what happens to that data. That users data could be available on the Dark Web within 15 minutes. This is a terrific example of really bad legislation<\/p>\n\n\n\n
The user doesn\u2019t have to photograph their passport or driving licence. Whew! Close call. They can self-verify with the same third-party<\/em> by having their photograph taken and entering a bunch of private data but, let\u2019s say the quiet bit out loud\u2026 it\u2019s with the same age verification service and this means it\u2019s the same thing! The user is still giving their personal data and their photograph to an unknown third-party which was chosen by a (probably) foreign website in the blind hope that nothing is going to go awry. Newsflash\u2026 It\u2019s going to go awry. There will be data leaks. There will be data for sale. Users will be subject to fraud. And why? Because the OSA provides absolutely no protection for the users personal data.<\/p>\n\n\n\n
The UK Government could fix all of these problems if they could get a grip on what the problem really is, but they\u2019re too busy chasing headlines and running after tabloid scare stories which don\u2019t actually exist. Ah well.<\/p>\n","protected":false},"excerpt":{"rendered":"